Privacy Policy

Last Updated: August 2026

MAP3 LLC, doing business as Vesta Freight (“Vesta Freight,” “we,” “us,” or “our”), respects your privacy and is committed to protecting the personal information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, retain, and otherwise process personal information in connection with our freight brokerage and logistics services, websites, online forms, recruiting activities, communications, and other interactions with customers, shippers, consignees, carriers, carrier representatives, vendors, business partners, job applicants, and website visitors.

Please read this Privacy Policy carefully. By accessing or using our website, submitting information to us, requesting a quote, applying for a position, subscribing to communications, engaging us to arrange transportation services, or otherwise interacting with Vesta Freight, you acknowledge the practices described in this Privacy Policy.

1. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to personal information that Vesta Freight collects through or in connection with:

• The Vesta Freight website, including vestafreight.com and webpages that link to this Privacy Policy;

• Requests for freight quotes and other service inquiries;

• Contact forms, newsletter registration forms, and similar website submissions;

• Freight brokerage, transportation-arrangement, logistics, and related services;

• Communications conducted by email, telephone, web form, video conference, postal mail, or other business channels;

• Customer, shipper, consignee, carrier, owner-operator, vendor, and business-partner relationships;

• Carrier sourcing, qualification, onboarding, monitoring, and management activities;

• Employment inquiries, recruiting, and job applications;

• Trade shows, industry events, networking activities, and referrals;

• Marketing, analytics, advertising, and website-improvement activities; and

• Other interactions in which we refer to this Privacy Policy.

Vesta Freight operates as a freight broker. We arrange transportation services through independent motor carriers and other transportation providers. Except where expressly agreed otherwise, Vesta Freight does not act as the motor carrier physically transporting a shipment.

This Privacy Policy applies to information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked—directly or indirectly—to an individual or household. Depending on applicable law, this information may be referred to as “personal information,” “personal data,” or a similar term.

Personal information does not generally include:

• Publicly available information obtained from government records or information lawfully made available to the general public;

• Information that has been aggregated or deidentified so that it cannot reasonably be associated with an identifiable individual;

• Information relating solely to a business or legal entity, unless the information also identifies or relates to an individual; or

• Information excluded from the definition of personal information under applicable law.

1.1 Business-to-Business Information

Many of Vesta Freight’s interactions involve representatives of companies, motor carriers, shippers, consignees, vendors, and other commercial organizations. Although this information is often provided in a business context, it may still constitute personal information when it identifies or relates to an individual.

For example, business contact information may include an individual’s name, professional email address, business telephone number, job title, employer, correspondence, shipment-related responsibilities, or transaction history.

We process this information as necessary to establish and manage commercial relationships, arrange and monitor transportation services, communicate about shipments, maintain business records, protect against fraud, and fulfill legal or contractual obligations.

1.2 Information Governed by Other Agreements

Vesta Freight’s freight brokerage and transportation-arrangement services are also governed by its applicable Terms and Conditions, available at https://www.vestafreight.com/terms-and-conditions/, and by any written agreement between Vesta Freight and the applicable customer, carrier, vendor, or other party.

This Privacy Policy describes how Vesta Freight processes personal information. It does not modify freight rates, payment obligations, carrier responsibilities, claims procedures, limitations of liability, indemnification obligations, dispute-resolution provisions, or other commercial terms governing Vesta Freight’s services.

If a separate written agreement contains privacy or data-protection terms that conflict with this Privacy Policy, the more specific contractual terms will control to the extent of the conflict.

1.3 Third-Party Websites and Services

Our website may contain links to websites, platforms, social networks, payment services, job boards, carrier systems, or other services operated by third parties. Vesta Freight does not control the privacy, security, or data-handling practices of third parties.

Information you provide directly to a third party is governed by that third party’s privacy policy and terms, not this Privacy Policy. We encourage you to review the applicable policies before submitting personal information to a third-party service.

2. PERSONAL INFORMATION WE COLLECT

The personal information we collect depends on the nature of your relationship with Vesta Freight, the services involved, the information you choose to provide, and how you interact with us.

