Logismith Privacy Notice

At Logismith, we prioritize trust and privacy, ensuring responsible data handling and safeguarding your personal data. This Notice explains how we collect, use, and protect personal data, as defined by applicable laws, including information that directly or indirectly identifies an individual. In addition, we explain how to:

• Access or change the personal information we maintain about you
• Withdraw consent you previously provided to us
• Refrain from sending you certain communications, and
• Answer questions you may have about our privacy practices

When this Privacy Notice mentions “Logismith”, “we”, “us”, or “our”, Logismith is referring to Logismith and its subsidiaries, which are deciding on the purposes and means of the processing of your Personal Data under this Privacy Notice.

Applicability

This Notice applies to Logismith and its controlled affiliates. However, it does not apply to subsidiaries or affiliates that maintain their own separate privacy notices.

In the course of its business activities and providing the services, Logismith will need to process Personal Data. Without your Personal Data, we will not be able to provide you with the requested services. As a rule, the Personal Data that you provide directly or indirectly to Logismith when using our services and visiting our Websites are:

Personal Identifiers

We collect contact and identification information, including:

• Name
• Address
• Email Address
• Phone Number
• Fax Number
• Information that allows us to identify a person
• Information regarding specific needs for Logismith Services
• Signature for proof of delivery

Financial Information

We collect payment and financial information, including:

• Bank account number
• Credit or debit card number
• Payment status
• Invoices

Account and Preference Information

We collect:

• Log-in details (email address)
• Other information provided through your account
• Shipping amounts
• Complaints
• History of purchases and related commercial activities
• Communications
• Survey information

Automatically Generated Information

Through our website, via our chatbot, web-based chats, or interactions with Logismith-related web tools we may collect certain information by automated means such as cookies. This data may include:

• IP address
• Unique device or user ID
• System and browser type
• Date and time stamps
• Language preferences
• Referring website address
• Content and pages accessed on our Websites or mobile apps
• Device location (if enabled)

Demographic and Behavioral Data

We may combine data from third-party sources or other affiliates to provide better services. This data may include:

• Gender
• Age
• Income
• Behaviors/hobbies
• Retail interests
• Consumer spending

Supply Chain Management

Many of our clients outsource all or a part of their supply chains to us. Through our logistics business units, we manage these supply chains, focusing on supply chain optimization for our clients nationwide. We also provide information technology systems adapted to the unique supply chains of specific industries such as health care, technology and consumer/retail businesses. In the course of providing logistics services, we may obtain, use and disclose personal information about our clients’ clients. In these circumstances, we process the information based on the agreement with our customer.

Information Related to Shipments and Services

We collect:

• Shipment tracking number
• Shipment routing information
• Location data
• Status of a shipment
• Delivery location
• Packaging type
• Number of pieces
• Weight
• Picture of the parcel
• Signature for proof of delivery
• Information given that helps us to access locations where we provide services including data that identifies an actual location of a physical address using information such as GPS Data, geocodes, latitude and longitude information, and images of various locations.

Logismith collects Personal Data to provide and enhance the services we offer our clients and the customers of our clients.

Direct Collection

We collect Personal Data directly from you when:

• You sign up for Logismith services (name, address, email)
• You open a Logismith account (name, address, payment card information, account number)
• You sign up for Mobile (text messaging) communications (name, address, email address, phone number, account number)
• You provide recipient information for shipments (name, address, phone number)
• You receive tracking notifications (email address)

Indirect Collection

If a Logismith client provides Personal Data of others, then we receive that Personal Data indirectly. Examples of situations where Logismith collects Personal Data indirectly are:

• Clients holders providing information about others
• Supply chain management services, where we process personal information about our clients’ customers
• Logistics business units managing supply chains nationwide

Data Protection Measures

When collecting Personal Data indirectly, we rely on the provider for accuracy and authority to share the information. We implement appropriate technical and organizational measures to ensure the confidentiality, integrity, and security of such data.

Cookie Usage

Logismith uses cookies and similar technologies on its Websites. Through these cookies, Logismith automatically obtains Personal Data when you visit our Websites.

Logismith handles laboratory specimens and recognizes the sensitivity of protected health information (PHI). We comply with HIPAA regulations and take necessary precautions to safeguard PHI.

Types of PHI We May Handle

We may collect, store, and transmit the following PHI:

• Laboratory tests requested
• Medical devices
• Medical imaging
• Medical records
• Personal health information
• Prescription medications
• Research data
• Specimen information (e.g., type, handling, storage)

Note: Logismith does not have access to laboratory test results.

