CCPA Privacy Policy

Effective date: May 12, 2021

This CCPA Privacy Policy applies to California residents (“you” or “your”) who use the logistics services provided by S.F. EXPRESS CORPORATION and its affiliates (referred to as “SF”, “we,” “us” and “our”). This CCPA Privacy Policy is intended to supplement the SF Privacy Policy. To the extent any provision of this CCPA Privacy Policy is inconsistent with any other provision(s) of the SF Privacy Policy, the provision of the CCPA Privacy Policy governs.

I. WHAT IS PERSONAL INFORMATION

For purposes of this CCPA Privacy Policy, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

II. INFORMATION WE COLLECT

The personal information we have collected from consumers in the twelve (12) months preceding the effective date of this CCPA Privacy Policy includes or may include the following:

Category (examples)

Collected

Specific Collected Content

Identifiers (such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol Address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers)

Yes

Name, address, email address, username, password, identification card number, passport number and, when you visit our websites, use our apps or interact with our related tools, widgets or plug-ins, and Internet Protocol address, or other similar identifiers.

We have collected this category of informationto provide you with products and services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, tracking the usage of our website.

Personal information categories listed in the California Civil Code § 1798.80(e) (such as name, signature, Social Security number, physical characteristics or descriptions, address, telephone number, passport number, driver’s licenses or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number or any other financial information, medical information or health insurance information. Some personal information included in this category may overlap with other categories.)

Yes

Name, address, telephone number, mobile phone number, email address, passport number. Some personal information included in this category may overlap with other categories.

We have collected this category of information to provide you with products and services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, tracking the usage of our website.

Protected classifications characteristics under California or Federal law (such as age, race, color, ancestry, national origin, citizenship, marital status, medical conditions, physical or mental disability, sex, sexual orientation, veteran or military status, genetic information)

No

Commercial Information (such as records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies)

Yes

Records of services purchased or received, information provided to us regarding the content of certain shipments, but only to the extent an identifiable person can be linked to such content, and information on actions taken on websites or mobile apps.

We have collected this category of information to provide you with products and services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, tracking the usage of our website.

Biometric Information (such as genetic, physiological, behavioral, biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as fingerprints, face prints and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns and sleep, health, or exercise data)

No

Geolocation Data (such as physical location or movements)

Yes

Location information.

We have collected this category of information to provide you with products and services, including providing customer service, processing or fulfilling orders and transactions, verifying customer information.

Internet or other similar network activity (such as browsing history, search history, information on a consumer’s interaction with a website, application or advertisement)

Yes

Audio information from calls placed with customer service and accounting centers which may be recorded, and electronic information in the form of Internet or other electronic network activity information as described above.

We have collected this category of information to provide you with products and services, including providing customer service, processing or fulfilling orders and transactions, verifying customer information.

Sensory Data (such as audio, electronic, visual, thermal, olfactory or similar information)

No

Professional or employment related information (such as current or past job history or performance evaluation)

No

Non-public education information (per the Family Education Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. part 99) (such as education records, including grades, transcripts)

No

Inferences drawn from other personal information (such as profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior attitudes, intelligence, abilities and aptitudes)

No

Personal information does not include:

Publicly available information from government records.

De-identified or aggregated consumer information.

Information excluded from the CCPA’s scope, such as:

Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;

Personal Information covered by certain sector specific privacy laws, including the Fair Credit Report Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA) and the Driver’s Privacy Protection Act of 1994.

We collect personal information from the following sources:

Directly from you or persons authorized by you to act on your behalf.

Collected automatically and indirectly from you.

From third party sources, such as customers of our forwarding and logistics services, public databases, social media platforms, and third party partners such as analytics or marketing providers.

III. HOW WE USE PERSONAL INFORMATION

Under the CCPA, the scope of business purposes includes the following:

Auditing related to a current interaction with the consumer and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors.

Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.

Debugging to identify and repair errors that impair existing intended functionality.

Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.

Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.

Undertaking internal research for technological development and demonstration.

Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.

We use personal information in the following ways and for the above business and commercial purposes:

To provide you with our products and services.

To provide you with information you’ve requested regarding our products and services.

