Privacy Notice

We at United Parcel Service, Inc., along with our subsidiaries and affiliates (collectively, 'UPS'), respect your concerns about privacy.

This Privacy Notice describes the types of personal information we collect about consumers, how we may use the information and with whom we may share it. The notice also describes the measures we take to safeguard your personal information. In addition, we tell you how you can ask us to (i) access or change the personal information we maintain about you, (ii) withdraw consent you previously provided to us, (iii) refrain from sending you certain communications, and (iv) answer questions you may have about our privacy practices. This notice does not apply to The UPS Store or any other retail location. This Notice does not apply to any subsidiary or affiliate of United Parcel Service, Inc. that maintains its own privacy notice, including The UPS Store or any other retail location.

Our privacy practices may vary among the countries or territories in which we operate to reflect local practices and legal requirements.

You can view certain country-specific information by selecting the Addendum link below.

We may obtain consumer personal information (such as name, contact details and payment information) in connection with various activities, such as (i) use of the UPS websites and applications, (ii) shipping activities, including delivery and collection of shipments, (iii) requests to track shipments or answer questions, (iv) events in which we participate, (v) promotions and other offers, and (vi) calls placed or web-based chats with customer service and accounting centres which may be recorded.

The types of personal information that we may obtain include:

• Individual and business contact information (such as name, company name, physical address, email address, and telephone or fax number)
• Shipping information, (such as (i) shipping-related contact details like the sender's and consignee's and/or neighbour's (for UPS My Choice's ‘leave with neighbour’ feature) name, physical address, email address and telephone number, (ii) signature for proof of delivery, (iii) UPS account number and (iv) information given to us that helps us access locations to which we provide service) and information provided to us regarding the content of certain shipments, but only to the extent an identifiable person can be linked to such content.
• Information that enables us to verify an individual's identity
• Names, email addresses and telephone numbers of others to whom we are asked to send information
• Information provided in response to surveys
• Username, password and other credentials used to access UPS products and services
• Social media handles, content and other data posted on our official social media pages or elsewhere on the Internet (such as other public locations), and information (such as email address and other information that you allow to be shared) we obtain through UPS-related social media apps, tools, widgets and plug-ins (including third-party login services such as ‘Log in with Facebook’)
• The geographical location of your mobile device if you use certain features of our apps
• Payment information (including payment card details or online payment services number and invoicing address) and financial information (such as bank account numbers)
• Tax identification number in circumstances in which you request products or services for which this information is required, or in connection with certain promotions or prize draws
• Other personal information that may be provided to us to obtain a UPS product or service

We also receive consumer personal information from our customers in order to perform services. We may receive personal information from third parties, including public databases, social media platforms or third party partners such as analytics or marketing providers.

When we pick up or deliver a shipment or provide other services, we may obtain physical location data. This includes, for example, data identifying the actual location of a physical address using information such as GPS data, geocodes, latitude and longitude information, and images of the various locations.

In addition, when you visit our websites, use our chatbot, use our apps or interact with UPS-related tools, widgets or plug-ins, we may collect certain information by automated means, such as cookies and web beacons. The information we collect in this manner includes IP address, unique device identifier, browser characteristics, device characteristics, operating system, language preferences, referring URLs, information on actions taken, and dates and times of activity. A ‘cookie’ is a text file that websites send to a visitor’s computer or other Internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser. A ‘web beacon’ also known as an Internet tag, pixel tag or clear GIF, links web pages or apps to web servers and may be used to transmit information back to a web server. Through these automated collection methods, we obtain and store ‘clickstream’ data to tell us usage patterns. We may link certain data elements we have collected through automated means, such as your browser information, with other information we have obtained about you to let us know, for example, whether you have opened an email we sent to you. We also use third-party analytics tools that collect information about visitor traffic on our websites or apps. Your browser may tell you how to be notified when you receive certain types of cookies or how to restrict or disable certain types of cookies. Please note, however, that without cookies you may not be able to use all the features of our websites or apps. Both we and others (such as our advertising networks) may collect personal information about our visitors’ online activities, over time and across third-party websites, when using our websites and apps.

