Privacy Policy and Notice Privacy Policy and Notice At NFI Industries, Inc. and its affiliated companies (collectively referred to as “NFI” or “we”/”us” or “our”) we respect the privacy concerns of our employees, customers and business partners (“you” or “your”) about their privacy and the collection and use of their personal information. This Privacy Policy and Notice (the “Policy”) describes the types of personal information or personally identifiable information (“Personal Information”) that we routinely collect both online and in other ways described in the Policy, how we may use the Personal Information and with whom we may share it. The Policy also describes the steps that we take to safeguard and protect your Personal Information from unauthorized use and disclosure. In addition, the Policy is intended to tell you how you can request: (i) access or changes to your Personal Information in our records; (ii) withdraw consent that you previously provided to us regarding your Personal Information; (iii) cease sending you certain types of communications; and (iv) answer your questions about our privacy practices and how we may change them over time. At the outset, we note that many states of these United States and other countries (like the United Kingdom and Switzerland) and groups of countries (like the European Union) have enacted laws, regulations and rules (“Laws”) which refer or relate to privacy and which may affect your rights regarding your Personal Information. We have attempted, in this Policy, to make reference to the basic provisions of these Laws, particularly those in the United States, in effect when this Policy was last revised but you should always check with the jurisdictions where you work or reside to obtain the details of the most current Laws affecting your Personal Information which, if they differ from the provisions of this Policy, will always supersede the terms of this Policy. We reserve the right to amend this Policy at any time consistent with changes in then-current Laws. Please note for HR Individuals in California (as defined in the Notice and Collection and Privacy Policy for HR Individuals Who Reside in California), and Applicants of California (as defined in the Notice at Collection and Privacy Policy for California Applicants) this policy should be read in conjunction with the following resources: Notice and Collection and Privacy Policy for HR Individuals Who Reside in California and the Notice at Collection and Privacy Policy for California Applicants. This Privacy Policy and Notice is not a contract with us and does not create any contractual rights or obligations. There may be links on our websites to the websites of third parties. We do not control or have any responsibility for those websites. Please refer to the privacy policies of such third parties. This Policy is divided into several parts: (1) What is Personal Information? Personal Information, also known as “Personal Data” and “Personally Identifiable Information” (“PII”), is defined differently in the various Laws. The New Jersey Data Privacy Act defines “Personal Data” as any information that is linked or reasonably linkable to an identified or identifiable person but notes that “Personal Data” does not include de-identified data or publicly available information. The EU’s General Data Protection Regulation (“GDPR”) defines “Personal Data” as any information relating to an identified or identifiable natural person (data subject). The GDPR states that data is classified as “personal data” if an individual can be identified directly or indirectly, using online identifiers such as their name, an identification number, IP addresses, or their location data. Sensitive personal information (“SPI”) includes data like medical records and financial info, requiring strict protection. [GDPR, CPRA, and PIPEDA define and protect SPI, emphasizing encryption and valid reasons for processing.] The New Jersey Data Privacy Act (N.J. Stat. Ann. §§ 56:8-166.4 – 166.19 (2024)) defines “Sensitive Data” to include: race or ethnic origin, religious beliefs, citizenship or immigration status, genetic data, biometric data, mental or physical health condition, treatment or diagnosis, sex life (including transgender or nonbinary), financial information, precise geolocation data and Personal Data collected from a known minor. California’s CPRA identifies contents of a consumer’s mail, e-mails and texts as SPI. We do not intentionally collect SPI. We may aggregate or deidentify Personal Information and use or disclose it at our discretion to support our business. Where we maintain deidentified Personal Information, we commit to maintaining and using such information in deidentified form only and will not attempt to reidentify such information except as necessary to evaluate the effectiveness of our deidentification policies and procedures. (2) What Personal Information do we routinely collect? We may obtain Personal Information (such as name, contact details and payment information) in connection with various activities such as (i) use of the NFI websites and applications, (ii) shipping activities, including delivery and pick-up of shipments, (iii) requests to track shipments or answer questions, (iv) events in which we participate, (v) promotions and other offers, and (vi) calls placed or web-based chats with customer service and accounting centers which may be recorded; your correspondence with us via regular mail, e-mail or text. The types of Personal Information we may obtain include: Individual and business contact information (such as name, company name, physical address, email address and telephone or fax number) Shipping information (such as (i) shipping-related contact details like the sender’s, and consignee’s name, physical address, email address and telephone number, (ii) signature for proof of delivery, (iii) NFI account number, (iv) information given to us that helps us access locations to which we provide service, (v) package tracking number,(vi) information created by NFI or NFI Business Partners to document the delivery process and information provided to us regarding the content of certain shipments, but only to the extent an identifiable person can be linked to such content Information that enables us to verify a shipper or an individual’s identity Names, email addresses and telephone numbers of customer’s employees and others to whom we are asked to send information Information provided by and about applicants for employment by NFI, including information obtained in the course of vetting and investigating applicants Information about employees of NFI and their families, including information in personnel files and records of payroll and benefits provided by NFI Information about contractors and suppliers of NFI, including information in ordering, shipping and payment