CJ Logistics America, LLC Privacy Policy

Last Updated: April, 2026

CJ Logistics America, LLC and its affiliates CJ Logistics Freight America, LLC, CJ Logistics Transportation, LLC, CJ Logistics Canada Corporation, and CJ Logistics Mexico SA de CV (collectively, “CJ Logistics,” “we,” “us,” or “our”) respect your privacy. We have developed this privacy policy (“Privacy Policy”) to let you know how we collect, use, disclose, share, and protect Personal Information, including when you visit https://america.cjlogistics.com/ (the “Website”), or when you use or obtain any of our products or services (the “Services”).

WE MAY MODIFY THIS POLICY AT ANY TIME. ALL CHANGES WILL BE EFFECTIVE IMMEDIATELY UPON POSTING TO THE WEBSITE. MATERIAL CHANGES WILL BE CONSPICUOUSLY POSTED ON THE WEBSITE, THE TOP OF THIS PRIVACY POLICY, OR OTHERWISE COMMUNICATED TO YOU.

STATE OR COUNTRY SPECIFIC PROVISIONS:

RESIDENTS OF CALIFORNIA, NEBRASKA, OR TEXAS: PLEASE SEE YOUR STATE PRIVACY RIGHTS SECTION FOR ADDITIONAL TERMS THAT APPLY TO YOU.

RESIDENTS OF CANADA: PLEASE SEE THE CANADIAN PRIVACY RIGHTS SECTION OF THIS PRIVACY POLICY FOR ADDITIONAL TERMS THAT APPLY TO YOU.

RESIDENTS OF MEXICO: PLEASE SEE THE MEXICAN PRIVACY RIGHTS SECTION OF THIS PRIVACY POLICY FOR ADDITIONAL TERMS THAT APPLY TO YOU.

Note: This Privacy Policy does not apply to job applicants and employees. For information on how we handle the data of job applicants, please see our US Job Applicant Privacy Policy and Mexico Job Applicant Privacy Policy. For information on how we handle employee data, we describe that information in our employee privacy policy, located in our employee handbook.

1. What is Personal Information?

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household or as similarly defined under applicable data privacy laws. Personal Information does not include information that is “publicly available” as defined under applicable data privacy laws, or deidentified or aggregated consumer information.

2. Personal Information We Collect

We may collect the following categories of Personal Information from or about you as described below.

3. Sources of Personal Information We Collect

We collect Personal Information from the following sources: (i) Personal Information you provide to us, (ii) Personal Information we collect automatically using technology and (iii) Personal Information we collect from third party sources. We describe how we collect Personal Information from these sources below.

Information You Provide Us Directly or that We Collect Automatically

We collect Personal Information from you that you provide us directly such as when you provide us with your contact information at a tradeshow. We also use cookies and other tracking technologies to automatically collect data from you automatically when you visit the Website, as described in more detail in the Cookies and Other Tracking Technologies section below.

Personal Information We Obtain from Third Parties Acting on Our Behalf

We obtain Personal Information from various third-party companies, including service providers, analytics providers, market research companies, business partners and data brokers such as SalesIntel. [LT2]

We use technology including third-party cookies and similar tools to automatically collect certain Personal Information when you visit our Website. For example, this technology may collect information such as the websites you visit before or after you visit the Website, online advertisements presented to you before visiting the Website, pages you click on our Website, your IP address, location information, keyboard activity, search requests, cookie information, browser type, operating system, media access control (MAC), date and time you visit the Website, the amount of time spent on the Website, and the device you use to access the Website. We use this information for analytics and advertising purposes, to operate our Website and to make our Website easier to use.

To learn more about how we use cookies and other similar tools and your options to limit the data collected from visiting our Website, see the Cookies and Other Tracking Technologies section below.

