Effective January 1, 2020 (Last updated June 29, 2020)
Agility Public Warehousing Company K.S.C.P., having its head office at P.O. Box 25418, Safat 13115 Kuwait, and its subsidiaries (“Agility”, “we”, “us” or “our”), respect your preferences concerning the collection and use of your personal data.
This policy reflects our current data protection policies and practices and describes how we collect personal data when you access or use Agility websites on which this policy appears (the “Websites”) and how we use such personal data (hereinafter, the “Policy”).
Agility operates in more than 100 countries. Unless otherwise stated, this Policy applies to all jurisdictions in which Agility operates. Certain regions, countries, and/or individual states may have additional requirements, which are detailed, by jurisdiction, below. We also encourage you to review our table of contents, above, which identifies the portions of this Policy that apply to specific locations.
Agility is the primary controller of personal data collected through the Websites. This Policy, except as provided below, applies only to the personal data that we collect online, from users of our Websites.
We reserve the right to update it from time to time, in which case the new version will posted on the Website on which it appears.
WHAT PERSONAL DATA DOES AGILITY COLLECT THROUGH ITS WEBSITES?
“Personal data” is information that identifies you personally as a natural person, directly or indirectly, in combination with other information available to us such as an identification number, location data, online identifier or one or more factors specific to your identity as a natural person. For the purposes detailed herein, Agility may collect and process the following categories of personal data:
Log data: This information often consists of network routing (location from which you access the website), equipment information (browser type), date, and time.
IP Addresses: We collect IP addresses and domain name information. An IP address is a number that is automatically assigned to a computer whenever it is connected to the Internet.
User and Third Party Identifiable Information: We collect personal data from users of the Websites, through registration screens, online forms, from online sales inquiries, or in e-mails that users send to Agility. We may also collect personal data relating to individuals involved in a shipment or service requested by the User of the Website. Personal data may include name, title, company, address, phone number, e-mail address, and the like.
Cookies: Cookies are unique identifiers that we share with your device to enable our system to recognize your computer and preferences on return visits to our Websites, which facilitate log in or other site navigation procedures. Cookies on the Websites may collect the following information: a unique identifier, user preferences and profile information.
Pixel Technologies: We may also use embedded pixel technologies to help track Website usage. The Website usage information collected by these technologies is associated with cookies and may provide personal data (as defined above) about your Website use if you are a registered user of the Website.
Financial information: For the purposes detailed hereinafter, Agility may be required to collect and process financial information such as payment information.
Agility also collects and processes personal data it did not collect from you. This is the case where Agility receives personal data from your device as part of the electronic communication itself – the standard electronic greeting between your computer, the network, and our servers. At this time, our server will also query your computer to see if there are “cookies” previously set by our Websites to facilitate log in or other site navigation procedures.
Our Websites may contain applications that allow you to book shipments, in which case you need to provide us with third-party personal data required to arrange for such shipment. In such case, you represent and warrant to Agility that you have obtained all necessary third-party consents for the processing of such personal data contemplated by the shipment.
HOW DO WE USE YOUR PERSONAL DATA?
Agility may use your personal data in several ways, including:
To process your account registration and other system administration purposes;
To manage its contractual or pre-contractual relationship with you;
To implement transactions or communications you requested, and, more generally, to provide you with the services and information you requested from us, including to respond to inquiries about the tracking of packages or ensuring adequate pick-up and delivery of shipments;
To review your job application;
For pursuing its legitimate interest of improving its business practices, Agility will collect and process your personal data for the following purposes:
To help create websites that are relevant and user friendly, by evaluating website content, navigability and composition as well as page response rates; • To protect the security and integrity of the Websites;
To let you know about material changes made to this Policy;
To protect Agility’s rights and interests through legal actions;
To perform business analytics activities relying notably on advanced profiling techniques and statistics, as more specifically described below; and
To provide you with tailored notices of our products, services, service developments as well as personalized contents that may address your needs (e-mail marketing), as more specifically described below.
Lastly, Agility may be required to collect and process personal data to comply with legally mandated reporting, disclosure, as well as any legal requirements.