information as well as credit information submitted by or about them by third parties, including credit reporting organizations Information provided in response to customer surveys Username, password and other credentials used to access NFI products and services Social media handles, content and other data posted on our official social media pages or elsewhere on the Internet (such as other public locations), and information (such as email address and other information you allow to be shared) we obtain through NFI-related social media apps, tools, widgets and plug-ins (including third-party login services such as “Login with Facebook”) Information provided by you or that we obtain in connection with third party platforms which you use to interact with us, such as instant messaging and communication platforms. This includes: (i) the content of messages you send; (ii) the content of our replies (e.g., providing requested information); and (iii) metadata linked to those messages (such as a conversation or user ID), but only to the extent an identifiable person can be linked to such information The geographic location of your mobile device (including GPS tracking information) if you use certain features of our apps Biometric data collected at our facilities and from our vehicles Payment information (including payment card details or online payment services number and invoicing address) and financial information (such as bank account numbers) Tax identification number or business identification number (to the extent this constitutes Personal Information) in circumstances in which you request products or services for which this information is required, or in connection with certain promotions or prize draws Other Personal Information that may be provided to us to obtain a NFI product or service Video and still images that we collect through the use of video technology at NFI facilities and on NFI vehicles, subject to the requirements and limitations of applicable Laws We also receive Personal Information from our customers in order to perform services. We may receive Personal Information from third parties, including public databases, social media platforms, instant messaging and communication platforms, or third-party partners such as analytics or marketing providers. When we pick up or deliver a shipment or provide other services, we may obtain physical location data. This includes, for example, data identifying the actual location of a physical address using information such as GPS data, geocodes, latitude and longitude information, and images of the various locations. In addition, when you visit our websites, use our chatbot, use our apps, interact with NFI through third party platforms such as instant messaging and communication platforms, or interact with NFI-related tools, widgets or plug-ins, we may collect certain information by automated means, such as cookies and web beacons. The information we collect in this manner includes IP address, unique device identifier, browser characteristics, device characteristics, operating system, language preferences, referring URLs, information on actions taken, and dates and times of activity. As part of our website and, in order to provide you with customizable services, we use cookies and other online tracking technologies to store and sometimes track information, including Personal Information, about you. We may use these technologies to: Provide you with personalized content based on your use of our site Enable you to more easily use our site by remembering and using contact information, purchasing information, and registration information Evaluate, monitor and analyze the use of our site and its traffic patterns to help improve our site and services Assist us with ad reporting functions such as learning which ads are bringing users to our website The types of technologies we use include cookies, web beacons and log files. Cookies. A cookie is a small amount of data that is sent to your browser from a web server and stored on your computer’s hard drive. Cookies enable us to identify your browser as a unique user. Cookies may involve the transmission of information from us to you and from you to us. Cookies may also be used by another party on our behalf to transfer information to us in accordance with their privacy statement. There are several types of cookies: Necessary cookies are required to enable the basic features of this site, such as providing secure log in or adjusting your consent preferences these cookies do not store any personally identifiable data Functional cookies help perform certain functions like sharing the content of the website with social media platforms, collecting feedback, and other third-party features. Analytical cookies are used by NFI to understand how you interact with the website. These cookies help provide information for metrics such as the number of visitors, bounce rate, traffic source, etc. Performance cookies are used to understand and analyze the key performance indexes of the website which help us deliver a better user experience to you and other visitors. Advertisement cookies are used to provide you with customized advertising based upon the webpages that you visited previously and to analyze the effectiveness of advertising campaigns. Uncategorized cookies are cookies that have yet to be evaluated and classified into one of the categories. Some cookies are “persistent cookies.” They are used by us each time you access our website. Other cookies are called “session cookies.” Session cookies are used only during a specific browsing session. We may use a session cookie, for example, to remember that you have already navigated through a particular menu, or that you have already registered with us. We may also use “analytical cookies” that allow web analytics services to recognize your browser or device and, for example, identify whether you have visited our website before, what you have previously viewed or clicked on, and how you found us. This information is provided anonymously for statistical analysis only. Analytical cookies are usually persistent cookies. Our website offers visitors the option of accepting or “de-selecting” certain cookies on our website saving their preferences. Of course, you cannot de-select necessary cookies and if you de-select others it may make certain functions or features of the website unavailable or less accessible. When you save your cookie preferences on our website, it may not automatically remember the settings for the next visit. Cookies are temporary files that may only last until your browser session is closed. You should confirm your preferences each time that you visit our website. Web beacons. We may also employ a software technology called clear GIF Graphics Interchange Format, also known as a pixel tag or web beacon. A clear GIF