4. Why We Collect and Use Your Personal Information

We collect and use your Personal Information for the following purposes:

5. With Whom We Disclose or Share Your Personal Information

We may disclose or share your Personal Information with the following organizations and persons:

Aggregated and De-Identified Data

We may also aggregate or de-identify Personal Information so that the data does not reveal the identity of individuals and is not considered Personal Information. To the extent that we maintain and use de-identified data, we will not attempt to reidentify such data.

6. Cookies and Other Tracking Technologies

Cookies, Web Beacons, and Other Tools

We use cookies, web beacons, web storage, pixels, unique advertising identifiers, and other tracking technologies (collectively “Cookies”).

A cookie is a small text files that is sent to your browser from a website’s computers and stored on your computer or device. Cookies enable a website to remember your actions and preferences. For example, we use cookies to remember your preferences when you return to our Website. Like cookies, web beacons/pixel tags are small graphics on a website or email that monitor your activity when viewing that webpage or email.

Why We Use Cookies.

• Remember Your Preferences: We use Cookies to remember your preferences when you return to our Website and allow you to enter your username less frequently;
• Identify a User Session. We use Cookies to uniquely identify each user session when you access the Website and Services;
• Analytics. We use Cookies to compile aggregated statistics about how visitors use our Website and the Services; to measure the effectiveness of our Website, Services, content, communications and advertising, including by placing web beacons (sometimes called single-pixel gifs) which show us which emails and links have been opened by recipients; and
• Advertising. We use Cookies to serve you with targeted advertising, including by providing access to the information collected through cookies to our advertising partners and cookie providers, in order to present our content to you on other websites and across devices.
• Access: you have the right to access the Personal Data that we process and to know the information related to the conditions and generalities of the processing (we provide this information in this Privacy Policy and in the corresponding Privacy Notices for each case).
• Rectification: you have the right to request that we correct your Personal Data that is found to be inaccurate, incomplete or is not updated.

You cannot disable all Cookies, such as Cookies that are essential to the functioning of the Website. You can manually delete persistent cookies, or cookies that track your activity across websites, through your browser settings. Please see the Your Privacy Choices section for information on how to disable cookies.

Third Party Analytics and Advertising Cookies

We use the following third-party advertising and analytics service provides with which we may share your Personal Information, to collect analytical data and to provide targeted advertising.

• Google Analytics and Its Advertising Features. We have enabled and implemented the following Google Analytics Advertising Features: DoubleClick, Dynamic Remarketing, Google Tag Manager, GA Audiences, and Google Beacons. We also use Google Maps with your Geolocation Data. For more information on how Google uses Personal Information, visit Google’s Privacy Policy and Google’s page on How Google uses data when you use our partners’ sites or apps.
• To prevent this data from being used by Google Analytics, follow the instructions to download and install the Google Analytics Opt-out Browser Add-on for each web browser you use. Using the Google Analytics Opt-Out Browser Add-On will not prevent us from using other analytics tools and will not prevent data from being sent to the Website itself or to Google. Opting out will not affect your use of the Website.
• HubSpot Analytics. We use HubSpot Analytics, a web analytics service provided by HubSpot, Inc., that uses Cookies to track how long users are on our Website, what marketing pages they visit, what marketing offers they respond to and a user’s identity, to improve our customer education materials, set up accounts and to operate our Website. For a description of all HubSpot cookies and information about HubSpot’s privacy practices, please refer to their privacy policy and their cookie policy.
• LinkedIn Sales Navigator. We use LinkedIn Sales Navigator, which includes the LinkedIn Ads and LinkedIn Analytics cookies, to enable us to measure the effectiveness of advertising campaigns served on LinkedIn. The information collected by that cookie will be transmitted directly to and stored by LinkedIn. For more information about LinkedIn’s privacy practices, please refer to https://www.linkedin.com/legal/privacy-policy.
• To opt-out, you can update your advertising preferences through your LinkedIn account. If you do not have a LinkedIn account, LinkedIn allows you to opt-out of applicable targeted advertising by visiting https://www.linkedin.com/psettings/guest-controls.
• Meta Custom Audiences (and Meta Pixel). We use the remarketing services of Meta/Facebook on our Website. We use Meta Custom Audiences, which includes the Meta Pixel, to deliver targeted advertisements to visitors to our Website across those Meta owned social media platforms based on email addresses that we have collected. To learn more about Meta Custom Audiences, visit their website here. To learn more about Meta’s Privacy Policy including their services and your rights, please click here.