To fulfill any other purpose for which you provide it.

To provide you notices about your account.

For any purpose with your consent.

IV. HOW WE SHARE PERSONAL INFORMATION

We may disclose your personal information to third parties for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the third party to both keep that personal information confidential and not use it for any purpose except performing the contract. In the preceding twelve (12) months, we have not disclosed consumer’s personal information to any third party. Pursuant to our operation plan, we will disclose your personal information for a business purpose to the following categories of third parties:

With service providers who process personal information on our behalf in order to help us provide our services, such as the bank card service provider.

With other related-parties within the Group, in order to provide you with orders processing, customs clearance and customer service.

V. SALES OF PERSONAL INFORMATION

In the preceding twelve (12) months, we have not sold personal information.

VI. YOUR CALIFORNIA PRIVACY RIGHTS

If you are a California resident, you have the following rights. We will honor requests received to the extent required by applicable law and within the time provided by law.

1. Right to know about personal information collected, disclosed, or sold

You have the right to request that we disclose to you the categories and specific pieces of personal information we have collected, disclosed, or sold about you. Specifically, you have the right to request that we disclose the categories and specific pieces of personal information we have collected, disclosed, or sold about you over the last 12 months, include the following:

The categories of personal information we have collected about you;

The categories of sources from which we have collected personal information about you;

Our business or commercial purpose for collecting that personal information;

Our business or commercial purpose for selling and disclosing that personal information;

The categories of third parties with whom we share that personal information;

The specific pieces of information we have collected about you;

The categories of personal information about you, if any, that we have disclosed or sold for monetary or other valuable consideration and the categories of third parties to which we have disclosed or sold that information, by category or categories of personal information for each third party to which we disclosed or sold the personal information;

The categories of personal information about you that we disclosed or sold for a business purpose.

2. Right to delete

You have the right to request the deletion of any of your personal information that we have collected from you and retained. But this is a limited right as we may be able to retain certain personal information subject to an exception under the CCPA or another lawful obligation. Once we receive, verify and confirm your request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

3. Right to opt-out

You have the right to opt out of the disclosure of personal information about you for monetary or other valuable consideration. To opt-out, you can contact us by calling us at +1-855-901-1133.

4. Right to non-discrimination for exercising California privacy rights

We may not discriminate against you because of your exercise of any of the foregoing rights, or any other rights under the California Consumer Privacy Act, including by:

Denying you goods or services;

Charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;

Providing you a different level or quality of goods or services; or

Suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

We may, however, charge different prices or rates, or provide a different level or quality of goods or services, if that difference is reasonably related to the value provided to us by your personal information.

5. How to exercise your rights

You can exercise your rights by:

Email: US_CS_CPL@sf-express.com

Hotline: +1-855-901-1133

Please note that we may take steps to verify your identity before granting you access to information or acting on your request to exercise your rights, as required or permitted by law.

You may designate an authorized agent to make a request in certain circumstances on your behalf. You must provide an authorized agent written permission to submit a request on your behalf, and we may require that you verify your identity directly with us.

Additionally, you may only make a verifiable consumer request for access twice within a 12-month period.

In some instances, we may not be able to honor your request. For example, we will not honor your request if we cannot verify your identity or if we cannot verify whether an authorized agent has the right to make a request on behalf of you. Additionally, we will not honor your request where an exception applies, such as where the disclosure of personal information would adversely affect the rights and freedoms of another consumer or where the personal information that we maintain about you is not subject to the CCPA’s access or deletion rights.

We will endeavor to fulfill your request within 45 days of receiving that request. If we require additional time, we will inform you of the reason and extension period in writing.

VII. DATA SHARING FOR DIRECT MARKETING PURPOSES

California Civil Code Section § 1798.83 permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes once a year. If you are a California resident, you may ask us to refrain from sharing your personal information with certain of our affiliates and other third parties for their marketing purposes. To make such a request, please tell us your preference by contacting us as specified below.

VIII. HOW TO CONTACT US

If you have any questions or comments about this CCPA Privacy Policy, or if you would like us to update information we have about you or your preferences, please contact us by email at US_CS_CPL@sf-express.com or calling us at +1-855-901-1133.