Your trust matters to us. That is why we protect your information and use it responsibly, while continuing to deliver the excellent services you expect from FedEx and its operating groups, subsidiaries and divisions, including any TNT company (hereafter “FedEx”). At FedEx, we are committed to protecting your privacy and the security of information that can directly or indirectly be used to identify a natural person and/or juristic person (hereafter “Personal Information”). FedEx has created this privacy notice (hereafter “Privacy Notice”) to explain how FedEx collects and uses Personal Information.

Last update: June 2021.

When this Privacy Notice mentions “FedEx”, “we”, “us”, or “our”, FedEx is referring to the FedEx company that is deciding on the purposes and means of the processing of your Personal Information under this Privacy Notice. As all TNT companies are now part of FedEx, the Personal Information collected via any TNT domain, such as www.tnt.com, fall within the scope of this Privacy Notice.

When you are using our services in Europe, your Personal Information is controlled by FedEx Express South Africa (Pty) Ltd. When you are using our services globally, your Personal Information is controlled by FedEx Corporation, having its headquarters in Memphis, Tennessee, United States.

Overview

This Privacy Notice answers the following questions:

This Privacy Notice applies to you if you are a customer of FedEx, a recipient of a package delivered by FedEx, a supplier of FedEx, or if you contact FedEx, for instance, by visiting our websites such as www.fedex.com and www.tnt.com including any (sub)pages and mobile apps (hereafter “Websites”), using social media or if you receive emails from FedEx. Our Websites are for a general audience and not aimed at children. In principle, we do not collect Personal Information from children under age 18. If you are under the age of 18 and you want to use our services, please rely on a parent or guardian to assist you.

In the course of its business activities and providing the services, FedEx will need to process Personal Information. Without your Personal Information, we will not be able to provide you with the requested services. The Personal Information that you provide directly or indirectly to FedEx when using our services and visiting our Websites may include:

• Contact information. Such as your name, company name, address, e-mail address and phone number;

• Financial information. This will include your bank account number, payment status, and invoices;

• Identification information. This will include your driver’s license number, identification document, certificate of incorporation, company registration document. If you don’t have any of the aforementioned, another legally acceptable identification method will be used that ensures us that we can identify you, but is the least privacy invasive as possible;

• Account information. This will include log-in details, including your email address, and other information provided through your account;

• Information related to shipment and services. This will include shipment tracking number, shipment routing information, location data, status of a shipment, delivery location, packaging type, number of pieces, weight, picture of the parcel, and customs information;

• User and preference information. This will include – as applicable – shipping amounts, complaints, history of purchases and related commercial activities, communication, survey information, and shopping preferences.

Automatically generated information. This will include IP address, unique device or user ID, system and browser type, date and time stamps, referring website address, content and pages you accessed on our Websites or mobile apps, dates, times and locations actions take place, websites you visit (if you connect to our in-store wireless services), click-stream information and device location (if you turn on the feature in the mobile app).

Yes, FedEx uses cookies and similar technologies on its Websites. To learn more about the cookies and similar technologies, please consult our Cookie Notice.

Personal Information shall be collected, used, stored or otherwise processed when necessary within the framework of responsible, efficient and effective business management of FedEx. FedEx processes Personal Information based on applicable legal ground(s). The legal ground is often intrinsically linked to the business purpose. This means, for example, that the performance of an agreement can be both a legal ground and a business purpose for FedEx. Therefore, we will first clarify the legal ground(s) on which FedEx processes your Personal Information and, subsequently, the business purpose(s) that we use your Personal Information for:

Legal Grounds
In general, FedEx processes your Personal Information based on one of the following legal grounds:

• The processing is necessary to perform an agreement between you and FedEx,

• The processing is necessary for us to comply with our legal obligations,

• The processing is necessary to protect your vital interests or of other individuals,

• The processing is necessary for the legitimate interests of FedEx, except where such interests are overridden by your interests or fundamental rights and freedoms, or

• Where appropriate and required, we will ask for your consent.

Business Purposes
FedEx shall only collect, use or otherwise process Personal Information if the processing falls within the scope of one (or more) of the legitimate business purposes listed below: 

1. Product development, research and improvement of FedEx products and/or services. FedEx processes Personal Information as necessary for the development and improvement of FedEx products and/or services, research and development.

2. Performing agreements. This includes shipping services, tracking FedEx services, communication with individuals and other parties regarding services, responding to requests for (further) information, dispute resolution and preparing agreements (e.g. link the shipment tracking number to your account to enable you to follow your shipment).

3. Relationship management and marketing for commercial activities. In general, FedEx processes Personal Information as necessary for the development and improvement of FedEx products and/or services, account management, client services and the performance of (targeted) marketing activities in order to establish a relationship with a client and/or maintaining as well as extending a relationship with a client, business partner or supplier and for performing analyses with respect to Personal Information for statistical and scientific purposes (e.g. deliver advertising, communications and content from us on our sites and those of third parties more specific to your interests).

4. Business process execution, internal management and management reporting. This includes addressing activities such as managing company assets, conducting internal audits and investigations, finance and accounting, implementing business controls, provision of central processing facilities for efficiency purposes, managing mergers, acquisitions and divestitures and Processing Personal Information for management reporting and analysis (e.g. conduct investigations into shipping accounts to detect fraud).

5. Safety and security. Personal Information shall be included in the processing for activities such as those involving health and safety, the protection of FedEx and customer, supplier or business partner assets and the authentication of customer, supplier or business partner status and access rights (e.g. provide a safe and secure services for online and offline transactions).

