Privacy policy

Effective date: 15.12.2023

Coyote Logistics Nederland B.V. and its affiliated companies and properties, Coyote Logistics UK Ltd and Coyote Logistics UK Limited (Sp. z o.o.) Oddzial W Polsce, are the controllers of your Personal Data (“Coyote”, “we”, “us”, “our”):

• Coyote Logistics Nederland B.V. Nieuwezijds Voorburgwal 162, 1012SJ Amsterdam, the Netherlands
• Coyote Logistics UK Ltd, Maybrook House,Queens Gardens,Dover,Kent CT17 9AH United Kingdom
• Coyote Logistics UK Limited (Sp. z o.o.) Oddzial W Polsce, ul. Wagonowa 2A, 53-609 Wrocław, Poland

Email: [email protected]

In most cases Coyote Logistics Nederland B.V. is the data controller in its capacity as contracting party and for conducting general management and internal analytic activities.
In addition, Coyote Logistics UK Ltd and Coyote Logistics UK Limited (Sp. z o.o.) Oddzial W Polsce may also qualify as data controllers, as they provide some functionalities and services:

• In some cases Coyote Logistics UK Ltd is responsible for receiving and processing customer orders, booking transport suppliers on orders, customer and carrier sales acquisition, claims handling and customers / vendor vetting operations. Also, Coyote Logistics UK Ltd is responsible for all finance and accounting activities.
• In some cases Coyote Logistics UK Limited (Sp. z o.o.) Oddzial W Polsce is responsible for receiving and processing customer orders, booking transport suppliers on orders and customer and carrier sales acquisition. In addition, Coyote Logistics UK Limited (Sp. z o.o.) Oddzial W Polsce is responsible for financial planning and analysis and marketing activities.

We respect your concerns about privacy and provide this notice explaining how we collect, use and disclose information when customers inquire about, use or purchase our products and services, and when carriers, drivers, warehouse personnel and distributors inquire about or move loads for or do business with Coyote.

This Privacy Policy is not a contract and does not create any contractual rights or obligations.

This Privacy Policy applies to personal data (“Personal Data”) collected from customers, carriers and drivers, including, without limitation, information collected through the Services. “Personal Data” is information relating to an identified or identifiable individual. As used hereinafter, the term “Services” includes those websites, platforms, and mobile applications from which you are accessing this Privacy Policy which are owned and/or operated on behalf of Coyote, including but not limited to the web pages associated with www.coyotelogistics.com, de.coyotelogistics.com, pl.coyotelogistics.com, nl.coyotelogistics.com, and the web pages associated with the Coyote web portal. For more information on the CoyoteGO mobile app operated by our affiliate, Coyote Logistics, LLC, please refer to the privacy statement available via: https://coyote.com/privacy-policy/.

The terms “you” and “your” shall include and/or reference the individual user of the Services and, when applicable, the business entity for which the individual user of the Services serves as an agent, independent contractor or employee thereof.

The Policy does not apply to Coyote employees or job applicants. This Privacy Policy does not address, and we are not responsible for, the privacy, Personal Data or other practices of any third parties, including any third party operating any website or service to which the Services link. The inclusion of a link on the Services does not imply endorsement of the linked site or service by us or by our affiliates.

By accessing or otherwise using the Services, you acknowledge that you have read and understand this Privacy Policy and that Personal Data you provide may be processed and used in accordance with the terms of this Privacy Policy.

The information Coyote collects

Personal data about customers

In the course of inquiring about or using Coyote’s Services, including registering on or using our websites, you may be asked for, among other things, the following Personal Data: your name, e-mail address, postal address, telephone number, fax number, business contact information, communication preferences and other registration information.

Coyote may also request payment information that, in some cases, may constitute Personal Data.
In addition, Coyote may obtain market data on customers and potential customers from third-party sources;this information may include limited Personal Data, such as contact details of company representatives.

A more detailed overview of the categories of Personal Data processed is included in the section ‘How and why Coyote uses the information’ below.