We collect session analytics information, including browsing behaviour, click patterns, keystrokes and pages visited, when you visit our websites and applications. We and our third-party service provider may also collect, record and analyse interactions with the chat feature of our website and application. This information helps us understand our customers’ online activities, determine usage patterns, provide customer service and support, and improve and impair website functionality. This information is also helpful to our experience teams so they can design better experiences for you.

The providers of third-party apps, tools, widgets and plug-ins on our websites and apps, such as the Facebook ‘Like’ button, also may use automated means to collect information regarding your interactions with these features. This information is subject to the privacy policies or notices of these providers.

We may use the information we obtain to:

• Pick up, deliver and track shipments
• Provide products and services you request (such as logistics, supply chain management, customs clearance and brokerage services, and financial services)
• Process and collect payments
• Provide customer support and respond to and communicate with you about your requests, questions and comments
• Send you tracking updates (from UPS and/or our business partners) and help you select convenient delivery options
• Establish and manage your UPS account (including your online account on UPS.com and its various features, such as the address book and the UPS Billing Centre)
• Offer you products and services that we believe may interest you
• Communicate about, and administer your participation in, special events, programmes, surveys, contests, prize draws and other offers or promotions
• Enable you to post on our blogs and interact with UPS through social media
• Send information to your contacts if you ask us to do so
• Process claims we receive in connection with our services
• Operate, evaluate and improve our business (including developing new products and services; managing our communications; determining the effectiveness of our sales, marketing and advertising; analysing and enhancing our products, services, websites and apps; ensuring the security of our networks and information systems; performing accounting, auditing, invoicing, reconciliation and collection activities; and improving and maintaining the quality of our customer services)
• Perform data analyses (including market and consumer search and analytics, trend analysis and profiling, financial analysis and anonymisation of personal information)
• Protect against, identify and prevent fraud and other prohibited or illegal activity, claims and other liabilities
• Comply with applicable legal requirements and our policies
• Establish, exercise and defend legal claims
• Monitor and report compliance issues

In addition, we use information collected online through cookies, web beacons and other automated means for purposes such as (i) customising our users' visits to our websites and apps, (ii) delivering content (including advertising) tailored to our users' interests and the manner in which our users browse our websites and apps, and (iii) managing our business. We may supplement data we collect through automated means with information about your location (such as your postcode) to provide you with content that may be of interest to you. We also use this information to help diagnose technical and service problems, administer our websites and apps, identify users of our websites and apps, and gather demographic information about our users. We use clickstream data to determine usage patterns and how we may tailor our websites and apps to better meet the needs of our users. Our websites and apps are not designed to respond to 'do not track' requests from browsers.

On our websites and apps, we may collect information about your online activities for use in providing you with advertising about products and services tailored to your individual interests. This section of our Privacy Notice provides details and explains how to exercise your choices.

You may see certain ads on other websites because we participate in advertising networks. Ad networks allow us to target our messaging to users through demographic, interest-based and contextual means. These networks track your online activities over time by collecting information through automated means, including through the use of cookies, web server logs and web beacons. The networks use this information to show you advertisements that may be tailored to your individual interests. The information that our ad networks may collect includes information about your visits to websites that participate in the relevant advertising networks, such as the pages or advertisements you view and the actions you take on the websites. This data collection takes place both on our websites and on third-party websites that participate in the ad networks. This process also helps us track the effectiveness of our marketing efforts. To learn how to opt out of this ad network interest-based advertising, select here.

We do not sell or otherwise share personal information about you, except as described in this Privacy Notice. To perform our collection and delivery services, we share shipping information with third parties such as shippers, consignees, third-party payers and recipients. We also share personal information with third parties who perform services on our behalf based on our instructions, including third-party software providers that support our web-based chats. These third parties are not authorized by us to use or disclose the information except as necessary to perform services on our behalf or comply with legal requirements.

We also may share the personal information we obtain with our affiliates, franchisees, resellers and joint marketing partners. These entities, which collectively are referred to here as the ‘UPS Business Partners’, may use the information for the purposes described in this Privacy Notice. We may share physical location data with our UPS Business Partners and other third parties to, for example, enhance location-based services and develop accurate and up-to-date maps. In addition, except as described below, unless you object, we may share other personal information with third parties who are not UPS Business Partners for those parties' own purposes, such as to offer products or services that may interest you.

