Cenovus respects the privacy of personal information about individuals impacted by its operations, including exploration, development, production and retail activities. Cenovus has prepared this Privacy Statement to inform you of its practices regarding the collection, use and disclosure of personal information about you and to assure you that Cenovus is committed to protecting your personal information. Personal information means information about an identifiable individual, and includes information about you such as your name, home address, email address, or telephone number. If you complete an application or order form, enter a contest, or submit other information to us, you may be providing personal information.

When collecting personal information from you, we will explain how we intend to use it, we will collect only what we believe is reasonably necessary to meet those purposes, and we will not use or disclose it for other unrelated purposes without your consent, except in the limited circumstances prescribed by applicable law.

Cenovus collects personal information about individuals participating in or impacted by its exploration, development, production and retail activities, including information regarding customers, investors, security holders, financial analysts and individuals owning, accessing, using or occupying lands where Cenovus is, was or may be conducting activities. Information that Cenovus collects includes, but is not limited to:

• contact and identification information, including name, address, email address, and telephone number;
• property information, including title, ownership, land surveys, real property reports, road use and property access information, land use and land reclamation;
• change of ownership information, including information related to the sale, transfer, or transmission on death of an interest in land or a lease;
• environment, health and safety information, including information required to contact you and your family and to respond in the event of an emergency;
• financial information, including banking information, tax information, occupation, payment information, credit or financial history and mortgage information; and
• regulatory process, license and permit application information, including information required by applicable government and other regulatory agencies or by law.

Cenovus collects, uses and discloses personal information in order to conduct its business activities, which include, but are not limited to:

• providing information to shareholders and other interested individuals;
• providing goods and services;
• managing customer relationships;
• acquisitions and divestitures;
• administering contracts (including leases of mineral and surface rights);
• conducting exploration, development and production activities including seismic operations, reclamation, drilling and completion and constructing roads, wellsites, pipelines and other facilities;
• complying with legal and regulatory requirements in the various jurisdictions in which Cenovus operates; and
• other reasonable purposes consistent with Cenovus's business objectives.

Cenovus uses the services of many third parties in its business, some of which are located outside of Canada. These third party service providers include, but are not limited to:

• information technology consultants;
• geophysical contractors;
• land brokers and land agents;
• road, well, pipeline and other facilities construction and/or maintenance contractors;
• environment, health and safety consultants;
• geophysical, engineering, environmental, or other consultants;
• credit rating agencies, credit providers and financial institutions;
• government authorities; and
• ethics reporting system management providers.

Except where permitted or required by law, personal information will only be provided to third parties for the purposes of allowing them to provide goods or services to Cenovus or to permit Cenovus to carry out its activities. For personal information that is required to be collected with consent, notification shall be given to affected parties before such personal information is collected by, or transferred to, a service provider outside of Canada. Cenovus currently contracts a third party service provider, EthicsPoint, to provide integrated hotline and web-based ethics reporting systems, software and services. EthicsPoint may collect, transfer and store Personal Information in the United Kingdom, in accordance with the Cenovus Privacy Policy and under the instruction of Cenovus. For specific inquiries regarding the collection, use, disclosure or storage of personal information by service providers outside of Canada, please contact the Privacy Officers as set out below.

If any third party acts in a manner inconsistent with the principles in this Privacy Statement, this will be considered to be a serious issue for which appropriate action may be taken by Cenovus.

Personal information may also be transferred to another company, including a Cenovus affiliate, in the event of a major business transaction, including a change of ownership of all or part of Cenovus through an asset or share sale, or some other form of business combination, merger or joint venture. In such circumstances, Cenovus will follow the special rules regarding business transactions provided for in the applicable privacy legislation. Personal information may also be transferred or disclosed by and between Cenovus affiliates in the course of their business activities.

Cenovus endeavours to maintain adequate physical, procedural and technical security with respect to its operations so as to prevent any loss, misuse, unauthorized access, disclosure, or modification of your personal information.

Personal information will be retained by Cenovus for the period of time necessary to fulfill the purpose for which it was collected and as required by applicable laws. Cenovus has records management protocols that outline the procedures for the retention and destruction of Cenovus records, including personal information.

Cenovus will permit you to access and review your personal information held by Cenovus unless the release of the information may be withheld as permitted or required by law. For further information on how to access your personal information, please contact the Privacy Officers as set out below.

Cenovus has developed this Privacy Statement to inform you of its practices regarding the collection, use and disclosure of your personal information. If you do not consent to our practices as set out in this Privacy Statement, you may refuse to provide your personal information to Cenovus. At any time you may withdraw your consent to Cenovus's collection, use and disclosure of your personal information, subject to applicable legal, contractual or regulatory restrictions and upon providing reasonable notice in writing to Cenovus. Unless you refuse consent or contact Cenovus to withdraw your consent, Cenovus assumes that you have consented to Cenovus's collection, use and disclosure practices as set out in this Privacy Statement.

If you do refuse or withdraw your consent, please be aware that this may affect certain aspects of your relationship with Cenovus, including being eligible for certain payments, benefits, goods or services provided by Cenovus, to the extent the personal information affected by the refusal or withdrawal of your consent was necessary to process such payments or benefits or provide such goods or services. Further, certain personal information is collected, used and disclosed by Cenovus as a result of legal, contractual, or regulatory requirements, and your general ability to withdraw or refuse to consent to the collection, use or disclosure of your personal information by Cenovus does not imply or confer upon you the right to withdraw or refuse your consent where to do so would interfere with such legal, contractual or regulatory requirements. Finally, where permitted or required by law, Cenovus may collect, use or disclose personal information without your consent.

Cenovus has appointed two Privacy Officers to oversee all aspects of Cenovus's privacy policy and practices. The Privacy Officers are the Senior Vice President, General Counsel & Secretary and the Senior Vice President, Human & Corporate Resources. If you have any privacy related questions or concerns, you may contact Cenovus's Ethics Help Line online by selecting the following link: Ethics Help Line, or by telephone at 1-855-275-5925. Alternatively, you may contact the Privacy Officers at:

Cenovus Energy Inc.
Attention: Privacy Officers
Box 6525, Station D
Calgary, Alberta
T2P 3G7

This Privacy Statement does not apply to linked websites. Cenovus is not responsible for the practices of other websites.