Confidentiality and Electronic Communication

Please refrain from sharing confidential medical or health information via electronic communication (email, web forms, etc.). We cannot guarantee confidentiality, and electronic communications may be vulnerable to interception or unauthorized access.

Response to Medical/Health Information Inquiries

Note: Logismith does not have access to laboratory test results. If you submit a request related to specific medical or health information, you will receive a standard response directing you to consult with our life science clients who provide those services.

Security and Risk Disclaimer

While we take reasonable measures to protect electronic communications, we cannot guarantee confidentiality.

Warning: Submitting Confidential Information at Your Own Risk

If you choose to share confidential information about yourself or your health via electronic communication, you do so at your own risk. We urge you to use secure and authorized channels for sharing sensitive information.

HIPAA Compliance

Logismith adheres to HIPAA regulations regarding the handling, storage, and transmission of PHI. Our policies and procedures ensure compliance with applicable laws and regulations.

In addition to the above categories of Personal Data, we may collect other types of information which may or may not contain Personal Data. Information related to shipments and services may include shipment tracking number, shipment routing information, location data, status of a shipment, delivery location, packaging type, number of pieces, weight, picture of the parcel, and customs information. Depending on your interaction with Logismith, we may also get information about you from third parties and service providers that we engage to send promotional communications for us or provide marketing and advertising services.

Logismith prioritizes responsible and transparent data processing and handling. We collect, use, store, or otherwise process Personal Data to manage our business efficiently and effectively. Logismith processes Personal Data based on applicable legal ground(s). The legal ground is often intrinsically linked to the business purpose. This means, for example, that the performance of an agreement can be both a legal ground and a business purpose for Logismith. Therefore, we will first clarify the legal ground(s) on which Logismith processes your Personal Data and, subsequently, the business purpose(s) that we use your Personal Data for:

Legal Grounds

In general, Logismith processes your Personal Data based on one of the following legal grounds:

• Contractual Necessity: To fulfill agreements between you and Logismith.
• Legal Obligations: To comply with relevant laws and regulations.
• Vital Interests: To protect your or others’ vital interests.
• Legitimate Interests: To pursue Logismith’s legitimate interests, unless overridden by your rights.
• Consent: When required and appropriate, we will obtain your consent.

Business Purposes

Logismith shall only collect, use or otherwise process Personal Data if the processing falls within the scope of one (or more) of the legitimate business purposes listed below:

1. Product development, research and improvement of Logismith products and/or services. Logismith processes Personal Data as necessary for the development and improvement of Logismith products and/or services, research and development (e.g., analyze information related to the shipment and services to improve our services).
2. Performing agreements. This includes shipping, tracking, communication with individuals and other parties regarding services, responding to requests for (further) information, dispute resolution and preparing agreements.
3. Relationship management and marketing for commercial activities. In general, Logismith processes Personal Data as necessary for the development and improvement of Logismith products and/or services, account management, client services and the performance of (targeted) marketing activities in order to establish a relationship with a client and/or maintaining as well as extending a relationship with a client, business partner or supplier and for performing analyses with respect to Personal Data for statistical and scientific purposes (e.g., deliver advertising, communications and content from us on our sites and those of third parties more specific to your interests). With respect to Personal Data, we may append data with activities.
4. Business process execution, internal management and management reporting. This includes addressing activities such as managing company assets, debt collection, conducting internal audits and investigations, finance and accounting, implementing business controls, provision of central processing facilities for efficiency purposes, managing mergers, acquisitions and divestitures and Processing Personal Data for management reporting and analysis (e.g., conduct investigations into shipping accounts to detect fraud).
5. Safety and security. Personal Data shall be included in the processing for activities such as those involving safety and health, the protection of Logismith and customer, supplier or business partner assets and the authentication of customer, supplier or business partner status and access rights (e.g., provide a safe and secure services for online and offline transactions).
6. Protecting the vital interests of individuals. This includes processing data when necessary to protect your vital interests or those of other individuals (e.g., for urgent medical reasons).