Information collected through third-party apps, tools, widgets and plug-ins (such as information obtained through third-party login services or relating to your use of a Facebook ‘Like’ button) is collected directly by the providers of these features. This information is subject to the privacy policies of the providers of the features, and UPS is not responsible for those providers' information practices.

Many of our customers outsource all or a part of their supply chains to us. Through our forwarding and logistics business units, we manage these supply chains, focusing on supply chain optimization, freight forwarding and international trade and brokerage services for our customers worldwide (including a broad range of transportation solutions such as air, ocean and ground freight). We also provide information technology systems and distribution facilities adapted to the unique supply chains of specific industries such as healthcare, technology and consumer/retail businesses. In the course of providing forwarding and logistics services, we may obtain, use and disclose personal information about our customers' customers. In these circumstances, we process the information based on the agreement with our customer.

We also may disclose information about you (i) if we are required to do so by law, regulation or legal process (such as a court order or subpoena), (ii) in response to requests by government agencies, such as law enforcement authorities, or (iii) when we believe that disclosure is necessary or appropriate to prevent physical harm or financial loss or in connection with an investigation of suspected or actual illegal activity. We reserve the right to transfer any information we have about you in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganisation, dissolution or liquidation).

Subject to applicable law, (i) you may obtain a copy of certain personal information we maintain about you or update or correct inaccuracies in that information through your ups.com account on UPS.com, (ii) you may request that we delete personal information that we have collected about you, or (iii) you may have the right to obtain access to personal information we maintain about you by contacting us as indicated in the "How To Contact Us" section of this Privacy Notice. To help protect your privacy and maintain security, we will take steps to verify your identity and/or may ask you to provide other details before granting you access to the information. In addition, if you believe that personal information we maintain about you is inaccurate, subject to applicable law, you may have the right to request that we correct or amend the information by contacting us as indicated below.

For your convenience and information our websites and apps may contain links to non-UPS places that may be operated by companies not affiliated with UPS. These companies may have their own privacy policies or notices, which we strongly suggest you review. Our services also may be made available to you through third-party platforms (such as providers of app stores) or through other third-party channels. We are not responsible for the privacy practices of any non-UPS places or services.

We maintain administrative, technical and physical safeguards designed to protect the personal information you provide against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use. Although we take steps to limit access to our facilities and vehicles to authorised individuals, information that is located on the outside of a parcel or letter may be visible to others.

If you have any questions or comments about this Privacy Notice, or if you would like us to update information we have about you or your preferences, please contact us by email using the Email Application.

You also may write to us at:

UPS Corporate Headquarters
Attention: Global Privacy Manager
55 Glenlake Parkway, NE
Atlanta, GA 30328
United States

If you are located in Europe, please write to:

UPS Europe SA
Attention: Data Protection Officer
Ave Ariane 5
Brussels, B-1200
Belgium

In addition, if you reside in the European Economic Area, you may identify the relevant data controller for your personal information in accordance with the section 'Relevant Data Controller' in the EEA Addendum below.

If you are a resident of the European Economic Area ('EEA'), the following additional EEA-specific provisions apply to our processing of your personal information. For EEA residents, the provisions of this EEA Addendum prevail over conflicting provisions in the Privacy Notice.

Relevant Data Controller
In addition to United Parcel Service, Inc., our subsidiaries and affiliates located in the EEA collect personal information.

The relevant data controller for your personal information is the UPS entity listed for the country you reside in according to the following list:

UPS Data Controllers

Information We Obtain
We process names, email addresses and telephone numbers of others to whom we are asked to send information on the assumption that the person who provided the information obtained it in accordance with applicable law. If this assumption is incorrect, please do not ask us to send information to third parties on your behalf.

We may need certain of your information in order to provide services, such as street addresses to deliver parcels, or to use our website or our apps, such as your IP address. In addition, we may be required by law to collect certain information, such as whether a parcel contains hazardous materials. Where such information is so required, we may be unable to provide you with our services unless you provide us with this information.

In accordance with applicable law, we may obtain your consent separately before collecting information by automated means using cookies or similar devices. To learn more about the cookies and similar devices we use, please see our Cookies Policy.