Personal data about carriers/drivers

In the course of inquiring about or moving loads, or registering on or using our Services, you may be asked for, among other things, the following Personal Data: your name, e-mail address, postal address, telephone number, business contact information, docket information, carrier number, truck/equipment type, other registration information, driver’s license information, social security number, driver history, passport information, insurance information, and service profile information. Drivers may use mobile apps to submit images of paperwork such as invoices and bills of lading and to search for available load requests based on the driver’s location and to confirm load acceptance;this information may, in some cases, constitute Personal Data. Coyote also obtains basic carrier information from public or other third-party sources;this information may include Personal Data, such as contact details of carrier representatives, as well as carrier insurance information.

In addition, drivers provide status updates (including location) about Coyote loads they are moving. Such status updates may be provided to Coyote (in various ways as further described under “Collection and Use of Location Data,” below).

A more detailed overview of the categories of Personal Data processed is included in the section ‘How and why Coyote uses the information’ below.

Personal data about personnel of warehouses/distributors

Personnel of warehouse facilities used in connection with Coyote loads and of distributors of Coyote’s customers may be asked for the following Personal Data when they register on our Services: name, e-mail address, postal address, telephone number, business contact information, and other registration information.

We need to collect Personal Data in order to provide the requested Services to you. If you do not provide the information requested, we may not be able to provide the Services. If you disclose any Personal Data relating to other people to us or to our service providers in connection with the Services, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy.

A more detailed overview of the categories of Personal Data processed is included in the section ‘How and why Coyote uses the information’ below.

Technical information

Coyote may also collect certain technical information when you visit or use our Services, including device information (such as the type of browser you are using, the type of operating system you are using, and regional and language settings), your Internet Protocol (IP) address and the domain name of your Internet service provider, aggregate data about the number of visits to a site or service, and/ or aggregate data about the pages visited. Where IP addresses or other technical information are deemed Personal Data under local law, Coyote will treat this information as Personal Data. We may combine information we receive online with other information you have provided to us and with information from other sources to improve our knowledge of you, to help us provide quality service and to provide and customize our products and services. Where we combine non-personally identifiable online information with Personal Data, we will treat the combined information as Personal Data. For more information on the cookies and similar technologies we use in this context, please refer to our Cookie Notice.

A more detailed overview of the categories of Personal Data processed is included in the section ‘How and why Coyote uses the information’ below.

Legal grounds for processing

When we use your Personal Data, we require a legal justification, also known as a “legal ground”. Normally, we will rely on one or more of the following legal grounds:

• Performance of a contract: This is relevant where we collect and use your Personal Data where necessary to enter into a contract with you or to perform our obligations under a contract with you.
• Legitimate interest: This is relevant where we use your Personal Data where it is necessary for our legitimate interests and does not override your rights.
• Compliance with law or regulation: This is relevant where we use your Personal Data where necessary to comply with applicable laws.
• Consent: This is relevant where we need your consent to use your Personal Data. However, we do not usually need your consent if there is another legal ground as above. You can withdraw your consent by contacting us (see the section ‘Contact Us’ below).

For an overview of the relevant legal bases per processing purpose please see the section ‘How and why Coyote usus the information´ below.

How and why Coyote uses the information

We and our service providers use Personal Data for certain legitimate business purposes, thereby relying on the following legal bases:

We obtain Personal Data from a variety of sources. These sources include: individuals with whom we or our service providers interact, with respect to both online and offline interactions such individuals may have with us or our service providers;other entities who transact with or act as representatives or agents for such individuals;the devices used to access our websites, mobile applications, and online services;third party partners such as marketing and analytics providers;carriers;drivers;shippers;consignees and other customers, including customers of our broker and logistics services;the personnel of warehouses and distributors;and others consistent with this Privacy Notice.

We may aggregate and/or anonymize Personal Data so that it will no longer be considered Personal Data. We do so to generate other data for our use, which we may use and disclose for any purpose, including, without limitation, to generate reporting and to improve the design and content of our products, services, websites and apps, and Coyote may share this data with third-parties.