is a line of code that we place on our website or in e-mails which allows us to analyze our advertising and the general usage patterns of visitors to our website. These help us better manage content on our website by informing us as to what content or promotions are more or less effective. Unless you consent, we do not collect personally identifiable information from you through the use of web beacons. You may not disable web beacons. Log Files. Like most standard websites, NFI uses log files. Log files track Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, platform type, date/time stamp, and number of clicks. We utilize this information to analyze trends, administer the site, prevent fraud, track website navigation in the aggregate, and gather broad demographic information for aggregate use. You may not disable log files. The providers of third-party apps, tools, widgets and plug-ins on our websites and apps, such as Facebook “Like” button, also may use automated means to collect information regarding your interactions with these features. This information is subject to the privacy policies or notices of these providers and is outside the scope of this Policy. (3) How do we use the Personal Information that we collect? We may use the Personal Information that we collect in a variety of ways consistent with applicable Laws. These include: to setup, pick up, deliver and track shipments to provide products and services you request (such as logistics, supply chain management, customs clearance and brokerage services, and financial services) to process and collect and make payments to provide customer support and respond to and communicate with you about your requests, questions and comments to send you tracking updates (from NFI and/or our business partners), communicate with you directly to help you select convenient delivery options and facilitate the delivery (provided your consent was obtained where required) to establish and manage your NFI account (including your online account on nfiindustries.com and its various features, such as the address book and the NFI Billing Center) to offer you products and services we believe may interest you to communicate about, and administer your participation in, special events, programs, surveys, contests, prize draws and other offers or promotions to enable you to post on our blogs and interact with NFI through social media and other third-party platforms which you use (such as instant messaging and communication platforms) to send information to your contacts if you ask us to do so to process claims we receive in connection with our services to operate, evaluate and improve our business (including developing new products and services); to hire, train and manage NFI employees and provide them with payroll and benefits, to manage our communications; determine the effectiveness of our sales, marketing and advertising; to analyze and enhance our products, services, technologies, websites and apps, including artificial intelligence technologies; to ensure the security of our networks and information systems; to perform accounting, auditing, invoicing, reconciliation and collection activities; and to improve and maintain the quality of our customer services to perform data analyses (including market and search and analytics, trend analysis and profiling, financial analysis and anonymization of Personal Information) to protect against, identify and prevent fraud and other prohibited or illegal activity, claims and other liabilities to comply with applicable legal requirements and our policies to establish, exercise and defend legal claims to monitor and report compliance issues In addition, we use Personal Information collected online through cookies, web beacons and other automated means for purposes such as (i) customizing our users’ visits to our websites and apps, (ii) delivering content (including advertising) tailored to our users’ interests and the manner in which our users browse our websites and apps, (iii) improving website functionality and user experience, (iv) debugging, identifying, and repairing errors that impair the intended functionality of our websites, (v) providing customer service and support, and (vi) managing our business. We may supplement data we collect through automated means with information about your location (such as your postcode) to provide you with content that may be of interest to you. We also use this information to help diagnose technical and service problems, administer our websites and apps, identify users of our websites and apps, and gather demographic information about our users. We use clickstream data to determine usage patterns and how we may tailor our websites and apps to better meet the needs of our users. Our websites and apps are not designed to respond to “do not track” requests from your browser. (4) How do we share Personal Information with others? We do not sell or otherwise share Personal Information about you, except as described in this Privacy Notice. To perform our services, we share shipping information with third parties such as shippers, consignees, third party payers and recipients. We also share Personal Information with third parties who need it to perform services on our behalf based on our instructions, including third-party software providers that support our web-based chats. These third parties are not authorized by us to use or disclose the information except as necessary to perform services on our behalf or comply with legal requirements. Some Laws may treat these information exchanges as “sales.” We also may share the Personal Information we obtain with our business partners and joint marketing partners. These entities may use the information for the purposes described in this Privacy Notice. We may share physical location data with these entities and other third parties to, for example, enhance location-based services and develop accurate and up-to-date maps. We engage certain trusted third parties to perform functions and provide services to us, including error monitoring, debugging, performance monitoring, payment processing, customer relationship, database storage and management, and direct marketing campaigns. We may share your Personal Information with these third parties, but only to the extent necessary to perform these functions and provide such services. We also require these third parties to maintain the privacy and security of the Personal Information they process on our behalf. Personal Information collected through third-party apps, tools, widgets and plug-ins (such as information obtained through third-party login services or relating to your use of a Facebook “Like” button) is collected directly by the providers of these features. This information is subject to the privacy policies of the providers of the features, and we are not