Privacy Notice Addendum

UPS: Addendum to Privacy Notice for Canada

Personal information maintained and processed by our UPS affiliates and third-party service providers in the US and other foreign jurisdictions may be subject to disclosure pursuant to a lawful access request by US or foreign courts or government authorities. We will not provide your information to third parties for marketing purposes without your prior consent.

For more information about our privacy practices; to access, update or correct inaccuracies in your personal information; or if you have a question or complaint about the manner in which we or our service providers treat your personal information, please contact the Global Privacy Manager located in the US, whose address is indicated above.

UPS: Mexico Addendum to Privacy Notice

To the extent Mexican privacy laws or regulations apply, the following additional Mexico-specific provisions apply and shall prevail over conflicting provisions in the Privacy Notice.

How We Use The Information We Obtain

We may use your personal information for the following primary purposes, which are directly linked to the services you request from UPS and your legal relationship with UPS.

In addition, we may use your personal information for the other purposes listed in the ‘How We Use The Information We Obtain’ section of the Privacy Notice, which may be considered secondary purposes under Mexican law.

We do not use or share personal payment or financial information except in connection with the processing of payments or where there is another legal basis.

You may withdraw your consent to our processing of your personal information by contacting us as indicated in the ‘How To Contact Us’ section of the Privacy Notice. If you withdraw your consent for us to process your personal information for one of the primary purposes indicated above, then in some situations we may not be able to provide the service, though we may still engage in certain processing authorised by law.

Information We Share

We may share your personal information as provided in the Privacy Notice, but, to the extent permitted by law, you may withdraw your consent to this sharing by contacting us as indicated in the ‘How To Contact Us’ section of the Privacy Notice or by using the following Privacy Preference Centre and Unsubscribe to Email.

Requests for Access, Correction, Cancellation, Objection or Consent Withdrawal

In addition to any rights granted in the Privacy Notice, you may ask us to cancel your personal information to the extent permitted by law by contacting us as indicated in the ‘How to Contact Us’ section of the Privacy Notice. Following a valid cancellation request, we may hold the personal data for the duration and purposes permitted by law before deleting it.

We will answer your requests to access, correct or cancel your personal information or to object or withdraw your consent to our processing of your personal information within 20 business days from the date we receive your complete request or as provided by law. To be considered complete, your request must include your full name and contact address, a copy of your ID and a clear and detailed description of your request.

UPS: Addendum to Privacy Notice for Japan

UPS complies with Japanese laws and regulations, including the Act on the Protection of Personal Information. United Parcel Service, Inc. is primarily responsible for the management of the personal information that is jointly used with our affiliates or third parties. We will not provide your information to third parties for marketing purposes without your prior consent.

UPS: Addendum to Privacy Notice for Republic of Korea

Except as otherwise required by law, consumer personal information is securely disposed of without delay when (i) the consumer revokes his or her consent for our use of the information, (ii) the purpose of our collection and use of the personal information has been accomplished or (iii) the legal retention period has expired. If applicable law requires the preservation of personal information that otherwise would be disposed of, the personal information is transferred to a separate database and then disposed of after the period determined by the applicable law. Personal information is disposed of using a method that is reasonably likely to prevent the personal information from being restored or reused.

We will not provide your personal information to third parties in violation of law (such as without your consent, where consent is required). For the purposes stated in the Privacy Notice, we entrust the handling of personal data to (i) UPS Worldwide Forwarding Inc., with respect to express services; (ii) Supply Chain Solutions, Inc., with respect to services provided in the Americas region; (iii) UPS Europe SA, with respect to services provided in the Europe, Middle East and Africa region; and (iv) UPS SCS (Asia) Limited, with respect to services provided in Asia-Pacific region.

If we must obtain consent from a child under 14 years of age to process his or her personal information, we will obtain consent from his or her legal representative. In such cases, we may request that the child furnish the minimum information necessary for us to obtain consent from the legal representative. The legal representative may exercise the rights of the child under the UPS Privacy Notice.

Addendum to UPS Privacy Notice for China, Mainland

This addendum to the UPS Privacy Notice applies to you if your personal information is being processed by UPS Parcel Delivery Service (Guangdong) Co. Ltd (“UPS”) in mainland of the People’s Republic of China. These terms are set out in addition to and from an integral part of the terms of the UPS Privacy Notice above. In the event of any conflict or inconsistency between the UPS Privacy Notice and this Addendum, the terms of this Addendum shall govern and prevail.

Information We Share

We will not provide your personal information to third parties in violation of law (such as without your consent, where consent is required). For the purposes stated in the Privacy Notice, we may share your personal data with the following third parties or affiliate companies as separate responsible parties:

UPS may share personal information with governmental authorities, regulatory authorities, and law enforcement authorities for purpose of complying with our statutory obligations. UPS may also disclose your personal information to third parties if this is required by law, a statutory provision or legal decision or if such communication is required in order to protect and defend its rights.

Sensitive Information

For the purposes stated in the Privacy Notice, the types of sensitive personal information we may collect and use include:

We will process your sensitive personal information in accordance with PRC laws and regulations, only when necessary to provide you with UPS products and services and obtain your separate consent before our collection. Sensitive Personal Information refers to the personal information that is likely to result in damage to the personal dignity of any natural person or damage to his or her personal or property safety once disclosed or illegally used, including such information as biometric identification, religious belief, specific identity, medical health, financial account and whereabouts and tracks, as well as the personal information of minors under the age of 14.

Minors

We generally do not process personal information from a child under 14 years of age. However, if such processing is necessary for providing relevant services, we will obtain consent from his or her parent or legal guardian, and will request that the child furnish the minimum information necessary for us to obtain consent from the parent or legal guardian. The parent or legal guardian may exercise the minor’s rights under the UPS Privacy Notice. We will only process the child’s information for purposes that are necessary. UPS will treat minors’ personal information as sensitive personal information and comply with relevant rules on sensitive personal information.

Cross-border Data Transfers

We may transfer your personal information outside of mainland China as is necessary for UPS to provide its international express shipping and related services to you, including for the purposes set out in the UPS Privacy Notice (where applicable). Our data transfers to overseas recipients will be in accordance with PRC laws and regulations, including those on cross-border data transfer. The overseas recipients of cross-border data transfers are our UPS Affiliates located outside China mainland.

Data Retention

UPS will only retain your information (i) for as long as we require to fulfil the necessary purposes of processing your information as stated in the UPS Privacy Notice, and (iii) for as long as we are required to under applicable laws or administrative regulations. For example, according to the Post Industry Standards – Express Service YZ/T 0128—2007, physical express waybill should be stored for at least six months and electronic express waybill should be stored for at least a year; according to the Civil Code, the limitation of civil action is three years. Your personal information will be securely deleted or disposed of thereafter. If we have to retain certain data due to legal reasons, we will process such data to the extent required by laws and regulations and have processes to not use it in our daily business activities.

Exercising Your Rights and Contacting Us

If you wish to exercise any of your rights under the Personal Information Protection Law of China in relation to your personal information that UPS holds, including to:

you may make your request or complaint to UPS Parcel Delivery (Guangdong) Co., Ltd. ( 广州市海珠区新港东路620号1401房自编1410、1412-1417号, Room 1401, No. 620 Xingang East Road, Haizhu District, Guangzhou).

Your request or complaint will be processed and we will respond to you as required by law. We may need to verify your identity if you are requesting information about yourself or a close relative.