Collection and use of location data

Coyote tracks the location of its shipper customers’ loads to help ensure a smooth delivery. Coyote makes available different ways for carriers and drivers to choose to provide location updates on the Coyote loads they are moving.

• By telephone calls or website entries.
• Through electronic logging devices.
• Through connection to the carrier’s transportation management-system or otherwise by the carrier, to provide location data of their drivers when they are moving loads for Coyote.
• Through the use of the CoyoteGO app, which is operated by our affiliate Coyote Logistics, LLC. Please refer to the privacy statement available via: https://coyote.com/privacy-policy/
• Through the use of a third-party app – Drivers who download a third-party app may agree to allow Coyote to track loads they are carrying. To agree, the driver must enable location services for the app in their phone’s system preferences. If a driver opts into the collection of location data, the app will provide Coyote regular updates on the driver’s location, from a three-hour period leading up to the scheduled pick-up time, for the duration of the shipment, and, if the load has not been marked as delivered in Coyote’s systems, for up to 48 hours after the scheduled drop-off time. Coyote stops collecting location information from the app once the load is marked as delivered in Coyote’s systems. The driver may call their carrier representative or the toll-free number 1- 877-6-COYOTE to tell Coyote that the load has been delivered. The driver may opt out of the collection of location data at any time through their phone’s systems preferences, by disabling the app from accessing their phone’s location data.
• Through load photos, provided by a driver through apps. Once downloaded by a driver, the app prompts the driver to take a photo of the trailer at load pick-up and then again at delivery. The photo’s metadata provides the load’s locations at those two points in time.

Disclosure of personal data

Coyote may disclose Personal Data of customers to supply-chain participants such as drivers and carriers, warehouses, and distributors to the extent necessary to coordinate, execute and monitor shipments, to provide services you have requested or authorized, and for other legitimate business purposes consistent with this Privacy Policy. These legitimate business purposes include (i) to comply with legal obligations, such as customs regulations and sanctions laws, and (ii) to address security concerns. In these scenarios we may process your contact details, locations data and copies of ID documents. Please note that we will only process copies of ID documents if legally required. Coyote may also disclose Personal Data of carriers and drivers to customers and supply-chain participants for such purposes.

Coyote may disclose Personal Data to its affiliates in the RXO group of companies for the purposes described in this Privacy Policy. We may also disclose Personal Data to our service providers to perform tasks on our behalf for business purposes consistent with this Privacy Policy. These can include providers of services such as website hosting, data analysis, payment processing, order fulfilment, information technology and related infrastructure provision, customer service, email delivery, auditing, and other services. For example, we may disclose Personal Data to third-party service providers that operate our websites on our behalf. Note that if a carrier updates his or her contact or other information (including his or her insurance certificate) on our websites the service provider may share, in accordance with its privacy policy, the updated information with its other customers that already have a relationship with that carrier. Coyote is not responsible for the actions or inactions of service providers where they are considered the “owner” or “data controller” under applicable law. In addition, we disclose Personal Data to third-party service providers that receive information submitted through contact forms available on our websites, as well as facilitate further email communications, on our behalf.

By using the Services, you may also elect to disclose Personal Data.

In addition, when push notifications are sent to your mobile device, your Personal Data is disclosed to the provider of the push notification service (Apple Push Notification for iOS devices and Google Cloud Messaging for Android devices). The privacy policy of the relevant service provider applies to the use and disclosure of your Personal Data by these services.
We may also disclose Personal Data, as necessary or appropriate, to comply with applicable law or regulations, including laws outside your country of residence;to cooperate with public and government authorities including law enforcement;to establish, exercise or defend a legal claim;or, as otherwise permitted or required by law. In addition, Coyote may disclose or transfer Personal Data to a third party in connection with any reorganization, joint venture, assignment or other disposition of all or any part of our business, assets, or stock, or if Coyote or a Coyote affiliate is acquired in whole or in part by or merged with another company. Such third parties may include, for example, an acquiring entity and its advisors.

Access and choices

You may review and edit online contact details and certain other Personal Data you have provided when using our Services. We encourage you to make sure your contact details and other Personal Data are up-to-date.

