O.P.S.I. (International Handling) Ltd. Privacy Policy

Commitment to Privacy

O.P.S.I. (International Handling) Ltd. is an authorized service contractor of UPS in Israel, together with its subsidiaries and/or affiliated companies, hereinafter referred to as the "Company."

The Company respects and protects your privacy.

This document reflects the Company's data protection and privacy policy. The purpose of this policy is to describe the manner in which the Company operates in relation to "information", as defined in the Protection of Privacy Law, 1981, and "personal information", as defined in Amendment 13 to the Protection of Privacy Law, 2024 (hereinafter: the "Law"), collected about you, or about third parties whose information has been provided by you.

The Company provides, inter alia, international and domestic courier services, customs brokerage services, and supply chain management and logistics services (hereinafter: the "Services").

As part of an engagement for the purpose of receiving the Services provided by the Company, you may be asked to provide personal information. Most of this information is not information that you are legally required to provide; however, without providing it, the Company will not be able to provide you with the Services.

This policy details the types of personal information that the Company collects and/or may collect about customers, the purposes for which such information is used, and the external parties to whom the Company may transfer it. This policy also details the measures taken by the Company to protect and secure the information collected, as well as details regarding the exercise of your rights to review and correct the information if it is found to be incomplete, inaccurate, or erroneous, all as set out in this policy.

The Data Controller is: O.P.S.I. (International Handling) Ltd.

The Data Controller may be contacted regarding this policy through the Company's Privacy Protection Officer in Israel at the following email address: dpo@ups.co.il. A response to any inquiry will be provided within 30 business days.

Please read this policy carefully, as it constitutes your consent to the use of the personal information that you provide to the Company at any stage of your engagement with the Company, in all areas of activity and Services.

This document is drafted in the masculine form for convenience only, but is intended for both men and women alike.

Purposes of Information Collection

The information is collected for the purpose of providing the Services generally, and in particular for the following purposes: (1) use of the Company's website; (2) collection and distribution of shipments; (3) customs clearance of shipments; (4) shipment tracking; and (5) promotions and additional offers.

Without derogating from the generality of the aforesaid, the Company also collects information for the following purposes:

• To provide products and services at your request as detailed above, as well as logistics services, product supply chain management, customs clearance, customs brokerage services, and the like.
• To process and clear payments for the Services.
• To provide service and responses to customer inquiries and customer support.
• To manage customer accounts in the Company's systems.
• For marketing purposes, including offering you products and services that the Company believes may interest you, subject to your consent.
• To enable the sending of information to contact persons updated in the customer account, at your request.
• For statistical analyses and internal controls, inter alia, for the purpose of improving service quality.
• To identify, investigate, and prevent fraud, deceit, and criminal acts, to defend against claims, and to comply with legal requirements applicable to the Company and with the policies of the Company and UPS worldwide.

Information Collected by the Company

All information provided to the Company by you for the purpose of receiving the Services, whether in the past, present, or future, is stored in the Company's computer systems and protected by advanced measures and in accordance with stringent standards designed to safeguard the information you have provided and its confidentiality.

The Company's computer systems are managed and secured in accordance with the provisions of the Protection of Privacy Law, 1981, its amendments and regulations, including the Protection of Privacy Regulations (Information Security), 2017, accepted information security standards, and the international regulations applicable to the Company in connection with data protection.

Below is a detailed list of the personal information that the Company may collect:

• Identification data, such as an identity card number or passport number.
• Contact data relating to an individual customer or a company, such as full name, contact person's name, company name, physical address, email address, and telephone and/or fax number.
• Shipment data, such as: (1) the name of the sender and the consignee, physical address, email address, and telephone number; (2) a signature as proof of delivery; (3) customer account number and/or a UPS account number; and (4) additional information provided to the Company for the purpose of accessing websites through which the service is provided.
• Information provided to the Company regarding the contents of shipments and shipment history.
• Names, addresses, email addresses, and telephone numbers of contact persons provided to the Company by you or on your behalf, to whom the Company is requested to send goods.
• Details obtained from responses to satisfaction surveys.
• Information collected when registering to the website for the purpose of receiving a service or for any other need. In this context, the Company collects the username, password, and access control by means of OTP (a one-time password received for the purpose of verifying your identity) used to access the Company's website.
• Anonymous details collected while you browse the internet on the Company's digital platforms or when searching for the Company on internet search engines and social networks, including: device identifier, device location identifier, device type and resolution, the online source leading to entry to the Company's website, details of browsing behavior on the Company's website and the length of time spent on each page. The IP address is retained for a short period and then deleted. A unique device identifier, browser characteristics, device type, operating system, language preferences, URLs while browsing the UPS website, information regarding actions performed on the website, and the date and time of the activity may also be collected.
• Information for marketing and campaign measurement purposes, such as indications regarding interaction with marketing mailings (for example, whether an email was opened or not opened and clicks on links) and data collected while you browse the Company's website or campaign landing pages, including through third-party tools (such as Google and Meta). This information may include online identifiers (such as cookies, pixels, device identifiers, and IP address) used for measurement, performance analysis, and adjustment of advertising and content, including personalized advertising and/or targeted remarketing on third-party platforms; the use of such tools is also subject to their privacy policies.
• Payment and financial information (such as bank account number and encrypted credit card details), dealer number where products or services requested require such information, location data of the Company's couriers while providing the service at the customer's address by means of GPS, and photographs of the delivery point.