How We Use the Information We Obtain
The legal bases for which we collect, use, transfer or disclose your personal information include (i) the performance of the contract we have with you, (ii) marketing, improvement of our services and other legitimate business interests, (iii) compliance with a legal obligation and (iv) the protection of yours and others vital interests. The corresponding purposes for which we process your personal information are systematically included in the 'How We Use the Information We Obtain' section in the Privacy Notice above.

We may process your personal information based on your consent, where required by law. If we request your consent, we will inform you of the intended purposes for which your information will be processed. Please note that if you choose to withdraw your consent, you may not be able to participate in or benefit from our programs, services and initiatives for which you provided consent. We also may use the information we obtain about you in other ways for which we provide specific notice at the time of collection.

Data Retention
Your personal information will not be stored for longer than necessary for the purposes for which they were collected or as required under applicable retention policies and/or in accordance with applicable law. Our retention policies reflect local statute of limitation periods and national statutory obligations of UPS.

International Data Transfers
If you are a resident of the European Economic Area ("EEA"), we may transfer your personal information to countries that have not been found by the European Commission to provide adequate protection, including the United States. For any such transfers, UPS takes necessary contractual measures to ensure that your personal information receives an adequate level of protection (including, for example, standard contractual clauses). Due to the global nature of UPS operations, we may also disclose your personal information to other entities of the UPS group to fulfil the purposes described in this Privacy Notice. We have established a UPS group-wide Privacy Code for Customers to protect the transfers of personal information of our customers, suppliers, and business partners outside the EEA as required under applicable data protection laws (the "Privacy Code"). This Privacy Code was submitted for approval to competent European supervisory authorities and complies with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data on the free movement of such data ("GDPR") on binding corporate rules used as appropriate transfer safeguards. This Privacy Code contains legally binding and enforceable internal policies that apply to all UPS group entities and explains how we protect the personal information of customers, suppliers, and business partners that we process and transfer in the context of our business activities. You can access a summary of our Privacy Code, the list of definitions of our Privacy Code, how to exercise your rights under the Privacy Code and how we process and transfer personal data outside the EEA here. Please note that the Privacy Code does not affect the rights established by the GDPR and only provides supplemental rights and remedies to our customers, suppliers, and business partners.

For further information about UPS's international data transfer practices, and to consult contractual measures or our Privacy Code, please contact us using the contact details in the "How to Contact Us" section above.

Your Personal Information Rights
In addition to the right to access and correction, as specified above (under 'Access and Correction' in the main body of this Notice), you have (i) the right to request the transmission of the personal information you have provided to us to you or another company, (ii) the right to object to any uses or disclosures of your personal information, (iii) the right to withdraw your consent in relation to our processing of your personal information based on your consent, (iv) the right to request deletion of your personal information and (iv) the right to request that we restrict processing of your personal information.

You may exercise these rights free of charge unless the request is unfounded, excessive, or otherwise unreasonable, for instance, because it is repetitive. In some situations, we may refuse to act or may impose limitations on your rights, as permitted by law. Before UPS is able to provide you with any information or correct any inaccuracies, we may ask you to verify your identity and/or provide other details to help us respond to your request. For the exercise of your rights, please contact us using the contact information provided above in the 'How to Contact Us' section. In all cases, you have a right to file a complaint with a Data Protection Authority.

This Privacy Notice may be updated periodically and without prior notice to you to reflect changes in our personal information practices. We will post a prominent notice on our websites to notify you of any significant changes to our Privacy Notice and indicate at the top of the notice when it was most recently updated.

This addendum ("Addendum”) to the UPS Privacy Notice applies to you if your personal information is being processed by UPS Parcel Delivery Service (Guangdong) Co. Ltd (“UPS”) in mainland of the People’s Republic of China. These terms are set out in addition to and from an integral part of the terms of the UPS Privacy Notice above. In the event of any conflict or inconsistency between the UPS Privacy Notice and this Addendum, the terms of this Addendum shall govern and prevail.