Please refer to the ‘Data Subject Rights’ section at the end of this Privacy Policy concerning rights you have under data protection law.

Communication Preferences

Coyote may send you communications by email, telephone calls, or push notification. You may opt out of such communications as described below. We will try to comply with your request(s) as soon as reasonably practicable. Please note that if you use certain Coyote services, you may not opt out of mandatory service or administrative communications that are part of certain Coyote services and are necessary for the performance of such services. For customer care assistance with communications preferences, e-mail us at [email protected].

Promotional emails

Coyote may send emails to customers (including their employees) that promote the same kinds of products and services Coyote is presently providing them, or similar kinds of Coyote products and services that may be of interest to them. You may opt out from receiving further promotional emails by following the instructions included in these emails.

Push notifications

Drivers and customers using an app provided by Coyote or its affiliates may receive messages from Coyote or its affiliates by push notifications delivered within the app. In order for app users to receive such notifications, push notification service must be enabled for the app concerned via the mobile phone’s system preferences. By enabling push notification service for the app, you consent to receive push notifications delivered within the app. App users may opt out at any time by disabling the app from sending such notifications via the mobile phone’s system preferences and/or by setting up and managing preferences within the app to receive push notifications.
You may incur data charges from your wireless carrier for push notifications, depending on your wireless data plan and rates.

Security

Coyote has implemented administrative, technical and organizational security measures designed to help protect your Personal Data within our organization. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the “Contact Us” section below.

Storage and retention

Your Personal Information will not be stored for longer than is necessary for the purposes described in this Privacy Policy, or to otherwise meet applicable legal requirements. Our retention policies reflect local statute of limitation periods and national statutory obligations of Coyote.

The criteria used to determine our retention periods include:

• The length of time we have an ongoing relationship with you and provide the Services to you (for example, for as long as you have an account with us or keep using the Services);
• Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them);or
• Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).

Data transfers

Your Personal Data may be stored and processed in any country where we have facilities or in which we engage service providers, and by using the Services you understand that your information will be transferred to countries outside of your country of residence, including the United States, which may have data protection rules that are different from those of your country. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in those other countries may be entitled to access your Personal Data.

When we transfer your personal data to other countries, we will protect that data as described in this Privacy Policy and in accordance with applicable law. For any such transfers, Coyote takes necessary (contractual) measures to ensure that your personal data receives an adequate level of protection.

Some of the non-EEA countries are recognized by the European Commission as providing an adequate level of data protection according to EEA standards (the full list of these countries is available here: https://commission.europa.eu/law/law-topic/data-protection/international- dimension-data-protection/adequacy-decisions_en#:~:text=The %20European%20Commission%20has%20so,Uruguay%20as %20providing%20adequate%20protection). For transfers from the EEA to countries not considered adequate by the European Commission, we have put in place adequate measures, such as the European Commission’s Standard Contractual Clauses to protect your Personal Information. The Standard Contractual Clauses are available here: (https://commission.europa.eu/publications/standard-contractual-clauses- controllers-and-processors-eueea_en).

For further information about Coyote’s international data transfer practices, and to consult said (contractual) measures, please contact us using the contact details in the “How to Contact Us” section below.

Sensitive information

Unless we request it, we ask that you not send us, and you not disclose, any sensitive Personal Data (e.g., social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, sex life of sexual orientation, criminal background or trade union membership) on or through the Services or otherwise to us.

Use of services by minors

The Services are not directed to individuals under the age of thirteen (13), and we do not knowingly collect Personal Data from individuals under 13. If you believe anyone under age 13 has provided Personal Data to us, please contact us as indicated in the “How to Contact Us” section of this Privacy Policy and we will work to delete it.

Profiling and automated decision making

We do not conduct any profiling or automated decision making.

Data Subject Rights

You have rights as a data subject under applicable data protection law. You may exercise these rights, in accordance with applicable law, free of charge unless the request is unfounded, excessive, or otherwise unreasonable, for instance because it is repetitive. In some situations, we may refuse to act or may impose limitations on your rights, as permitted by law.