7. Your Privacy Choices

You have certain choices with regard to the use of your Personal Information. We recognize that you may want to limit how your Personal Information is used and shared. We currently offer the following choices and options:

• Update your Account. You can access and update your name, email address, and street address by logging into your account on our Website.
• Change Your Browser Settings On your browser, you may have features that allow you to opt out of some targeted advertising (“Limit Ad Tracking” on iOS devices or “Opt out of Interest-Based Ads” on Android). To learn more about how these browser settings work, please review your device settings. Even if you disable the tracking, keep in mind that you may still receive interest-based advertising, including from third parties with whom your information had been previously disclosed, and advertising that may not be based on your interests and preferences.
• Change Your Preferences
• State Opt-Out Rights. You may have additional rights to opt-out of targeted advertising depending on where you live, as described in the State Privacy Rights Section.

You can understand which third parties have currently enabled Cookies for your browser or mobile device. To change your preferences with respect to certain online ads and to obtain more information about ad networks and online behavioral advertising, you can visit the

• Network Advertising Initiative’s website at http://optout.networkadvertising.org
• Digital Advertising Alliance’s website at http://optout.aboutads.info.

Changing your settings with individual browsers or ad networks will not necessarily carry over to other browsers or ad networks. As a result, depending on the opt-outs you request, you may still see our ads.

Opt-Out of Marketing Emails

If you have signed up to receive electronic communications from us and no longer want to receive electronic marketing communications from us, please use the “unsubscribe” button found on the emails you received or send an email to the email address below. Within ten (10) days of receipt of your unsubscribe request, we will remove you from our distribution list unless you request to be added again in the future. [LT5] If you do business with us, you cannot opt out of certain non-marketing emails including confirmation, receipt, and post-checkout emails).

8. How We Protect Your Personal Information

We use physical, technical and administrative security measures designed to protect Personal Information from unauthorized access or acquisition. If a breach of your Personal Information occurs, we will notify you if required under applicable law.

9. Links To Other Websites and Services

For your convenience, the Website may link to, or be linked to, other websites not maintained or controlled by us. We are not responsible for the content or operation of those websites or services, and this Privacy Policy does not apply to them. Your browsing and interactions on any third-party website or service, including those that have a link on our Website, are subject to that third party’s privacy policies and terms. Please read the privacy policy and terms of such websites carefully and exercise care when providing your Personal Information.

10. Children’s Data

The Website and Services are only intended for individuals over the age of 18. We do not knowingly collect, sell, or share information from children under the age of 16. Children under the age of 16 are prohibited from submitting any Personal Information to us through the Website or the Services. If you are a parent or guardian of someone under the age of 16 and discover that your child has submitted Personal Information to us, please contact us using a method below and we will use commercially reasonable efforts to remove that Personal Information from our systems.

11. Cross Border Transfers

While we are headquartered in the US, we also have Affiliates in Canada and Mexico. We may transfer Personal Information between these jurisdictions as necessary for the purposes we describe in this Privacy Policy. Certain countries may not provide the same level of data protection as your home country. We will comply with laws related to the protection of cross-border transfers.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us by:

Email: info@cjlogisticsamerica.com

Phone: 1-800-372-1960 Ext 9

Mail: CJ Logistics

Attn: Legal Department

1750 S. Wolf Road

Des Plaines, IL 60018

13. Your State Consumer Privacy Rights: Terms Applicable to California, Nebraska, and Texas Residents Only

Under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act and its implementing regulations (together, the “CCPA”), the Nebraska Data Privacy Act (“NDPA”), and the Texas Data Privacy and Security Act (“TDPSA”), residents of California, Nebraska, and Texas have certain additional rights regarding their Personal Information. We have provided a summary of those rights below. Please note that these rights are subject to certain exceptions under those state consumer privacy laws. In the event of a conflict between this Section and the remainder of this Privacy Policy, this Section shall take precedence for the applicable state residents.