UPS deeply understands the importance of personal information to you and will strive to protect the privacy and security of your personal information. We are committed to maintaining your trust in us, adhering to the principles of legality, legitimacy, necessity, and integrity to protect your personal information, and upholding the following principles: the principle of consistency between rights and responsibilities, the principle of clear purpose, the principle of choice and consent, the principle of minimum necessary use, the principle of ensuring security, the principle of subject participation, and the principle of openness and transparency. At the same time, UPS promises that we will adopt corresponding security protection measures in accordance with industry-mature security standards to protect your personal information. Through this Addendum, we explain to you how we collect, use, store, and provide externally this information when you use our products and/or services, as well as the methods we provide for you to access, update, delete, and protect this information.

This Addendum will help you understand the following aspects concerning UPS’s processing of your personal information:

1. Information We Obtain and How We Use the Information We Obtain
2. Information We Share
3. Sensitive Information
4. Minors
5. Personal Information Security Protection
6. Cross-border Data Transfers
7. Data Retention
8. Exercising Your Rights and Contacting Us
9. Cancelling your UPS User ID
10. Dispute Resolution

1. Information We Obtain and How We Use the Information We Obtain

We may obtain consumer and business contact personal information (such as name, contact details and payment information) in connection with various activities, such as (i) use of the UPS websites and applications, (ii) shipping activities, including delivery and collection of shipments, (iii) requests to track shipments or answer questions, (iv) events in which we participate, (v) promotions and other offers, and (vi) calls placed or web-based chats with customer service and accounting centres which may be recorded. Please refer to the “Information We Obtain” and “How We Use the Information We Obtain” sections in the main body of the UPS Privacy Notice for detailed information of how we obtain and use your personal information. Below we elaborate to you the major circumstances where we may collect and process your personal information.

UPS User ID account. In order to establish and manage your UPS User ID account (including your online account on UPS.com and its various features, such as the address book and the UPS Billing Centre), we may collect your name, user login ID and user login password for the UPS User ID, email address, and telephone number (optional). If you do not provide relevant information, you may not be able to establish an UPS User ID and enjoy relevant services associated with the UPS User ID, but you can still use our shipment services as a guest user or though customer support or offline services.

Shipment services. In order to provide services of picking up, delivering and tracking shipments, and sending you tracking updates, we may collect shipping information (such as (i) shipping-related contact details, like the sender's and consignee's and/or neighbour's (for UPS My Choice's ‘leave with neighbour’ feature) name and physical address, (ii) signature for proof of delivery, (iii) UPS account number and (iv) information given to us that helps us access locations to which we provide service); information provided to us regarding the content of certain shipments, but only to the extent an identifiable person can be linked to such content; information that enables us to verify an individual's identity. If you do not provide relevant information, we may not be able to provide you with shipment related services.

Payment. In order to process and collect payments, we may collect your payment information, including payment card details, online payment services numbers, invoicing addresses, and financial information, such as bank account numbers. If you do not provide such information, you will not be able to make the payment through this method, but you can still pay through other methods, such as WeChat Pay.

Customer support and communication. In order to provide customer support and respond to and communicate with you about your requests, questions, and comments, we may collect individual and business contact information, the names, email addresses and telephone numbers of others to whom we are asked to send information and etc. If you do not provide relevant information, we may not be able to provide you with the specific customer support you need and communicate with you.

Improve and personalize services. In order to improve website functionality, design better experiences for you, offer you products and services that we believe may interest you, and perform data analyses, we may collect your personal information by automated means, such as cookies and web beacons; we may receive personal information from third parties, including public databases, social media platforms or third party partners such as analytics or marketing providers; and we and our third-party service providers may collect session analytics information, including browsing behaviour, when you visit our websites and applications as detailed in the main body of the UPS Privacy Notice. If you do not provide relevant information, it does not affect your enjoyment of other services such as the shipment services, but you may not be able to enjoy certain personalized services or certain digital services. Your choices regarding the information collection and process may depend on the specific information collection circumstances. For example, your browser may tell you how to be notified when you receive certain types of cookies or how to restrict or disable certain types of cookies. Please note, however, that without cookies you may not be able to use all the features of our websites or applications; if you do not want to receive interest-based advertising on our websites and applications, you may refer to the “Interest-Based Advertising” section of the main body of the UPS Privacy Notice for the opt-out method. Please contact us according to the “Contact Us” section if you need more information.