Your Personal Data rights include:

• the right to request access to your Personal Data;
• the right to receive a copy of your Personal Data for purposes of transmitting it to another company;
• the right to have your Personal Data corrected or erased/deleted or restricted;
• the right to withdraw any consent you have provided to our processing of your Personal Data, which does not affect the lawfulness of the processing based on consent before the withdrawal;and
• the right to object to our processing of your Personal Data, including profiling.

You may request to exercise these rights by contacting us as specified in the “Contact Us” section of the Privacy Policy below. To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to information or acting on your request to exercise your rights.

Please note that you also have the right under applicable data protection law to lodge a complaint about our processing of your Personal Information with a data protection supervisory authority. For an overview of the data protection supervisory authorities, and their contact details, please visit: https://edpb.europa.eu/about-edpb/about-edpb/members_en.

Modification of Privacy Policy

Coyote may update or change this Privacy Policy at any time without prior notice to you to reflect changes in our Personal Data practices. We will notify you in an appropriate manner, including by posting the changed or amended Privacy Policy on our website(s) and we will indicate at the top of this Privacy Policy when it was most recently changed or amended.

Contact us

If you have questions about this Privacy Policy or about how we use and disclose Personal Information, please contact us.

Coyote Logistics Nederland B.V. Nieuwezijds Voorburgwal 162, 1012 SJ Amsterdam, Netherlands

Email: [email protected]

Additional notice for California and Virginia consumers

This part of our privacy notice applies to consumers who reside in the State of California or the State of Virginia. We provide our services and this website to other businesses. Thus, we rarely, if ever, directly collect, disclose, or sell the personal identifiable information (i.e. information that identifies you as an individual or relates to an identifiable individual) (“personal information”) of California or Virginia consumers under the California Consumer Privacy Act (CCPA) or the Virginia Consumer Data Protection Act (VCDPA), respectively. However, if you are a California or Virginia consumer who believes we may have collected personal information about you, please note the following, including information about your rights under California law or Virginia law.

Personal information we collect

We describe the personal information we have collected in the 12 months preceding the effective date above in “The Information Coyote Collects”. The information we have obtained includes the following categories of personal information:

(A) Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers (e.g., if you register an account with us).

(B) Personal information described in Cal. Civ. Code Section 1798.80(e) (California Customer Records statute). This means any information that identifies, relates to, describes, or is capable of being associated with a particular individual, including, the “identifiers” listed in the preceding bullet point A, and the following: physical characteristics or description in the form of photographs or images if you visit our premises or if needed to facilitate access to other facilities, state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information.

(C) Characteristics of protected classifications under California or federal law, such as race, color, religion, sex/gender, gender identity/expression, sexual orientation, marital status, medical conditions, military or veteran status, national original, and more.

(D) Commercial information, including (1) records of personal property, products or services purchased, obtained, or considered from Coyote, or other purchasing or consuming histories or tendencies, (2) information provided to us regarding the content of certain shipments, but only to the extent an identifiable person can be linked to such content, (3) information on actions taken on Coyote websites or mobile apps, which may include information about Coyote services considered, and (4) information about consumer preferences and behavior that we collect on our websites and mobile apps or purchase from third parties in order to target consumers for digital advertisements or to personalize content we deliver on our websites and mobile apps.

(E) Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with Coyote or its affiliates’ websites and mobile applications, or advertisements that we display on Coyote websites or mobile apps or on third party sites and apps.

(F) Geolocation data (e.g., when you opt-in to location tracking services which Coyote makes available to you).

(G) Audio information from calls placed with customer service and accounting centers which may be recorded, and electronic information in the form of Internet or other electronic network activity information as described above. Coyote may also collect other visual information in the form of video of our premises or photographic or video evidence collected as part of accident investigations.

(H) Professional or employment-related information in the form of business contact information such as name, company name, physical address and email address and telephone or fax number.

(I) Education information, defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99).