By providing information to the Company, you confirm that such information is provided voluntarily and with your consent, and will be used by the Company for the purpose of providing offers, receiving the Services, providing customer service, direct mail, and contacting you for the purpose of providing information regarding the Services you have purchased, in accordance with the purposes set out above.

Use of Cookies and Collection of Digital Information

When you access the Company's website, certain information may be collected through automated means, such as cookies. "Cookies" are text files that websites send to computers or other internet-connected devices that visit the website, for the purpose of uniquely identifying the visitor's browser or storing information or settings in the browser. The Company may also use Google Analytics and other third-party analytics tools that collect data about visitors to its websites and web applications, including anonymous demographic information and browsing activity.

You may set your browser preferences regarding the use of cookies, including notice of their use, restriction, or disablement. However, please note that disabling cookies may prevent certain features of the Company's websites or applications from functioning properly.

The information collected through cookies is used for the following purposes only: (1) personalizing the user's browsing experience on the website and applications; (2) displaying content, including advertising, adapted to the user's preferences and to the configuration and layout of the website and the Company's applications; (3) managing marketing and advertising activities; and (4) diagnosing technical issues, monitoring availability, and supporting online administration.

Transfer of Information to Third Parties and Abroad

The Company does not sell or otherwise share personal information with third parties, except for transfers of information as described in this Privacy Policy:

• To perform the Company's pickup and delivery services, the Company shares information with transportation subcontractors and couriers for the purpose of distributing shipments. Such sharing includes shipment data such as the sender, the consignee, a third party receiving or paying, and location data of the sender or consignee. In addition, personal information may be shared among the Company's affiliates, franchisees, distributors, and technology companies supporting the Company's core operations. The Company ensures that these entities, collectively referred to herein as the "Company's business partners," use the information solely for the purposes described in this Privacy Policy.
• In addition, unless you object, the Company may share your additional personal information with third parties that are not among the Company's and/or UPS's business partners, such as Google and Meta, for the purposes of such entities, for example in order to offer products and services that may interest you through targeted advertising. Information received through Google and Meta applications is collected directly by the providers of those features. Such information is subject to the privacy policies of the relevant feature providers, and the Company is not responsible for the information practices of such providers. The Company also shares personal information with third-party entities that provide services on behalf of the Company and in accordance with its instructions. The Company does not authorize such entities to use or disclose the information except as required for the purpose of providing services on the Company's behalf or in order to comply with legal requirements.
• With respect to customers purchasing outsourced supply chain and logistics services from the Company, when the Company provides supply chain management and logistics services, it may share personal information about the end customers of its customers, such as recipient details, address, and telephone number. In such circumstances, the Company shares the information with designated transportation and distribution providers, logistics warehouses, and information systems providers supporting that activity, all for the purpose of providing the service in accordance with the agreement with the customer.
• Transfer of information abroad – The Company may transfer the personal information it collects about you to UPS worldwide, inter alia, for the purpose of providing shipping services between consignee and sender located in different countries and for the performance of international courier shipments. Those countries do not necessarily have the same data protection laws as the country in which the information was provided. When transferring your information to other countries, the Company will protect that information at least as described in this Privacy Policy and subject to the local law applicable in the country of origin and the country of destination. In addition, the Company may transfer information to technology providers supporting the Company's core operations, such as cloud service providers. In any such case, the Company ensures that the provider complies with the strictest applicable data protection and privacy regulatory requirements under international legislation.
• In addition to all of the above, the Company may also disclose information about you: (1) if required to do so by law, regulation, or legal process (such as a court order or subpoena); (2) in response to requests by governmental agencies, such as law enforcement authorities; or (3) where the Company has reasonable grounds to believe that disclosure is necessary to prevent bodily harm or damage to property, prevent fraud, or reduce financial damage and loss, and also for the purpose of investigating suspicion relating to any of these cases. Information will be disclosed only to law enforcement authorities and subject to a judicial or police order.