According to the requirements of applicable laws, regulations, and standards, we may process your personal information without seeking your consent if:

• The information is required to fulfill our obligations imposed by laws, regulations, and standards;
• The information is required to enter into and/or fulfill a contract to which you are a party;
• The information is required to deal with public health emergencies, or to protect your or other individuals’ life, health, and property safety in emergency situations;
• The information is required for news reporting, public opinion supervision, and other actions for the public interest, provided the processing of the personal information is within a reasonable scope;
• The information was made public by yourself, or made public in legitimate news coverage, governmental announcements, or other legitimate public channels, provided the processing of the personal information is within a reasonable scope;
• Other circumstances as prescribed by laws or administrative regulations arise.

If we do not inform you of the type, scope and purpose of the information that we will process during an emergency, we will promptly notify you through feature/service pages, interactions with you, website notices, or other channels once the emergency has been resolved.

2. Information We Share

We will not provide your personal information to third parties in violation of law (such as without your consent, where consent is required). For the purposes stated in the UPS Privacy Notice and this Addendum, we may share your personal information with the following third parties or affiliate companies as separate responsible parties:

Affiliates of UPS. For the purpose of providing you with products and services, only to the extent necessary and lawful, we may share your personal information with UPS Affiliates located in or outside China mainland.

Payment institutions. When you make payments online, payment institutions may collect your Personal Information to confirm your payment order and complete the payment. These include WeChat Pay (Tencent Binhai Building, No. 33, Haitian Second Road, Nanshan District, Shenzhen, 518054), AliPay (Ant Z Space, No.556 Xixi Road, Xihu District, Hangzhou, China), and UnionPay (China UnionPay (Headquarters) 998 Jinxiu Road, Pudong New Area, Shanghai, China; UnionPay Building, 36 Hanxiao Road, Shanghai, China).

With authorities or other third parties for compliance purposes. UPS may share personal information with governmental authorities, regulatory authorities, and law enforcement authorities for purpose of complying with our statutory obligations. UPS may also disclose your personal information to third parties if this is required by law, a statutory provision or legal decision or if such communication is required in order to protect and defend rights of UPS.

Parties involved in corporate events. In the event of corporate events such as mergers, division, acquisitions, bankruptcy, or transfers of UPS assets, we may share or transfer personal information as part of the foregoing. We will provide notice and continue to provide or require new information controllers to provide at least the same level of protection as is provided herein for your personal information in accordance with applicable laws and regulations.

In the event of corporate events such as mergers, division, acquisitions, bankruptcy, or other circumstances that prevent us from continuing to fulfill our data security protection obligations and if there is no data recipient, we will delete the data without a recipient.

3. Sensitive Information

For the purposes stated in the Privacy Notice, the types of sensitive personal information we may collect and use include:

When you place an order for shipment through our WeChat official account, WeChat may ask for your authorization to access your precise location information, in order to assist you to fill in the mailing address automatically. You may fill your mailing address manually if you do not wish to provide precise information on your location to us.

When you make payment using payment cards (including your debit cards and credit cards), our payment processing partners will obtain your payment card information and/or financial information (including payment card types, bank account numbers, expiration date, CVV number and invoicing address). If you do not provide such information, you will not be able to make the payment through this method, but you can still pay through other methods, such as WeChat Pay.

We will process your sensitive personal information in accordance with PRC laws and regulations, only when necessary to provide you with UPS products and services and obtain your separate consent before our collection. Sensitive personal information refers to the personal information that is likely to result in damage to the personal dignity of any natural person or damage to his or her personal or property safety once disclosed or illegally used, including such information as biometric identification, religious belief, specific identity, medical health, financial account and whereabouts and tracks, as well as the personal information of minors under the age of 14. The types of sensitive personal information that we may process are underlined in this Addendum.

4. Minors

We generally do not process personal information from a child under 14 years of age. However, if such processing is necessary for providing relevant services, we will obtain consent from his or her parent or legal guardian, and will request that the child furnish the minimum information necessary for us to obtain consent from the parent or legal guardian. The parent or legal guardian may exercise the minor’s rights under the UPS Privacy Notice. We will only process the child’s information for purposes that are necessary. UPS will treat minors’ personal information as sensitive personal information and comply with relevant rules on sensitive personal information.