responsible for those providers’ information practices. Some of our customers outsource all or a part of their supply chains to NFI. Through our forwarding and logistics business units, we manage these supply chains, focusing on supply chain optimization, freight forwarding and international trade and brokerage services for our customers worldwide (including a broad range of transportation solutions such as air, ocean and ground freight). In these circumstances, we process the information – including any Personal Information — based on the agreements with our customer. We reserve the right to share your Personal Information during the course of accounting, audits and corporate transactions, including the sale of assets of NFI subject to non-disclosure agreements. We also may disclose Personal Information about you (i) if we are required to do so by law, regulation or legal process (such as a court order or subpoena), (ii) in response to requests by government agencies, such as law enforcement authorities, or (iii) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss or in connection with an investigation of suspected or actual illegal activity. We reserve the right to transfer any information we have about you in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganization, dissolution or liquidation). (5) How do we protect the Personal Information that we collect? We maintain administrative, technical and physical safeguards designed to protect the Personal Information you provide against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. We take steps to limit access to our facilities and vehicles to authorized individuals and limit access to information systems that store non-public information, including Personal Information. (6) How do we effect data transfers that may include your Personal Information? We may transfer the Personal Information that we collect about you to countries other than the United States. Those countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your Personal Information to other countries, we will protect that Personal Information in accordance with contracts limiting disclosure and use of that Personal Information and all applicable Laws. (7) How long do we retain the Personal Information that we collect? We will retain your Personal Information only as long as we need it for the purpose or purposes for which we collected it or for such other uses as arise thereafter consistent with all applicable Laws. (8) How can you access, correct or delete your Personal Information from our records? Subject to requirements and limitations of applicable Laws, (i) you may obtain a copy of certain Personal Information we maintain about you or update or correct inaccuracies in that information through your nfiindustries.com account on nfiindustries.com, (ii) you may request that we delete Personal Information that we have collected about you, or (iii) you may have the right to obtain access to Personal Information we maintain about you by contacting us as indicated in the “How To Contact Us” section of this Privacy Notice. To help protect your privacy and maintain security, we will take steps to verify your identity and/or may ask you to provide other details before granting you access to the information. In addition, if you believe that Personal Information that we maintain about you is inaccurate, subject to requirements and limitations of applicable Laws, you may have the right to request that we correct or amend the information by contacting us as indicated below. You may have certain other privacy-related rights as described in jurisdiction-specific addenda to this Privacy Notice. The deletion of certain of your Personal Information may affect your ability to communicate with NFI, to receive certain information or benefits from NFI and, in certain cases, to conduct business or obtain or continue employment with NFI. (9) CAN-SPAM Act The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations. We collect your email address in order to: Send information, respond to inquiries, and/or other requests or questions Process orders and to send information and updates pertaining to orders Send you additional information related to your product and/or service Market to our mailing list or continue to send emails to our clients after the original transaction has occurred To be in accordance with CAN-SPAM, we agree to the following: Not use false or misleading subjects or email addresses Identify the message as an advertisement in some reasonable way Include the physical address of our business or site headquarters Monitor third-party email marketing services for compliance, if one is used Honor opt-out/unsubscribe requests quickly Allow users to unsubscribe by using the link at the bottom of each email. If at any time you would like to unsubscribe from receiving future emails, please follow the instructions at the bottom of each email to be promptly removed you from ALL correspondence. (10) How to contact us (with questions concerning your Personal Information or our privacy practices) If you wish to: (i) obtain a copy of certain Personal Information we maintain about you or update or correct inaccuracies in that information, (ii) request that we delete Personal Information that we have collected about you, or (iii) change your consents regarding your Personal Information; (iv) to obtain access to Personal Information about you in our possession, or (v) obtain answers to any other questions that you may have about your Personal Information: (a) You may write to NFI at the following address: NFI Industries, Inc. TRIAD1828 Centre 2 Cooper Street Camden, NJ 08102 (b) You may contact NFI’s Privacy Compliance Officer by addressing your request or question in an e-mail sent as follows: privacy@nfiindustries.com (c) You may call NFI’s Privacy Compliance Officer at the following toll-free number: 1-877-696-3409 (11) Personal Information of Minors We do not knowingly collect Personal Information from persons under the age of 13. If you believe anyone under age 13 has provided Personal Information to us, please contact us as indicated in the “How to Contact Us” section of this Privacy Notice and we will immediately delete it. (12) How can I determine whether the jurisdiction where I work or live has enacted Laws affecting my rights in my Personal Information? A current summary of Laws currently enacted in the United States and certain foreign countries is set out in Annex A to this Policy. (13) How will we update this Policy to reflect our changing privacy practices? This Policy may be updated periodically and without prior notice to you to reflect changes in our privacy practices. We will post a notice on our websites to notify you of any significant changes to our Policy and indicate at the top of the notice when it was most recently updated.