DOES AGILITY SHARE MY PERSONAL DATA WITH OTHERS?
In order to pursue the purposes referred to under this Policy, Agility may need to share certain personal data with subsidiaries and affiliates in different jurisdictions (which may also act as data controllers), with service providers (e.g., those needed for the operation of the Websites, credit card clearing houses, transport companies, etc.) and other third parties, including Government agencies and marketing entities. We share personal data to the parties referred above only to the extent needed to run our Websites and conduct the activities referred to in this Policy.
In certain, limited circumstances, where permitted by applicable law, we may share or transfer personal data to unrelated third parties. For example, we may provide personal data to a third party (i) at your request; (ii) to comply with a legal requirement or court order; (iii) to investigate a possible crime, such as identity theft; (iv) in connection with the sale, purchase, merger, reorganization, liquidation or dissolution; or (v) under similar circumstances. If such an event occurs, we will take appropriate steps to protect your personal data.
Agility takes appropriate steps to ensure that its personnel, its affiliates and third-party vendors are bound by duties of confidentiality and that, if applicable, Agility implements measures such as EU standard contractual clauses to ensure that any transferred personal data remains protected and secure.
DOES AGILITY IMPLEMENT COOKIES, PROFILING AND E-MAIL MARKETING ACTIVITIES?
Agility may implement profiling activities, which enable us to better understand your potential needs and expectations so as to provide you with tailored information and/or services, the most likely to be of interest to you. Please note that such profiling activities will not make you subject to any legal consequences as it is just a useful way for us to better get to know you and to adapt our services proposals accordingly. To exercise your right to object to such profiling, please contact us at [email protected]
We do conduct e-mail marketing activities. If in the use of our Websites you have provided us with e-mail or other personal data, we will ask your consent to send you e-mail marketing material, except in the event that you are an existing customer and such permission is not required according to law. We will include an “unsubscribe” link in each electronic communication so that you can advise us whether you wish to continue receiving such communications going forward.
DOES AGILITY USE GOOGLE ANALYTICS?
HOW DOES AGILITY PROTECT MY PERSONAL DATA?
Agility implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk and has in place generally accepted information security techniques to prevent unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data we collect. These measures include policies, procedures, firewalls, access control procedures and cryptography, and technical elements relating to personal data access controls. However, no security measure or modality of data transmission over the Internet is 100% secure. Although we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security.
HOW DOES AGILITY RESPOND TO “DO NOT TRACK” SIGNALS ENABLED BY USERS?
Some internet browsers incorporate a “Do Not Track” feature that signals to websites you visit that you do not want to have your online activity tracked. Given that there is not a uniform way that browsers communicate the “Do Not Track” signal, our Websites do not currently interpret, respond to or alter their practices when they receive “Do Not Track” signals.
CAN I REVIEW AND REQUEST CHANGES TO MY PERSONAL DATA?
To review or request changes to any of your personal data, please contact us at [email protected].
ARE CHILDREN PERMITTED TO USE AGILITY?
The Website is not intended for children under 13 years of age. We do not knowingly collect, use, or disclose personal information from children under 13. If you are under 13, do not access or use the Website.
WHAT ABOUT OTHER WEBSITES?
The inclusion of any external link on our Websites does not imply our endorsement of the website or the company (including such company’s products) to which the link leads. Linked websites are not under our control. Except as stated below, this Policy applies solely to personal data that is acquired on our Websites. We do not accept any responsibility or liability in connection with these other websites.
NOTICE TO RESIDENTS OF THE EUROPEAN ECONOMIC AREA AND UNITED KINGDOM
If you are an individual in a country in the European Economic Area or the United Kingdom, you are entitled to the following additional disclosures regarding your personal data.
How long does Agility retain my personal data?
Agility will retain your personal data for no longer than is necessary for the purposes specified under this Policy, except as otherwise agreed to by you in a contract or as provided by applicable law.
What are the purposes and legal basis for processing my personal data?
The legal basis for collecting and using the personal data described above will depend on the personal data concerned and the specific context in which we collect it, which is discussed below.