Certain capitalized terms not defined in this Privacy Policy have the meanings set forth in the CCPA, NDPA, or TDPSA, as applicable.

Please note that we do not disclose sensitive information as defined in the CCPA, NDPA, and TDPSA.

Explanation of Your State Privacy Rights

Subject to certain limitations, such as (a) exceptions permitted by applicable law and (b) verification of your identity, or as otherwise specified, California, Nebraska, and Texas residents may exercise the following rights with regard to their Personal Information:

Right to Know or Access Your Personal Information. California, Nebraska, and Texas residents have the right to confirm whether we are processing their Personal Information and to access such Personal Information.

California residents also have the right to access the categories of Personal Information that we have collected in the prior 12-month period, specifically:

• The specific pieces of Personal Information that we collected;
• The categories of Personal Information we collected;
• The categories of sources from which the Personal Information was collected;
• The categories of third parties to whom we have disclosed your Personal Information;
• The categories of Personal Information that we Sold or Shared, or which we disclosed for a Business Purpose and the categories of third parties to whom it was disclosed for a Business Purpose; and
• The Business or Commercial Purpose for collecting, Sharing, or Selling your Personal Information.

Right to Request the Deletion of Personal Information. You have the right to request that we delete Personal Information we have collected from or about you. We will comply with such request, and direct our service providers to do the same, subject to certain exceptions permitted by applicable law.

Right to Correct Your Personal Information. You have the right to request that we correct your inaccurate or outdated Personal Information. If you request that we correct Personal Information about you, we will use commercially reasonable efforts to correct it. If necessary, we may ask that you provide documentation showing that the information we retained is inaccurate or outdated. If you have an account with us, we may ask you to sign into your account for verification.

Right to Data Portability. You may request a copy of the Personal Information you previously provided to us in a portable, and, to the extent technically feasible, readily usable format.

Right to Non-Discrimination. You have the right to be treated in a non-discriminatory manner for exercising any of your rights under your respective state privacy law.

Right to Opt Out. California residents may opt out of the Sale or Sharing of their Personal Information This is known as the “Notice of Right to Opt-out of Sale/Sharing.” Nebraska and Texas residents have the right to opt out of the processing of their Personal Information for purposes of targeted advertising and the sale of their Personal Information.

Honoring Opt-Out Preference Signals. If you are a resident of California, Texas or Nebraska, you may opt out of the sale or sharing of your Personal Information by broadcasting a Global Privacy Control (“GPC”) signal, an opt-out preference signal, using a browser and/or browser extension that supports the GPC signal. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use. If you use the GPC signal and do not have an account or are not signed into your account, we will only associate the GPC signal with your browser because the link between your browser and account is not known to us.

Exceptions. in some instances, we may decline to honor your request or only honor your request in part, where, for example, we are unable to verify your identity or a legal exception to the right applies.

How to Exercise Your State Privacy Rights

To exercise your State Privacy Rights, you may submit your request to us by:

Calling us at: 1-800-372-1960 Ext 9

Completing our webform at: [INSERT WEBFORM LINK]

Emailing us at: info@cjlogisticsamerica.com

Writing us at: CJ Logistics

Attn: Legal Department

1750 S. Wolf Road

Des Plaines, IL 60018

Who May Exercise Your Rights. You may only make a request to exercise your rights on behalf of yourself. A parent or legal guardian may make a request on behalf of their child.