• Compliance with Legal Obligations. Logismith processes Personal Data to comply with applicable laws, regulations, and industry-specific guidelines, including:
• Anti-money laundering and anti-terrorism financing laws
• Data protection and privacy regulations (e.g., GDPR, CCPA)
• Sanctions and export control laws
• Financial reporting and tax compliance requirements
• Sector-specific regulations (e.g., transportation, logistics)
• Human trafficking prevention laws (e.g., Trafficking Victims Protection Act, Modern Slavery Act)

Logismith is committed to protecting your Personal Information. We do not sell it. We share your Personal Data with third parties only as necessary to provide our services efficiently.

Third-Party Service Providers

We partner with:

• Third-party Software solutions (including data processing, data storage, GIS, GPS and tracking information)
• Payment Processors
• Communications Platforms
• Shipping and logistics providers
• Data processors (vendors or service providers processing Personal Data on our behalf), who:
  • Must provide sufficient guarantees to implement appropriate technical and organizational measures to protect Personal Data.
  • Must protect the rights of data subjects.
  • May only use Personal Data for the purposes described above and in accordance with our instructions.

Access and Confidentiality

These service providers:

• Comply with applicable data protection standards
• Use Personal Information solely for providing services to Logismith

Employee and Service Partner Access

Our employees and Service Partners may access Personal Information:

• Only to the extent necessary for task performance
• With confidentiality obligations, ensuring the protection of Personal Information
• Under non-disclosure agreements or similar confidentiality arrangements

Legal Requirements and Corporate Transactions

We may share Personal Information

• As required by law, court order, or other legal process
• With law enforcement agencies or governmental agencies
• In connection with corporate transactions (e.g., merger, asset sale)
• To establish or exercise our legal rights

Exceptional Disclosure Circumstances

Notwithstanding the above, Logismith may disclose Personal Information without consent if Logismith discovers or become aware of:

• Suspected human trafficking, child exploitation, or other serious crimes.
• National security threats or serious crimes

Logismith will report such incidents to the appropriate authorities, as required by law.

Important clarifications:

1. Logismith does not actively monitor or search for such information.
2. Reporting is done in accordance with applicable laws and regulations.

Your Consent

By using our services, you consent to this information sharing, as outlined in our Privacy Policy.

Your personal information will not be stored for longer than necessary for the purposes for which they were collected or as required under applicable retention policies and/or in accordance with applicable law. Our retention policies reflect local statute of limitation periods and national statutory obligations of Logismith. For example:

• Laboratory Medical Specimen Records: 2-7 years (depending on applicable laws, regulations, and industry standards, e.g., CLIA, HIPAA, CAP)

Contact Us: If you have questions about specific retention periods, please contact us at privacy@logismith.com or by using the Logismith Privacy Webform.

Logismith maintains appropriate technical and organizational measures to protect your Personal Data against accidental or unlawful processing, including protecting your Personal Data against unauthorized access, maintaining the confidentiality, integrity and availability of your Personal data, and training personnel on information security requirements.

However, no security measure can guarantee against compromise. You also have an important role in protecting your Personal Data. You should not share your username and password with anyone, and you should not reuse passwords across more than one website. If you have a reason to believe that your Personal Data has been compromised, please contact us as detailed above.

Due to the nature of our business and the services we provide to our clients, Logismith may need to transfer your Personal Data to locations outside the country where you reside. In any case where we transfer Personal Data, Logismith shall ensure that such a transfer is subject to appropriate safeguards.

Based on the law applicable to the use of your Personal Data, you may have rights that you can exercise in relation to your Personal Data. Note that in some cases we are not required to completely comply with your request, as such rights may be conditional or because we have to balance your rights against our rights and obligations to process your Personal Data and to protect the rights and freedoms of others. A number of the rights you have in relation to your Personal Data, as applicable in the State of California, or other US or international geographic jurisdictions, are explained below:

Right to Opt Out

You may have the right to ask that we transfer Personal Data that you have provided to us to a third party of your choice. This right can only be exercised when you have provided the Personal Data to us, and when we are processing that data by automated means on the basis of your consent or in order to perform our obligations under a contract with you. You can opt-out via email at privacy@logismith.com or via our Logismith Privacy Webform.

Right of access

You may be entitled to a copy of the Personal Data we hold about you and to learn details about how we use it. Your Personal Data will usually be provided to you digitally. We may require you to prove your identity before providing the requested information.

Right to correct

We take reasonable steps to ensure that the information we hold about you is accurate and complete. However, if you believe this is not the case, you may have the right to request that any incomplete or inaccurate Personal Data that we process about you is amended.