The provision of your personal data is voluntary and is therefore based on your consent. However, if you do not provide such personal data, you may not be able to receive the requested information from us. You have the right to withdraw your consent at any time without affecting the lawfulness of the processing based on consent before its withdrawal.
Agility’s Legitimate Interests
We may process your personal data if doing so is necessary for our legitimate interests and your rights as an individual do not override those legitimate interests. For example, personal data may be necessary to fulfill our legitimate interests of knowing you as a user of our Websites or to offer you, as a potential customer, products or services that fulfill your needs.
Required To Perform a Contract
Personal data may be needed for the purpose of entering into, or providing services pursuant to, a contract with you.
To Enable Agility to Comply with a Legal Obligation
We may process your personal data to comply with legal obligations to which we are subject. This may include any requirement to produce audited accounts, any legal obligation to share information with law enforcement agencies, public or governmental authorities, and to comply with legal process.
Necessary for the Exercise or Defense of Legal Claims
If you bring a claim against us or we bring a claim against you, we may process your personal data in relation to that claim.
What are my rights regarding my personal data?
You are entitled to: (i) request access to your personal data processed by Agility; (ii) request the rectification of your personal data; (iii) request the erasure of your personal data; (iv) request the restriction of processing or object thereto; (v) receive your personal data in a structured and standard format as part of your right to portability; and (vi) lodge a complaint with a local supervisory authority.
Should you be willing to exercise the rights referred to under this section, you may write to us at [email protected]
NOTICE TO NEVADA RESIDENTS
Nevada law allows Nevada residents to opt-out of the sale of certain types of personal information. Subject to a number of exceptions, Nevada law defines “sale” to mean the exchange of certain types of personal information for monetary consideration to a person for the person to license or sell the information to additional persons. We do not currently sell personal information as defined in the Nevada law. However, if you are a Nevada resident, you still may submit a verified request to opt-out of sales and we will record your instructions and incorporate them in the future if our policy changes. Opt-out requests may be sent to [email protected]
NOTICE TO CALIFORNIA RESIDENTS
The CCPA defines “personal information” to mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. Personal information does not include publicly available, deidentified or aggregated information. For purposes of this “Notice to California Residents” section we will refer to this information as “Personal Information.”
The CCPA contains an exception that is relevant to us. Some of the CCPA’s privacy rights explained below do not apply to personal information reflecting a written or verbal communication or a transaction between us and a consumer, where the consumer is acting as an employee, owner, director, officer, or contractor of another entity and when the communication or transaction occur solely within the context of us conducting due diligence regarding, or providing or receiving a product or service to or from such entity.
What is My Right to Know about Personal Information Collected, Disclosed, or Sold?
If you are a California resident, you have the right to request that we disclose what Personal Information we have collected about you in the 12-month period preceding your request. This right includes the right to request any or all of the following:
Specific pieces of Personal Information that we have collected about you;
Categories of Personal Information that we have collected about you;
Categories of sources from which the Personal Information was collected;
Categories of Personal Information that we sold (if applicable) or disclosed for a business purpose about you;
Categories of third parties to whom the Personal Information was sold (if applicable) or disclosed for a business purpose; and
The business or commercial purpose for collecting or, if applicable, selling Personal Information. The CCPA defines “sell” to mean selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a California resident’s Personal Information to another business or a third party for monetary or other valuable consideration.
What Categories of Personal Information does Agility Collect?
Identifiers (name, postal address, account name, email address)
Professional or employment-related information (e.g., company name, job title, industry and address)
Cookies, beacons, pixel tags, or other similar technology
Customer number, unique pseudonym or user alias
Internet protocol address
Internet or other electronic network activity information (browsing history; search history; and information regarding consumer’s interaction with website, application or advertisement)
Commercial information (records of personal property, products or services purchased, obtained or considered; other purchasing or consuming histories or tendencies;
Professional or employment-related information
We collected the above Personal Information for the following business or commercial purposes:
Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, or providing advertising or marketing services, providing analytic services
Advancing a person’s commercial or economic interests, such as by inducing another person to buy products, goods, property, information, or services, or enabling or effecting, directly or indirectly, a commercial transaction
As discussed, some of the CCPA’s privacy rights discussed herein do not apply to the Personal Information listed above because of the CCPA’s business-to-business exemption.