Under the CCPA, California residents may authorize another person to submit requests to exercise their rights on their behalf (an “Authorized Agent”). Under the NDPA and TDPSA, Nebraska and Texas residents may use an Authorized Agent to opt out of the sale of their Personal Information and the processing of their Personal Information for the purposes of targeted advertising.

If applicable, you may designate an Authorized Agent to make a request on your behalf to exercise your rights by doing the following: (1) provide the Authorized Agent with written permission to do so; and (2) verify your own identity (per the process stated below), as well as the identity of the Authorized Agent. We may deny a request from an Authorized Agent if we do not have proof that they are authorized by you to act on your behalf.

Verifying a Consumer Request. In order to verify your request, you must provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information, and you must describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. To verify your identity, we may ask you to provide additional information. Any information you provide will only be used to verify your request. When seeking additional information from you, we may contact you through your account or the contact phone number or email address you provided in your request. If we cannot verify your identity, we may deny your request.

When We Will Respond. We will acknowledge your request within 10 days of receipt. We will try to respond to your request within 45 days. If we require additional time, we will inform you of the reason and extension period. Any disclosures we provide to California residents will only cover the 12-month period preceding our receipt of your request. We may charge a fee to process or respond to your request if it is excessive, repetitive, or manifestly unfounded.

Appeals Process for Nebraska and Texas Residents

If you are a Nebraska or Texas resident, you have the right to appeal a denied request to exercise your privacy rights. You must submit your request within 60 days of your receipt of our denial. You may submit your request to us by:

Calling us at: 1-800-372-1960 Ext 9

Emailing us at: info@cjlogisticsamerica.com

Writing us at: CJ Logistics

Attn: Legal Department

1750 S. Wolf Road

Des Plaines, IL 60018

When We Will Respond. We will respond to your appeal within 60 days of receiving your request. When we respond, we will include any action taken or not taken, including an explanation of the reason or reasons for the decision.

If you are a Texas resident and we deny your appeal, you may submit a complaint to the Texas Attorney General’s office online or by calling the Consumer Protection Hotline at 1-800-621-0508.

California-Specific Disclosures

Selling, Sharing, and Disclosure of Personal Information in the Last 12 Months.

Categories of Personal Information We Have Collected. During the past 12 months, we have collected the categories of Personal Information listed above in the “Personal Information We Collect” Section.

Categories of Personal Information Sold or Shared. In the last 12 months we have not sold Personal Information for monetary compensation. We have shared the following categories of Personal Information to serve targeted advertising or to perform data analytics: Identifiers and Internet Activity.

Categories of Personal Information Disclosed for a Business Purpose. During the past 12 months, we have disclosed the following categories of Personal Information for a business purpose: Identifiers, Commercial Information, and Internet Activity.

Sensitive Personal Information. We do not use or disclose any sensitive Personal Information for any reason other than for employment purposes.

California’s Shine the Light

Pursuant to California Civil Code Section 1798.83, if you are a California resident, you have the right to obtain: (a) a list of all third parties to whom we may have disclosed your Personal Information within the past year for direct marketing purposes, and (b) a description of the categories of Personal Information disclosed, by contacting us per the “Contact Us” Section above.

14. Your Canada Privacy Rights: These terms are applicable to Canada Residents Only

“Personal Information” means information about an identified or identifiable individual where such information can be linked to an individual either alone or in combination with other information (such as information contained in cookies). Personal Information does not include business contact information that we collect, use, or disclose for the sole purpose of communication in relation to your employment, business or profession.

In addition to the general information regarding how we collect, use, secure, share and disclose Personal Information, the following additional provisions relate to Canadian residents.

Interest-Based Advertising

For more information about interest-based advertising on your device, and to understand your options, including how you can opt-out of receiving behavioural ads from third-party advertising companies participating in the DAAC, please visit the Digital Advertising Alliance of Canada website at http://youradchoices.ca/choices.

