Privacy Policy

Trump Oil is an independent, privately proposed company headquartered in West Palm Beach, Florida, United States. It has no affiliation, endorsement, sponsorship, partnership or business relationship with President Donald J. Trump, the Trump family, the Trump Organization, the United States government, or the government of Venezuela.

This policy applies to TrumpOil.cc and to the authenticated portal operated at the same domain. It does not apply to any third-party site reached from a link here.

We collect only information you choose to submit and the minimum technical information required to operate the site securely.

• Request Information form: name, email address, organization, country, inquiry category, and the message you write. Investor-category submissions may also include an investor type and an indicative interest range you select.
• Account Request form: name, email address, organization, title, country, applicant type, and your stated reason for requesting reviewed access.
• Portal accounts: your profile record, assigned roles, and account activity such as sign-in events.
• Technical data: request metadata (including IP-derived rate-limiting signals), browser session storage required to keep you signed in, and server error logs.

Where a lawful basis framework applies to you, we rely on your consent for optional submissions, on legitimate interests for security and correspondence, and on legal obligation for compliance screening and records.

• To read, triage and respond to your inquiry or access request.
• To verify identity and eligibility before granting reviewed portal access.
• To operate integrity controls: rate limiting, spam prevention, audit logging and security monitoring.
• To meet legal, sanctions-screening, anti-money-laundering and record-keeping obligations that apply to the company.

Because the concept concerns Venezuelan hydrocarbons, submissions may be screened against applicable sanctions and restricted-party lists, including lists administered by the U.S. Office of Foreign Assets Control (OFAC). Screening results are internal records and are not disclosed to the submitter.

If screening identifies a restriction, the company will not proceed with the correspondence or access request, and may be legally required to retain and report the record.

Access is restricted by role-based database security policies. Submissions are readable only by authorised administrators. Approved portal users can see their own profile and their own request status, never another person's record and never internal notes.

We do not sell personal data, rent it, or use it for advertising or cross-site tracking. We share data only with service providers who host the site and database under contract, and with counsel, auditors or authorities where legally required.

Retention periods are proposed and remain subject to confirmation by privacy counsel.

• Inquiry submissions and correspondence: retained while the inquiry is open and for a proposed period of 24 months thereafter, unless a longer period is legally required.
• Account requests and decisions: retained for the life of the account plus a proposed period of 24 months, as an access-control record.
• Compliance and sanctions-screening records: retained for the period required by applicable law, which for U.S. sanctions record-keeping is generally at least five years.
• Audit logs and security records: retained for a proposed period of 24 months.

Subject to the law that applies to you, you may request access to the personal data we hold about you, correction of inaccurate data, deletion where no legal obligation requires retention, restriction of processing, and a copy of the data you provided.

Requests can be made through the Request Information form. We will verify your identity before acting, and we will explain in writing if a legal obligation prevents us from deleting a record.

Data is stored in a managed database protected by row-level security policies, encrypted in transit, and accessible only to authenticated administrators. Administrative actions are recorded in an audit log. Multi-factor authentication is required for administrator accounts before any production use.

No system is perfectly secure. If a breach affecting personal data occurs, the company intends to notify affected people and regulators as required by applicable law.

The site and database are hosted in the United States. If you submit information from outside the United States, it will be transferred to and processed in the United States, subject to appropriate transfer safeguards where required.

The public site aims to use only what is strictly necessary to operate. The authenticated portal requires browser session storage to keep you signed in. No advertising or cross-site tracking cookies are intentionally used.

The site is not directed to children and the company does not knowingly collect personal data from anyone under 18.

This policy may change as the concept develops or as counsel advises. The version and effective note at the top of this document indicate the current release.

Privacy questions and rights requests should be submitted through the Request Information form, selecting the category that best describes you.

This document is a draft prepared internally for a development-stage concept. It is not legal advice and must be reviewed and approved by qualified counsel before the company relies on it or represents it as final.