Business Operations
Business Operations
With nearly 150 years of experience, our teams across our unique value chain focus on safely delivering reliable energy now and for the future.
Sustainability
Sustainability
Sustainability shapes how we define and execute our strategy, which supports our long-term resilience and competitiveness.
Safety & Community
Safety & Community
We put safety first to strengthen the communities we serve.
Investors
Investors
Find relevant financial and operating information about our company for institutional and individual investors.
Newsroom
Newsroom
Stay up to date with the latest news releases, company stories and publications.
About Us
About Us
Our mission is to provide energy and improve lives. We are excited about the future of energy and helping the world move forward.

Phillips 66 Workforce Identity Verification – Notice at Collection

Last Updated: April 17, 2026

This Phillips 66 Workforce Identity Verification – Notice at Collection (“Notice”) applies to employees, contractors, and other workforce members of Phillips 66 Company and its affiliates (“Phillips 66,” “we,” “us,” “our”) who are asked to complete an identity verification process when contacting the IT Service Desk for certain account-related requests, such as password resets or account unlocks.

This notice supplements our Personal Data Privacy Policy, available in the Phillips 66 Policy Center for authorized workforce users, and does not apply to personal data collected through other Phillips 66 services, websites, or employment processes. For those, please refer to the Phillips 66 Privacy Statement.

What Personal Data We Collect

When you complete the identity verification process, Phillips 66 and our service providers may collect the following categories of personal data:

Identifiers and contact information (e.g., name, email address).
Government identifiers (e.g., driver’s license, state ID, passport, national ID), including information encoded in an ID barcode where applicable.
Geolocation data (including precise or near-precise location where available from device/network signals during the verification session).
Date of birth, age, and sex/gender (as encoded in your identity document or derived from it).
Device and session information (e.g., IP address, device/browser information, and other security signals).
Verification results (e.g., pass/fail outcome and a transaction/reference number).

California residents: Under California law, some of the information above may be considered Sensitive Personal Data, such as government ID numbers and precise geolocation.

How We Use Your Personal Data

We collect and use the personal data described above for the following specific purposes:

To confirm your identity before processing high-risk IT account requests, such as password resets, multi-factor authentication re-enrollment, and account unlocks, in order to prevent unauthorized access to Phillips 66 systems and accounts.
To verify your government-issued ID against the records of the issuing authority (for U.S. IDs, through the American Association of Motor Vehicle Administrators network).
To detect fraud signals, including recent SIM swap activity and other indicators that a verification session may be compromised.
To maintain an audit record of identity verification transactions, as required by applicable cybersecurity regulations and Phillips 66’s internal security policies.
To comply with legal obligations, including access control requirements under applicable cybersecurity laws and regulations.

Phillips 66 shares personal data collected during identity verification with the following categories of entities, solely for the purposes described above:

Service providers that perform identity verification and fraud prevention services on our behalf.
Mobile network operators and related verification providers, where phone-based verification signals are used (for example, to reduce fraud risk).
Government authorities and verification sources/providers, where needed to validate identity attributes associated with government-issued IDs.

Phillips 66 does not “sell” or “share” personal data for cross-context behavioral advertising as part of the identity verification process.

How Long We Keep Your Personal Data

We retain personal data collected for the identity verification process only as long as reasonably necessary to (1) complete identity verification and your IT Service Desk request and (2) maintain required security and audit records (for example, verification outcomes, transaction references, and related service logs). We then delete or archive it in accordance with our retention schedule and legal requirements.

For more information about how Phillips 66 handles personal data retention across its operations, please see the Personal Data Privacy Policy.

Your Privacy Rights

Depending on the state where you reside, you may have rights with respect to the personal data we collect during this process. These rights may include the right to know what personal data we have collected about you, the right to request correction of inaccurate personal data, and the right to request deletion of your personal data, subject to applicable exceptions.

For California residents, additional rights are described in the Phillips 66 California Privacy Statement, including the right to know the specific pieces of personal data collected, the right to opt out of the sale or sharing of personal data (which is not applicable here, as we do not sell or share), and the right to non-discrimination for exercising your privacy rights.

To exercise any of your rights directly or through the use of an authorized agent, you may submit a request through our webform or call us at 1.800.527.5476.

Contact Us

If you have questions regarding this notice or our handling of personal data, you may contact us at phillips66.com/contact.