Translations

This Privacy Policy may be provided in several languages for the convenience of our customers and users of our Website. In the event of conflict or inconsistency, the English language version of this Privacy Policy controls, unless otherwise required by applicable law. En cas de conflit ou d'incohérence, la version anglaise de cette politique de confidentialité contrôle, sauf si la loi applicable l'exige.

Consent

We will request your consent to collect and use your Personal Information, except where we are permitted or required to use or disclose your Personal Information under applicable laws or regulations. We may obtain your express consent, or we may obtain your permission based on implied consent. Implied consent is consent that can be reasonably inferred. For example, we infer that you provide consent for us to collect your Personal Information when you communicate with us, including through our Website. You may change or withdraw your consent, subject to certain legal, regulatory and contractual exceptions, by contacting us as described in this Privacy Policy.

Your Rights and Choices

Under Canadian law, you have certain privacy rights relating to your Personal Information. If required by applicable law and subject to any lawful exceptions, we will comply with any of your requests. We may require you to prove your identity before we modify, provide, delete or transfer your Personal Information, which may require you to provide us with certain Personal Information

Right of Access. You have the right to be informed of and request access to the Personal Information we process about you. This allows you to receive a copy of the Personal Information we hold about you.

Right to Rectification. Under certain circumstances, you have the right to request that we amend or update inaccurate or incomplete Personal Information about you.

Right to Erasure (Deletion). Under certain circumstances, you have the right to request deletion of your Personal Information.

Right to Restrict. Under certain circumstances, you have the right to request that we temporarily or permanently stop processing all or some of your Personal Information.

Right to Object. Under certain circumstances, you have the right to object to our processing of your Personal Information (including profiling) when it is based on our legitimate interests.

Right to Data Portability. When we are processing your Personal Information based on consent or on a contract and the processing is carried out by automated means, you have the right to request a copy of your Personal Information in an electronic format and further request that we send such Personal Information to another party.

Communication Preferences and Opt-Outs. You have the right to stop receiving marketing communications from us at any time by contacting info@cjlogisticsamerica.com.

Right to Lodge a Complaint. You have the right to lodge a complaint with the applicable supervisory authority.

How to Exercise Your Rights

To exercise your rights described in this Privacy Policy, you may submit your request to us by contacting us at any of the following:

Calling us at: 1-800-372-1960 Ext 9

Completing our webform at: [INSERT WEBFORM LINK]

Emailing us at: info@cjlogisticsamerica.com

Writing us at: CJ Logistics

Attn: Legal Department

1750 S. Wolf Road

Des Plaines, IL 60018

In order to verify your request, you must provide sufficient information to allow us to reasonably verify you are the person about whom we collected Personal Information, and you must describe your request with sufficient detail to allow us to properly understand, evaluate, and respond to your request. When we receive your request to exercise your rights under applicable law: (a) we will acknowledge receipt of your request; (b) we will try to match the information you provide in making the request with information we already maintain about you; (c) if required to verify your identity, we may ask you to provide additional information, including Personal Information; (d) we will consider various factors when determining how to verify your identity, such as the sensitivity and value of the data, the risk of harm, the likelihood of fraud, etc.

We will only use Personal Information we collect during the verification process for the purpose of verifying your identity and fulfilling your request. If you maintain an account with us, we may use that account to respond to your request and/or verify your identity. If we are unable to verify your identity as required by applicable laws and regulations, we will decline to comply with your request and let you know why.

We will respond to your requests within the time period prescribed by applicable law (but in any event no later than 30 days from your request). If we require additional time, we will inform you of the reason and extension period.

Cross-Border Rights. We are a global company. As a result of our global operations, we may share your Personal Information with our Affiliates located outside of Canada, including in the United States and Mexico. We will do so in accordance with our internal data transfer and processing agreement [MBF7] which addresses protection of Personal Information in accordance with applicable laws.