Has Agility Disclosed or Sold Personal Information?
Category of Personal Information
Category of Third Parties to Whom Information was Disclosed
Identifiers (name, postal address, email address)
Service providers and vendors (e.g., email, hosting, maintenance, backup, analysis, etc.)
Professional or employment-related information
Cookies, beacons, pixel tags, or other similar technology
Data analytics provider and advertising network
Internet protocol address
We do not knowingly collect or sell the Personal Information of minors under 16 years of age.
What is My Right to Request Deletion of Personal Information?
If you are a California resident, you have the right to request that we delete the Personal Information about you that we have collected. However, per the CCPA, we are not required to comply with a request to delete if it is necessary for us to maintain the Personal Information in order to, for example, complete a transaction, detect security incidents, comply with a legal obligation, or otherwise use the Personal Information, internally, in a lawful manner that is compatible with the context in which you provided the information.
How Can I Submit a Request to Know or Delete?
You may submit a request to know or delete through our interactive webform available here or by calling us at 1-800-229-1998.
What is Agility’s Process for Verifying a Request?
If we determine that your request is subject to an exemption or exception, we will notify you of our determination. If we determine that your request is not subject to an exemption or exception, we will comply with your request upon verification of your identity and, to the extent applicable, the identity of the California resident on whose behalf you are making such request. Our verification process may differ depending on whether you maintain a relationship and/or account with Agility (i.e., a password-protected account).
If you maintain a relationship and/or account with Agility, we may verify your identity through existing authentication practices available through your account. Prior to disclosing or deleting the Personal Information, we will ask you to re-authenticate yourself with respect to that account.
If you do not maintain a password-protected account, or if you are an account-holder but we suspect fraudulent or malicious activity with your account, we will verify your identity either to a “reasonable degree of certainty” or a “reasonably high degree of certainty” depending on the sensitivity of the Personal Information and the risk of harm to you by unauthorized disclosure or deletion, as applicable.
For requests to access categories of Personal Information and for requests to delete Personal Information that is not sensitive and does not pose a risk of harm by unauthorized deletion, we will verify your identity to a “reasonable degree of certainty” by verifying at least two data points that you previously provided to us and which we have determined to be reliable for the purpose of verifying identities.
For requests to access specific pieces of Personal Information or for requests to delete Personal Information that is sensitive and poses a risk of harm by unauthorized deletion, we will verify your identity to a “reasonably high degree of certainty” by verifying at least three pieces of Personal Information previously provided to us and which we have determined to be reliable for the purpose of verifying identities. In addition, you will be required to submit a signed declaration under penalty of perjury stating that you are the individual whose Personal Information is being requested.
What is My Right to Opt-Out of Sale of Personal Information?
If you are a California resident, you have the right to direct businesses to stop selling your Personal Information. We do not sell Personal Information as it is defined in the CCPA.
What is My Right not to be Discriminated Against for Exercising My Privacy Rights?
We will not discriminate against California residents if they exercise any of the rights provided in the CCPA as described in this section “Notice to California Residents.” As such, we will not deny goods or services to that California resident; charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; provide a different level or quality of goods or services to the California resident; or suggest that the California resident will receive a different price or rate for goods or services or a different level or quality of goods or services. However, we are permitted to charge a California resident a different price or rate, or provide a different level or quality of goods or services, if that difference is reasonably related to the value provided to us by the individual’s data.
Can I use an Authorized Agent to Submit a Request?
If you are submitting a request on behalf of a California resident, please submit the request through one of the designated methods discussed above. After submitting the request, we will require additional information to verify your authority to act on behalf of the California resident.
What are my Rights under California’s Shine the Light Law?
We do not disclose personal information obtained through our Site or Services to third parties for their direct marketing purposes. Accordingly, we have no obligations under California Civil Code § 1798.83.