(J) Inferences drawn from (1) the information we collect when you visit our websites, use our apps, or interact with Coyote-related tools, widgets or plug-ins or our official social media pages, (2) information we collect, including through affiliates and third-party suppliers, regarding content and other data posted on the Internet (such as public locations on the Internet), and (3) information about consumer preferences and behavior that we collect on our websites and mobile apps or purchase from third parties in order to create a profile about a consumer reflecting the consumer’s preferences, characteristics, predispositions, behavior, and attitudes.

(K) Sensitive personal information such as account login information allowing access to an account, and precise geolocation data, in each case as further described above in the relevant categories.

We obtain personal information from a variety of sources. These sources include: individuals with whom we or our service providers interact, with respect to both online and offline interactions such individuals may have with us or our service providers;other entities who transact with or act as representatives or agents for such individuals;the devices used to access our websites, mobile applications, and online services;third party partners such as marketing and analytics providers;carriers;drivers;shippers;consignees and other customers, including customers of our broker and logistics services;the personnel of warehouses and distributors;and others consistent with this Privacy Notice.

Disclosure of personal information for monetary or other valuable consideration or for business purposes

Within the last 12 months, we have not disclosed personal information of California consumers to other businesses or third parties for monetary or other valuable consideration as a data “sale” under California or Virginia law. We do not disclose personal information of individuals we know to be under the age of 16 to businesses or third parties for monetary or other valuable consideration as a “sale” of personal information as defined under California law or Virginia law or for cross-context behavioral advertising as the “sharing” of personal information as defined under California law. without affirmative authorization.

Within the last 12 months, we have disclosed information in all or substantially all of the above categories of information (A-K) for our business purposes. To learn more about the categories of third parties with whom we share such information, please see above, “How Coyote Uses the Information”.

Use of personal information:

We use the personal information we collect for the business purposes disclosed within this Privacy Notice. For further information, please see above, “How Coyote Uses the Information”. The business purposes for which we may use personal information about California and/or Virginia consumers include:

• Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards;
• Helping to ensure security and integrity to the extent the use of a consumer’s personal information is reasonably necessary and proportionate for these purposes;
• Debugging to identify and repair errors in our systems;
• Short-term, transient use including non-personalized advertisingshown as part of a consumer’s current interaction with us;and
• Providing services on our behalf or on behalf of another, including maintaining or servicing accounts, providing customer service, fulfilling transactions, verifying identity information, processingpayments, and other services. This includes:
• o Conducting internal research to develop and demonstrate technology;and
• o Conducting activity to verify, enhance, and maintain the quality or safety of services or devices which we may own, control, or provide.

We may also use the information we collect for our own or our service providers’ other operational purposes, purposes for which we provide additional notice, purposes disclosed elsewhere in this Policy or for purposes compatible with the context in which the personal information was collected.

Coyote does not use sensitive personal information for purposes that would give rise to a right to limit the use or disclosure of sensitive personal information for residents of California.

Your privacy rights

If you are a resident of U.S. state that has enacted a comprehensive consumer data privacy law, you may have certain rights related to your personal information. We will honor requests received to the extent required by applicable law and within the time provided by law. You may exercise these rights free of charge except as otherwise permitted under applicable law.

• Right to Delete. You have the right to request that we delete personal information that we have collected about you. Please note if you have requested a service that requires the use of your personal information, we may not be able to provide that service if you choose to delete your personal information.
• Right to Correct. You have the right to request that we correct inaccurate personal information that we have collected about you.
• Right to Know. You have the right to request that we disclose what personal information we collected about you. Specifically, you have the right to request that we disclose what personal information we have collected, used, disclosed, including:
• – Whether we are processing personal information about you;
• – Specific pieces of information that we have collected about you;
• – Categories of personal information we have collected about you;
• – Categories of sources from which the personal information is collected;
• – Categories of third parties to whom we disclose personal information;
• – The business or commercial purpose for collecting, selling, or sharing personal information;
• – Categories of personal information about you, if any, that we have sold or shared and the categories of third parties to whom we have sold or shared the information, by category or categories of personal information for each category of third party to whom we sold or shared the personal information;and
• – Categories of personal information about you that we disclosed for a business purpose and the categories of recipients to whom we disclosed the information for a business purpose.