Right to delete

You may have the right to ask us to erase your Personal Data, for example where the Personal Data we collected is no longer necessary for the original purpose, where Personal Data has become obsolete or where you withdraw your consent (if we are processing your Personal Data based on consent). However, this will need to be balanced against other factors. For example, we may not be able comply with your request due to certain legal or regulatory obligations.

Right to restriction of processing

You may be entitled to ask us to (temporarily) stop using your Personal Data, for example where you think that the Personal Data we hold about you may be inaccurate or where you think that we no longer need to use your Personal Data.

Right to object

You may have the right to object to processing which is based on our legitimate interests. In case of the processing of Personal Data for marketing purposes, you have the right to object at any time. When you ask us to stop using your Personal Data for marketing purposes, Logismith will immediately cease to use your Personal Data.

For other purposes based on our legitimate interests, we will no longer process the Personal Data on that basis when you file an objection based on your grounds relating to your particular situation, unless we have a compelling legitimate ground for the processing. Note, however, that we may not be able to provide certain services or benefits if we are unable to process the necessary Personal Data for that purpose.

Rights relating to automated decision-making

You may have the right not to be subjected to automated decision-making, including profiling, which produces legal effect for you or has a similar significant effect. If you believe you have been subject to an automated decision and do not agree with the outcome, you can contact us using the details below and ask us to review the decision.

Right to appeal

Virginia Residents: If we deny your request, you are entitled to submit an appeal. Instructions on how to submit an appeal will be included in our response to you explaining why we denied your request.

Right to withdraw consent

We may ask for your consent to process your Personal Data in specific cases. When we do this, you have the right to withdraw your consent at any time. Logismith will stop the further processing as soon as possible after the withdrawal of your consent. However, this does not affect the lawfulness of the processing before consent was withdrawn.

Email privacy@logismith.com or use the following link for your requests about these rights:  Logismith Privacy Webform

If you do not have access to a computer, you may call 1.504.324.2128, or contact us using the contact details above.

You can manage your accounts with Logismith through the following.

• Emails: For your email preferences, you can opt out via email at privacy@logismith.com or via our Logismith Privacy Webform.
• Mobile: To opt out for mobile, text STOP to 504.324.2128. You can always opt back in by texting YES to the same number.
• Cookies and other technologies: To exercise choices you have for certain cookies, you can generally review your Internet browser settings, typically under the sections “Help” or “Internet Options”.

If you reside in California, we are required to provide additional information to you about how we use and disclose your information, and you may have additional rights with regard to how we use your information. We have included this California-specific information below.

Consistent with the “What Personal Data does Logismith collect?” section above, we collect certain categories and specific pieces of information about individuals that are considered “Personal Information” in California. As detailed above in the “How does Logismith collect Personal Data” section, we may collect this Personal Information from you and other third parties. We collect and disclose Personal Information for the business and commercial purposes described in the “Why does Logismith process Personal Data?” and “Who has access to your Personal Data?” sections above.

We do not “sell” or “share” your Personal Information, as those terms are defined under California law and have not done so in the previous twelve months. Given the divergent practices of organizations that offer browsers and the lack of a standard in the marketplace, we do not respond to Do Not Track signals at this time.

Subject to certain exceptions, as a California consumer, you have the right to: (i) access your Personal Information and (ii) obtain deletion of your Personal Information. To the extent permitted by applicable law, we may be required to retain some of your Personal Information, and certain Personal Information is strictly necessary in order for us to fulfill the purposes described in this Privacy Policy.

Should you wish to request the exercise of your other rights as detailed above with regard to your Personal Information, we will not discriminate against you by offering you different pricing, products or services, or by providing you with a different level or quality of products or services, based solely upon this request. Please contact us as described above to exercise such rights.

If you are a California consumer and you wish to exercise your rights as outlined in this section, you may need to provide information such as name and e-mail so that we can verify your identity. We will use the information you provide when exercising your rights for no other purpose other than to verify your identity.

You also have the option of designating an authorized agent to exercise your rights on your behalf. For authorized agents submitting requests on behalf of California residents, please contact us as described above, with any evidence you have that you have been authorized by a California consumer to submit a request on their behalf.

Questions or complaints regarding the processing of your Personal Data can be directed to Logismith by using the contact information as provided at the top of this Privacy Notice.

You also have the right to lodge a complaint with the competent (local) data protection or government authority in the jurisdiction where you work, where you live or where an alleged infringement takes place.