We may also transfer or make your Personal Information available to service providers located both in Canada (both inside and outside Quebec) and throughout the world to assist us in meeting our operational, legal and regulatory requirements. In those cases, we maintain written agreements with our service providers which require compliance with applicable data privacy laws. For instance, your Personal Information may be stored in our service providers’ global cloud for purposes such as website hosting, requests for feedback, protecting our legal rights, financial reporting, accounting, administering employment and employee benefits and regular business communications and document management.

When we transfer your Personal Information outside of Canada, your Personal Information may be available to government officials in locations where the Personal Information is transferred. These countries may have data privacy laws that differ from Canadian privacy laws. If you are a resident of Quebec, where applicable, we will conduct privacy impact assessments prior to transfer of your Personal Information to another jurisdiction outside Quebec.

15. Your Mexican Privacy Rights: These terms are applicable to Mexico Residents Only

In this Section 15 we provide the following additional information regarding our privacy practices and your privacy rights, which together with the rest of the Privacy Policy, is our comprehensive “Privacy Notice” in compliance with Article 2 of the Federal Law on the Protection of Personal Data Held by Private Parties and its regulations (“LFPDPPP”). To the extent this Section 15 conflicts with the other provisions of this Privacy Policy, this Section 15 shall prevail for Mexico residents only. As used in this Section 15, “Personal Data” means any information relating to an identified or identifiable person. A person is considered identifiable when their identity can be determined, directly or indirectly, from any information.

Responsible Party

The entity responsible for the treatment and protection of your Personal Data is CJ Logistics México S.A. de C.V., with offices located at:

Avenida Manufactura 502, Colonia Parque Industrial Querétaro, Santa Rosa Jáuregui, Querétaro, México, Código Postal 76220.

Personal Data We Process and Purposes of the Processing

Please review Section 2 of this Privacy Policy for more information on the Personal Data that we may collect and process. We do not process any sensitive Personal Data. The categories listed on Section 2 of this Privacy Policy are not always collected, we will collect only the necessary Personal Data and, when required by the LFPDPPP, we will inform you of the specific Personal Data we will collect through the corresponding Privacy Notice.

Secondary Purposes

Please review Section 4 of this Privacy Policy for more information on the purposes that we process your Personal Data. Of the purposes listed in Section 4, the following are secondary purposes:

• To provide you with surveys or to assist you in better using our Services.

• To offer promotions, and discount offers to you; to send marketing materials; to advertise to you including to provide targeted advertising and more relevant sponsored advertising on search engines.
• To analyze and improve our Website and our Services, to gather data analytics regarding the use of our Website and the content of the Website, to identify trends regarding the use of our Website and Services and to make the Website easier to use; to improve our Services and develop new features and services.

Your Consent to Our Processing of Your Personal Data

We provide this Privacy Policy to provide you with information about how we process Personal Data so that you may make an informed decision with respect to such processing and so that we can obtain your consent to such processing. When required by the LFPDPPP, we will ask you for your consent prior to processing certain types of Personal Data or for certain purposes.

You may revoke your consent to our processing your Personal Data for secondary purposes when permitted by the LFPDPPP and by contacting us in accordance with the procedures below, or as otherwise permitted under applicable data privacy laws.

Your ARCO Rights

Subject to certain exceptions or where otherwise provided under applicable law, you have the following rights with respect to your Personal Data that we collect and process:

• Cancellation: you have the right to request the erasure of your Personal Data in our files, records, and file systems.
• Objection: you have the right to oppose our processing of your Personal Data or demand that we cease processing your Personal Data when there is a legitimate cause that is causing you harm and damage, or the Personal Data is subject to automated processing that is intended to evaluate, without human intervention, certain personal aspects to analyze or predict your professional performance, economic situation, health status, sexual preferences, reliability, or behavior.
  • Restrict the use and disclosure of your Personal Data or
  • Revoke your consent to the processing of your Personal Data.

Additional Rights: In addition to your ARCO Rights, you have the right to:

If you do make a rights request, we will keep a record of all the submitted requests. Furthermore, in case your request is incomplete, you understand we have the right to request the missing information from you.