We may collect the categories of personal information described below.

2.1 Contact and Identification Information

We may collect personal and business contact information, including:

• First and last name;

• Company or organization name;

• Job title or professional role;

• Business or mailing address;

• Email address;

• Telephone or mobile number;

• Preferred method of communication;

• Account or customer identifiers; and

• Signature or electronic acknowledgment.

2.2 Customer, Shipper, Consignor, and Consignee Information

When a customer or shipper requests or uses our services, we may collect information concerning the customer, its representatives, and other parties involved in a shipment, including:

• Customer, shipper, consignor, consignee, and bill-to-party names;

• Names and contact details of shipping, receiving, warehouse, facility, purchasing, accounts-payable, and logistics personnel;

• Pickup and delivery addresses;

• Facility hours, appointment details, and site-access instructions;

• Customer account information;

• Billing contacts and invoicing information;

• Purchase-order, shipment, load, reference, and confirmation numbers;

• Information submitted in connection with quotes, contracts, or service requests;

• Communications concerning transportation needs, rates, capacity, scheduling, delays, claims, or other operational matters; and

• Records of services requested, arranged, or completed.

2.3 Shipment and Logistics Information

To provide freight brokerage and logistics services, we may collect information concerning shipments and transportation activities, including:

• Shipment origin and destination;

• Pickup and delivery dates and times;

• Commodity descriptions;

• Package, pallet, piece, quantity, volume, dimension, and weight information;

• Equipment and transportation-mode requirements;

• Temperature, handling, loading, unloading, storage, or other service requirements;

• Bill of lading and shipping-document information;

• Carrier assignment and transportation status;

• Location, route, milestone, arrival, departure, and delivery-status information;

• Proof-of-pickup and proof-of-delivery records;

• Delivery receipts, electronic signatures, photographs, and related documentation;

• Information concerning shipment exceptions, delays, shortages, loss, damage, or claims;

• Customs, import, export, security, insurance, or regulatory documentation when applicable; and

• Communications among Vesta Freight, customers, carriers, drivers, consignees, facilities, and other shipment participants.

Shipment records primarily relate to commercial freight. However, they may contain personal information when they identify individual representatives, drivers, recipients, contacts, or other persons associated with the shipment.

2.4 Carrier and Transportation-Provider Information

When we evaluate, engage, onboard, communicate with, or monitor motor carriers, owner-operators, drivers, dispatchers, or other transportation providers, we may collect:

• Individual and business contact information;

• Legal and trade names;

• Motor carrier and U.S. Department of Transportation identification numbers;

• Operating-authority and registration information;

• Federal Employer Identification Numbers or other tax information;

• W-9 forms and related tax documentation;

• Insurance certificates, policy information, coverage limits, and insurer contacts;

• Safety ratings, inspection information, compliance records, and publicly available regulatory information;

• Equipment types, service areas, lanes, capacity, and operating preferences;

• Dispatcher and driver names and contact information;

• Driver-identification or credential information when necessary for transportation, facility access, security, or regulatory purposes;

• Bank-account, payment, remittance, or factoring-company information when needed to process carrier payments;

• Load confirmations, rate confirmations, invoices, proof-of-delivery records, and other transaction documents;

• Shipment-location and status information;

• Claims, incident, loss, damage, fraud, or compliance information;

• Communications with carrier representatives, dispatchers, drivers, factoring companies, insurers, and government agencies; and

• Information obtained from carrier-monitoring, fraud-prevention, identity-verification, insurance-verification, safety, compliance, or transportation-management providers.

Where permitted, we may obtain carrier-related information from public government databases, industry platforms, insurance providers, references, customers, fraud-prevention providers, or other commercially available sources.

2.5 Quote, Contact, and Inquiry Information

When you submit a quote request, contact form, or other inquiry, we may collect:

• Your name;

• Company name;

• Email address;

• Telephone number;

• Origin and destination ZIP codes;

• Commodity information;

• Shipping needs and service requirements;

• How you learned about Vesta Freight;

• Questions, comments, or other information entered into the form; and

• Information contained in subsequent communications.