6. Protecting the vital interests of individuals. This includes processing data when necessary to protect your vital interests or of other individuals (e.g. for urgent medical reasons).

Compliance with legal obligations. This addresses the processing of Personal Information as necessary for compliance with laws, regulations and sector specific guidelines to which FedEx is subject (e.g. matching names of clients, suppliers and business partners against denied parties’ lists).

As a rule, FedEx shares your Personal Information with third parties in the following circumstances:

• With its affiliates, operating groups, subsidiaries and divisions, or with third parties if such is necessary for the purposes as listed above. If appropriate, FedEx will require third parties to conduct activities in a manner consistent with FedEx policies and guidelines in relation to data protection. 

• With data processors, i.e. parties processing Personal Information on our behalf. In such cases, these third parties only use your Personal Information for the purposes described above and only in accordance with our instructions. FedEx will only use processors which provide sufficient guarantees to implement appropriate technical and organizational measures and ensure the protection of the rights of data subjects.

• With its employees if and to the extent necessary for the performance of their tasks. In such a case, access will be granted only if and to the extent necessary for the purposes described above and only if the employee is bound by confidentiality.

• If and when required to do so by law, court order, or other legal process, for example, with law enforcement agencies or other governmental agencies, to establish or exercise our legal rights or in connection with a corporate transaction, such as a divesture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.

We will retain your Personal Information no longer than necessary for the purpose(s) for which we process your Personal Information. After the retention period we will delete or anonymize your Personal Information, unless we need to retain certain of your Personal Information for another purpose. We will only do so if we have a legal ground to retain your Personal Information. We will also ensure that Personal Information are only accessible for that other purpose. 

For example, we need your Personal Information to perform the customs clearance process. Customs laws dictate that we have to retain/store - certain of - those Personal Information. Generally, this period varies from 3 to 7 years, depending on the applicable country and customs laws. In those cases, we will only store the Personal Information necessary to meet our legal obligations. 

Please contact us using the contact details above if you have questions about specific retention periods.

FedEx has taken appropriate technical and organizational measures to protect your Personal Information against accidental or unlawful processing, including by ensuring that:

• Your Personal Information is protected against unauthorized access;

• The confidentiality of your Personal Information is assured;

• The integrity and availability of your Personal Information will be maintained;

• Personnel is trained in information security requirements; and

• Actual or suspected data breaches are reported in accordance with applicable law.

Due to the nature of our business and the services we provide to our clients, FedEx may need to transfer your Personal Information to locations outside the country where you reside. In any case where we transfer Personal Information, FedEx shall ensure that such a transfer is subject to appropriate safeguards.

Based on the law applicable to the use of your Personal Information, you have rights in relation to your Personal Information. Note that we will have to balance your rights and your request to exercise them against our rights and obligations to process your Personal Information and to protect the rights and freedoms of others. A number of the rights you have in relation to your Personal Information, are explained below: 

Right of access
You are entitled to a copy of the Personal Information we hold about you and to learn details about how we use it. Your Personal Information will usually be provided to you digitally. We may require you to prove your identity before providing the requested information. 

Right to rectification
We take reasonable steps to ensure that the information we hold about you is accurate and complete. However, if you believe this is not the case, you have the right to request that any incomplete or inaccurate Personal Information that we process about you is amended.

Right to erasure
You have the right to ask us to erase your Personal Information, for example where the Personal Information is no longer necessary for the original purpose for which they were collected, where Personal Information has become obsolete or where you withdraw your consent to the grounds on which data is processed. However, this will need to be balanced against other factors. For example, we may not be able comply with your request due to certain legal or regulatory obligations.

Right to restriction of processing
You are entitled to ask us to (temporarily) stop using your Personal Information, for example where you think that the Personal Information we hold about you may be inaccurate or where you think that we no longer need to use your Personal Information.

Right to data portability
You may have the right to ask that we transfer Personal Information that you have provided to us to a third party of your choice. This right can only be exercised when you have provided the Personal Information to us, and when we are processing that data by automated means on the basis of your consent or in order to perform our obligations under a contract with you. 

Right to object
You have the right to object to processing which is based on our legitimate interests. You may also ask us to stop using your Personal Information for marketing purposes at any time, and if you do so, FedEx will immediately cease to use your Personal Information. For other purposes based on our legitimate interests, we will no longer process the Personal Information on that basis when you file an objection, unless we have a compelling legitimate ground for the processing. Note, however, that we may not be able to provide certain services or benefits if we are unable to process the necessary Personal Information for that purpose.

Rights relating to automated decision-making
You have the right not to be subjected to a decision based solely on automated decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you. If you have been subject to an automated decision and do not agree with the outcome, you can contact us using the details below and ask us to review the decision. 

Right to withdraw consent
We may ask for your consent to process your Personal Information in specific cases. When we do this, you have the right to withdraw your consent at any time. FedEx will stop the further processing as soon as possible after the withdrawal of your consent. However, this does not affect the lawfulness of the processing before consent was withdrawn.

Please use this link if you would like to exercise any of your rights.

You can manage your accounts with FedEx through the following. 

Emails: For your email preferences, visit the Preference Center.

Questions or complaints regarding the processing of your Personal Information can be directed to FedEx by using the contact information as provided at the top of this Privacy Notice.

You also have the right to lodge a complaint with the competent (local) data protection authority in the jurisdiction where you work, where you live or where an alleged infringement takes place.

FedEx may update this Privacy Notice from time to time. FedEx will publish an up-to-date Privacy Notice on the Websites at all times indicating the latest amendments.