Any revocation of your consent will apply only prospectively, and not retroactively.

How to Exercise Your ARCO Rights.

To exercise your ARCO rights, you may submit your request to us by contacting us at any of the following:

Calling us at: 1-800-372-1960 Ext 9[AR8]

Completing our webform at: [INSERT WEBFORM LINK][AR9]

Emailing us at: info@cjlogisticsamerica.com[AR10]

Writing us at: CJ Logistics México

Attn: Departamento de …[AR11]

Avenida Manufactura 502,

Parque Industrial Querétaro, Qro.,

México, C.P. 76220.

Your communication to exercise your ARCO rights must contain the following information:

1. Your name and address or other means for us to contact you to confirm or deny your request, or to request more information;
2. If applicable, the name and address of your representative.
3. Official ID that proves your identity and, if applicable, the identity of your legal representative;
4. If applicable, notarized power of attorney, proxy letter signed before two witnesses or statement made in person by you, to prove the legal representation.
5. A clear and precise description of the Personal Data for which you seek to exercise your ARCO rights (this is not applicable for exercising your right to access);
6. A description of the ARCO right to be exercised, or your request;
7. Depending on the right to be exercised:
   1. Right to Access: indicate the domicile or means for receiving the response and information. Please consider that, depending on the amount or type of information you wish to access, you will need to access it on site.
   2. Right to Rectify: indicate which personal data is being rectified, the modifications to be made, and provide all documentation supporting the changes.
   3. Right to Cancel: clearly and precisely establish the personal data you wish to cancel, or indicate whether the cancellation will apply to all of your personal data.
   4. Right to Object: justify the validity of the right, in terms of Article 26 of the LFPDPPP.
8. Any other element or documentation that facilitates the location of the relevant Personal Data, if necessary.

You may also contact us with any questions or complaints regarding this Privacy Policy or how we process your Personal Data.

How We Will Process your ARCO Rights

1. We will acknowledge the receipt of your request.
2. We will request any missing information if required within the next 5 days after receipt of your request. If so, you will have 10 days to provide us with the missing information.
3. We will tell you whether we have accepted your request within 20 business days of your submission.
4. If we accept your request, we will honor your request within 15 business days of the notice of acceptance of your request.
5. We may extend these time periods for valid business reasons, in accordance with the LFPDPPP.

We will analyze your request in accordance with applicable privacy laws, regulations and internal privacy policies.

What You Can Do if You Don’t Receive a Response or if Your Response is Unjustifiably Denied.

You may file a complaint with the Ministry of Anticorruption and Good Governance (SABG) within 15 business days of receiving response or once our response period has expired in case of no response. For more information about SABG’s process, please refer to Chapter VIII of the LFPDPPP.

Data Transfers

Transfers of your Personal Data, within Mexico or across borders, to our affiliates, including those listed at the top of this Privacy Policy, or to third parties solely for the processing of your Personal Data on our behalf as described in this Privacy Policy do not require your consent. In addition, your consent is not required for transfers of Personal Data related to mandatory disclosure, legal compliance, and protections.

However, certain transfers related to corporate transactions may require your consent. When required by the LFPDPPP, we will inform you through the corresponding Privacy Notice when such transfers are to take place, the personal information that we will transfer, the third-party recipient and the purposes of such transfer. Furthermore, we will request your consent prior to such transfers, except as permitted by the LFPDPPP.

To the extent permitted by the LFPDPPP, by using the Website or our Services, you consent to the transfer of your Personal Data, unless you withdraw your consent by contacting us as described above. We will not transfer or process your Personal Data for reasons outside of this Privacy Policy without your consent.

Right to Promote Personal Data Protection Procedures

If you believe that your rights have been violated by any conduct of our employees or our actions or responses, or if you believe that our processing of your Personal Data is in violation of the LFPDPPP, its regulations, or other applicable law, you may file a corresponding complaint with the SABG.