Please do not submit sensitive or confidential information through a general website form unless we specifically request it and provide an appropriate method for submission.

2.6 Newsletter and Marketing Information

When you subscribe to a newsletter or request marketing communications, we may collect:

• Name;

• Email address;

• Company or professional affiliation;

• Communication preferences;

• Subscription, consent, and opt-out records;

• Information about whether marketing messages were delivered, opened, or interacted with; and

• Information about your interests in our services.

You may unsubscribe from marketing emails by following the instructions included in the message. Even after opting out of marketing communications, you may continue to receive non-promotional messages relating to active services, shipments, transactions, applications, or our ongoing business relationship.

2.7 Job Applicant and Recruiting Information

When you inquire about employment or apply for a position with Vesta Freight, we may collect:

• Name and contact information;

• Address or general location;

• Résumé, curriculum vitae, or employment application;

• Employment history;

• Education history;

• Professional qualifications;

• Skills, licenses, certifications, and training;

• References and referral information;

• Compensation expectations;

• Work authorization and eligibility information;

• Availability and job preferences;

• Interview notes and communications;

• Information you make available through professional-networking or recruiting platforms;

• Information voluntarily included in application materials; and

• Other information reasonably necessary to evaluate your candidacy.

Where permitted by law and appropriate for the position, we may collect additional information later in the hiring process, such as information needed for identity verification, background screening, reference checks, drug screening, benefits administration, payroll setup, or compliance with employment laws.

Any background check or similar screening will be conducted in accordance with applicable law and, where required, with appropriate notice and authorization.

Applicants should avoid including highly sensitive personal information in résumés or general application materials unless specifically requested.

2.8 Vendor and Business-Partner Information

We may collect information about individuals who work for or represent vendors, consultants, contractors, insurers, professional advisors, technology providers, business partners, referral sources, and other organizations, including:

• Contact information;

• Job title and employer;

• Contract and service information;

• Billing, invoicing, tax, and payment information;

• Insurance or credential information;

• Communications and meeting records;

• Performance and relationship-management information; and

• Information necessary to conduct due diligence, prevent fraud, or comply with legal obligations.

2.9 Communications and Customer-Service Information

When you communicate with us, we may collect:

• Email correspondence;

• Telephone-call information;

• Voicemail messages;

• Website-form submissions;

• Meeting notes;

• Customer-service records;

• Questions, requests, complaints, and feedback;

• Shipment instructions and status updates;

• Documents and attachments you provide; and

• Information necessary to investigate or respond to an inquiry, dispute, claim, or security concern.

Vesta Freight uses Microsoft 365 and related business tools to support email, document storage, collaboration, scheduling, and other communications.

We do not presently represent that we offer a consumer SMS marketing program. If our communication practices materially change, we may update this Privacy Policy and provide any notices or obtain any consents required by applicable law.

2.10 Website, Device, and Internet-Activity Information

When you visit or interact with our website, we and our service providers may automatically collect information such as:

• Internet Protocol address;

• Browser type and version;

• Device type;

• Operating system;

• Device identifiers;

• Language and regional settings;

• Internet service provider;

• Referring and exit pages;

• Pages viewed;

• Links, buttons, or features selected;

• Dates, times, and duration of visits;

• Navigation path and interactions;

• Approximate location inferred from an IP address;

• Advertising or cookie identifiers;

• Information concerning website performance, errors, and responsiveness; and

• Other technical and usage information.

Some of this information may be collected using cookies, pixels, tags, scripts, session-replay or interaction-analytics tools, local storage, and similar technologies.

2.11 Cookie, Analytics, and Advertising Information

Vesta Freight may use analytics, advertising, and website-management technologies, including:

• Google Analytics;

• Google Tag Manager;

• Meta Pixel;

• Microsoft Clarity;

• LinkedIn Insight Tag; and

• Related cookies, tags, pixels, scripts, and similar technologies.