The Company reserves the right to transfer any information it holds about you in the event that the Company sells or transfers all or part of its assets (including in the event of reorganization of the Company and related companies, liquidation, or bankruptcy). Any such transfer of information will be subject, at a minimum, to the terms of this policy.

Direct Mailing

As a rule, the Company does not send direct mailing to customers except where necessary for the provision of Services and subject to obtaining any consent required under applicable law and/or the relevant engagement agreement.

Even if you have consented to receive notices in this manner under the engagement agreement, you may at any time request to stop receiving such notices, either by using the "remove" option in the body of the notice or by contacting dpo@ups.co.il by email, and your request will be handled promptly and without delay.

If you indicate in the agreement that you do not wish to receive notices in this manner, or if you have requested to stop receiving such mailings, no notices will be sent to you in this manner.

Sending Advertisements

Advertising materials (including emails, text messages, and similar communications) will be sent to you only if you have given your prior consent, and in accordance with the provisions of applicable law, including Section 30A of the Communications Law (Telecommunications and Broadcasting), 1982.

Each advertisement will include a simple and clear means of removal, and you may withdraw your consent at any time by using the "remove" option in the message or by contacting the Company at dpo@ups.co.il. Upon receipt of such request, the Company will act to stop sending advertisements as soon as possible and without undue delay.

Exercising Your Right to Review and Correct Information

Pursuant to the Protection of Privacy Law, 1981, you are entitled to review information about you held by the Company. If such information is incorrect, incomplete, unclear, or outdated, you may request its correction or deletion, subject to any legal limitation or other lawful basis for denying the request.

To exercise these rights, a written request may be submitted via the "Contact Us" page on the website. In addition, you may send an email to the Company's Privacy Protection Officer at dpo@ups.co.il.

Any request on this subject should include full identification details, contact details for correspondence, the information items you wish to review, and the reasons therefor.

The handling of the request is subject to payment of a fee in the amount of NIS 20.

The Company will respond to any inquiry within 30 days of receipt.

How the Company Protects Personal Information

The Company maintains administrative, technical, and physical safeguards designed to protect the personal information you provide against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use. Despite the fact that the Company takes steps to restrict access to its facilities and systems to authorized persons, information appearing on the outside of a package or letter is exposed to parties acting on the Company's behalf as part of the service delivery process, for example, couriers.

In addition, the Company takes a series of measures for the proper handling of the personal information provided to it:

1. Fair and lawful processing – The Company ensures that the processing, collection, and retention of information are carried out only with the consent of the data subject, or from lawful sources.
2. Purpose limitation - The Company processes information solely for the purposes for which it was provided to it by the data subjects.
3. Data minimization - The Company does not collect information beyond what is required for the realization of the purposes for which it was provided.
4. Transparency - The Company specifies the purposes of the use of the information collected, the transfers of information, their purposes and the identity of the transferees, and the existence of rights of review, correction, and objection.
5. Confidentiality and security - The Company maintains the confidentiality of the information and implements technological and organizational mechanisms against its loss, impairment of its integrity, unauthorized access, or unlawful alteration. Personal and sensitive information will receive a high degree of security, and access to it will require appropriate identification or verification procedures.
6. Responsibility - The Company implements organizational mechanisms to ensure the responsibility of its managers, employees, and service providers with whom it works, in order to uphold the policy and principles and to take appropriate action in the event of a violation.

Updates to the Privacy Policy

This policy may be updated from time to time without prior notice, in order to reflect changes in the Company's practices regarding personal information. The Company will post a prominent notice on its websites regarding any material changes to this Privacy Policy and will indicate at the bottom of the policy the date on which the latest update became effective.

How to Contact the Company

If you have any questions or comments regarding this Privacy Policy, or if you would like to update information that the Company holds about you or your preferences, you may contact the Company by email at wecare@ups.co.il.

You may also contact the Company's Privacy Protection Officer directly at dpo@ups.co.il.

Or you may contact the Company in writing at:

O.P.S.I. (International Handling) Ltd.
Saifan 1
Ben Gurion Airport, 7010000
Israel