As used above, “sale,” “sold,” “selling,” “shared,” and “sharing” have the meanings provided in U.S. state comprehensive consumer data privacy laws.

• Right to Opt Out. You have the right to opt out of the disclosure of personal information about you for monetary or other valuable consideration, the sharing of personal information about you for cross-context behavioral advertising, targeted advertising, and profiling. To opt-out, follow the instructions provided below under “Requests to Exercise Your Rights.”

If we receive and are able to process a signal from your device indicating your preference to opt out from sales or sharing of personal information, as defined by law, then we will apply that preference to personal information we collect from that device, provided that we may not be able to associate the signal to the same device if:

• you use a different web browser or other tool to interact with us,
• you make changes to your browser (e.g., uninstall and reinstall or certain types of upgrades) that impact our ability to associate the device with the signal your device originally sent, or
• you clear cookies or browsing data from your browser or device in a way that impacts our ability to associate the device with the signal your device originally sent.

Please note that a signal sent from one device will not apply to other devices you use or to data that we collect from you through other sources.

• Right to Appeal. If we decline to take action on a request that you make in accordance with the foregoing to exercise the foregoing privacy rights, then you may appeal our decision by submitting an appeals request to Coyote via the following email address: [email protected].

Request to exercise your rights

You may request to exercise these rights by:

• Calling us toll-free at 1-800-455-8753,
• Completing our rights request form available here.

Verification process

For requests made in connection with the Right to Know, Right to Correct, and/or Right to Delete, please note that, as required under applicable law, we must take steps to verify your request before we can provide personal information to you, correct, or delete personal information, or otherwise process your request. To verify your request, we may require you to provide your name, physical address, email address, contact information, and information about your account or previous transactions with us. If we believe we need further information to verify your request as required by law, we may ask you to provide additional information to us.

We will deliver personal information that we are required by law to disclose to you in the manner required by law within 45 days after receipt of a request, unless we notify you that we require additional time to respond, in which case we will respond within such additional period of time required by law. We may deliver the personal information to you through your account, if you maintain an account with Coyote, or electronically or by mail at your option. If electronically, then we will deliver the information to you or, at your request, to another entity, in a portable and, to the extent technically feasible, in a structured, commonly used, machine-readable format that allows you to transmit the information from one entity to another without hindrance.

Agent authorization

You may designate an authorized agent to request any of the above rights on your behalf. You may make such a designation by providing the agent with written permission, signed by you, to act on your behalf. Your agent may contact us via the information provided in the “How to Contact Us” section below to make a request on your behalf. Even if you choose to use an agent, we may, as permitted by law, require:

• The authorized agent to provide proof that the consumer gave the authorized agent signed permission to submit the request;
• The consumer to verify their identity directly with the business;
• The consumer to directly confirm with us that they provided the authorized agent permission to submit the request.

Nondiscrimination

Subject to applicable law, we may not discriminate against you because of your exercise of any of the above privacy rights, or any other rights under the California Consumer Privacy Act or the Virginia Consumer Data Protection Act, including by:

• Denying you goods or services;
• Charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;
• Providing you a different level or quality of goods or services;or
• Suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

We may, however, charge different prices or rates, or provide a different level or quality of goods or services, if that difference is reasonably related to the value provided to us by your personal information. We may limit our response to your exercise of the above rights as permitted under applicable law.

Data retention

Your personal information will not be stored for longer than necessary for the purposes for which they were collected or as required under applicable retention policies and/or in accordance with applicable law. Our retention policies reflect local statute of limitation periods and national statutory obligations of Coyote.

Do not track

Please note that our Web sites and mobile apps are not designed to respond to “do not track” requests from Web browsers.

Metrics regarding Privacy Requests (California)

Please see the chart below for metrics relating to our handling of data subject rights requests in the period from January 1, 2023, to December 31, 2023.

*Coyote Logistics fulfills requests only when a Data Subject verifies their identity