These technologies may collect or derive information about website use, device characteristics, approximate location, browser activity, advertising interactions, referrals, and engagement with our website or marketing.

Certain third-party advertising technologies may associate information collected from our website with information obtained from other websites, applications, devices, or services, subject to the third party’s own privacy practices and your available choices.

Additional information about these technologies, their purposes, and available controls will be provided in the Cookies and Tracking Technologies section of this Privacy Policy and, where applicable, through a cookie notice or preference-management tool.

2.12 Social Media and Publicly Available Information

If you interact with Vesta Freight through LinkedIn or another social-media platform, we may receive:

• Your public profile information;

• Your name, username, or account identifier;

• Employer, job title, or professional information;

• Messages, comments, reactions, or other interactions; and

• Information the platform permits us to access based on your settings.

We may also collect business contact, carrier, safety, registration, professional, or other information from publicly available government records, professional directories, company websites, industry platforms, and similar lawful sources.

2.13 Financial and Transaction Information

We may collect financial or transaction-related information necessary to administer business relationships, invoice customers, pay carriers or vendors, address claims, and maintain accounting records. This may include:

• Billing addresses and contacts;

• Invoice and payment status;

• Transaction history;

• Bank-account or remittance information;

• Factoring-company information;

• Tax documentation; and

• Records of amounts charged, paid, disputed, or outstanding.

Unless otherwise stated at the point of collection, Vesta Freight does not intend to collect or store full consumer payment-card numbers through general website forms.

If a payment option available through or linked from our website is operated by an independent payment processor, information submitted directly to that processor will be handled under the processor’s own privacy policy and security practices. Vesta Freight may receive limited transaction information, such as the payer’s name, amount, date, payment status, and transaction reference, without receiving the complete payment-card number.

2.14 Sensitive Personal Information

Depending on the circumstances, certain information collected in connection with carrier onboarding, payments, legal compliance, fraud prevention, or employment may be considered sensitive personal information under applicable law.

This information may include:

• Taxpayer-identification information;

• Bank-account or payment information;

• Government-issued identification information;

• Precise location information associated with shipment tracking or transportation activities;

• Employment screening information;

• Account credentials; or

• Other information classified as sensitive under applicable law.

We collect and use sensitive personal information only where reasonably necessary for legitimate business, employment, operational, security, legal, or compliance purposes. We do not use sensitive personal information to infer characteristics about individuals for unrelated purposes.

2.15 Information About Other People

You may provide information about other people in connection with a shipment, service request, business relationship, referral, or job application. For example, you may provide information concerning:

• Shipping or receiving contacts;

• Consignees or consignors;

• Employees or coworkers;

• Carrier representatives, dispatchers, or drivers;

• References;

• Emergency or facility contacts; or

• Other shipment participants.

You are responsible for ensuring that you have the authority to provide this information and, when required, that you have given the individual appropriate notice or obtained any required consent.

2.16 Information We Do Not Intentionally Collect

Our website and services are intended for commercial and employment-related purposes. We do not intentionally request or collect through general website forms:

• Medical or health information;

• Biometric identifiers;

• Genetic information;

• Information concerning sexual orientation or sex life;

• Religious or philosophical beliefs;

• Political opinions;

• Union-membership information; or

• Full payment-card numbers.

Please do not provide such information unless we specifically request it for a lawful purpose and provide an appropriate collection method.

3. SOURCES OF PERSONAL INFORMATION

We may collect personal information from the following sources.

3.1 Directly From You

We collect information directly from you when you:

• Request a freight quote;

• Submit a contact form;

• Call, email, or otherwise communicate with us;

• Subscribe to a newsletter or marketing communication;

• Engage us to arrange transportation or logistics services;

• Provide shipping instructions or documents;

• Submit invoices, payment information, or transaction records;

• Apply for employment;

• Participate in an interview;

• Attend an event or meeting;

• Complete carrier, vendor, or customer onboarding;

• Respond to a survey; or

• Otherwise voluntarily provide information.