5. Personal Information Security Protection

The security, integrity, and confidentiality of your information are extremely important to us. We maintain administrative, technical, and physical safeguards designed to protect the personal information you provide against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use. For example, we will encrypt personal information in transit and at rest using industry-standard encryption algorithms. We will employ various desensitization techniques to protect the data when handling personal information. Although we take steps to limit access to our facilities and vehicles to authorised individuals, information that is located on the outside of a parcel or letter may be visible to others.

We have implemented emergency response plan against cybersecurity incidents to promptly deal with system bugs, computer viruses, network attacks, network invasions and other security risks. In case of an event with damage to the network security, we will immediately initiate the emergency plan, take relevant remedial measures and report to competent authorities as required by applicable laws and regulations. We will notify you in a timely manner of such event as required by laws and regulations. If it is difficult for us to notify the users one by one, we will make a public announcement through reasonable and effective means.

6. Cross-border Data Transfers

We may transfer your personal information outside of mainland China as is necessary for UPS to provide its international express shipping and related services to you, including for the purposes set out in the UPS Privacy Notice (where applicable). Our data transfers to overseas recipients will be in accordance with PRC laws and regulations, including those on cross-border data transfer. The overseas recipients of cross-border data transfers are our UPS Affiliates located outside China mainland.

7. Data Retention

UPS will only retain your information (i) for as long as we require to fulfil the necessary purposes of processing your information as stated in the UPS Privacy Notice and this Addendum, and (ii) for as long as we are required to retain such information under applicable laws or administrative regulations. For example, according to the Post Industry Standards – Express Service YZ/T—2023, the physical storage period of express waybill and electronic express waybill should be at least one year after completion of delivery and the relevant electronic data should be stored for at least three years; according to the Civil Code, the limitation of civil action is three years. Your personal information will be securely deleted or disposed of thereafter. If we have to retain certain data due to legal reasons, we will process such data to the extent required by laws and regulations and have processes to not use it in our daily business activities.

8. Exercising Your Rights and Contacting Us

You may exercise any of your rights under the Personal Information Protection Law of China in relation to your personal information that UPS holds, including to:

• Modify your personal information if it is inaccurate;
• Access and/or obtain a copy of your personal information;
• Transfer the personal information to the data recipient designated by you in accordance with the conditions stipulated by the cyberspace administration authority;
• Withdraw your consent to, or object to or restrict UPS’s processing of your personal information, though you may not then be able to use our products or services; and
• Delete your personal information if UPS has (a) violated applicable law, (b) no legal basis for processing your personal information, or (c) processed your personal information in violation of our contract with you.

When a user (limited to natural persons) passes away, the user’s close relatives, for their own legitimate and proper interests, may exercise the rights to access, copy, correct, or delete the deceased user's personal information through the contact methods described below, except where the deceased user had other arrangements.

You understand and acknowledge that, in order to fully protect the personal information rights and interests of the deceased user, the close relatives requesting to exercise the rights under this section need to submit documents such as the deceased user's identity proof and death certificate, the requestor’s identity proof, and proof of the requestor’s kinship with the deceased user, according to the designated process of UPS or instructions from customer service. Additionally, the close relatives need to provide the types and purposes of the rights they are requesting to exercise.

You may make your request or complaint to UPS in the following ways:

• Address: UPS Parcel Delivery (Guangdong) Co., Ltd. (广州市海珠区新港东路620号1401房自编1410、1412-1417号, Room 1401, No. 620 Xingang East Road, Haizhu District, Guangzhou);
• Contact phone: 800-820-8388; 400-820-8388;
• Hyperlink: Contact Us.

Your request or complaint will be processed and we will respond to you as required by law, usually within 30 calendar days. We may need to verify your identity if you are requesting information about yourself or a close relative.

9. Cancelling your UPS User ID

You may follow below steps after logging into your account to cancel your account: My Profile -> Other Settings (Manage Other Information)-> Delete My User ID and My Profile.

10. Dispute Resolution

If any dispute or controversy arises between you and UPS, both parties should try to resolve it through friendly negotiation. If the negotiation fails, you can file the dispute or controversy to the competent authority for cyberspace administration, public security, or market regulation. You may also seek a resolution by filing the dispute or controversy to the jurisdiction of the people's court at our company’s domicile (Haizhu District, Guangzhou).