3.2 From Your Employer or Organization

We may receive information from the company, motor carrier, customer, shipper, consignee, vendor, or other organization that you represent. This may include your contact information, role, shipment responsibilities, account permissions, communications, or information needed to manage the business relationship.

3.3 From Customers, Shippers, Carriers, and Other Shipment Participants

The parties involved in arranging or completing transportation may provide information about other participants, such as shipping and receiving contacts, drivers, dispatchers, facility personnel, billing contacts, consignees, consignors, and claims representatives.

3.4 From Service Providers and Business Partners

We may receive information from service providers and business partners that support:

• Transportation management;

• Carrier sourcing and qualification;

• Shipment tracking and visibility;

• Safety and compliance monitoring;

• Identity verification;

• Fraud detection;

• Insurance verification;

• Factoring and payment administration;

• Customer relationship management;

• Recruiting and background screening;

• Website hosting;

• Analytics and advertising;

• Email and business communications; and

• Information technology and cybersecurity.

3.5 From Public and Government Sources

We may obtain information from public records and government or regulatory databases, including information maintained by transportation, licensing, safety, insurance, corporate-registration, court, and law-enforcement authorities.

For carrier qualification and monitoring, these sources may include publicly available registration, operating-authority, insurance, inspection, safety, and enforcement information.

3.6 Automatically Through Technology

We and our service providers may collect website and device information automatically through cookies, pixels, tags, scripts, log files, analytics tools, and similar technologies when you visit or interact with our website or electronic communications.

3.7 From Social Networks and Professional Platforms

We may receive information from social-media, recruiting, professional-networking, advertising, or industry platforms when you interact with us through those services or when the platform lawfully makes the information available.

3.8 From References and Other Third Parties

In connection with carrier qualification, vendor due diligence, fraud prevention, claims, disputes, recruiting, or employment, we may receive information from references, former employers, customers, insurers, factoring companies, professional advisors, investigators, background-screening providers, or other third parties as permitted by law.

4. HOW WE COLLECT PERSONAL INFORMATION

We collect personal information through several methods, including the following.

4.1 Website Forms

We collect information when you complete and submit forms on our website, including forms used to:

• Request a quote;

• Contact Vesta Freight;

• Describe shipping needs;

• Apply for a position;

• Subscribe to a newsletter; or

• Submit another inquiry.

Fields marked as required must generally be completed so we can process and respond to the submission. Providing optional information may allow us to respond more effectively but is not required.

4.2 Freight Brokerage and Logistics Operations

We collect information during the ordinary course of arranging and managing transportation services. This may occur when we:

• Receive a quote or capacity request;

• Evaluate shipment requirements;

• Select or engage a carrier;

• Issue a rate or load confirmation;

• Coordinate pickup or delivery;

• Monitor shipment status;

• communicate with shipment participants;

• Receive bills of lading, delivery receipts, photographs, or signatures;

• Investigate a delay, exception, loss, damage, or claim;

• Issue or process an invoice;

• Make a carrier or vendor payment; or

• Maintain records relating to completed services.

4.3 Carrier and Vendor Onboarding

We collect information through onboarding forms, contracts, email communications, industry platforms, insurance records, government databases, compliance providers, and other verification methods used to evaluate and maintain relationships with carriers and vendors.

4.4 Recruiting and Employment Processes

We collect information through our careers webpage, résumés, applications, interviews, professional-networking platforms, employee referrals, recruiters, references, screening providers, and communications with candidates.

4.5 Communications

We collect information when you communicate with us by email, telephone, voicemail, postal mail, website form, video conference, social media, or another business-communication channel.

4.6 Cookies and Similar Technologies

We automatically collect certain website and device information through cookies and similar technologies. Some technologies are necessary for the website to function, while others support analytics, performance, advertising, or measurement.

Where required by applicable law, we will seek consent before using nonessential cookies or provide a method for managing cookie preferences.

4.7 In-Person and Industry Interactions

We may collect business contact information at trade shows, conferences, networking events, customer meetings, carrier meetings, recruiting events, or other in-person interactions.

4.8 Combining Information

We may combine information collected from different sources. For example, we may combine information submitted through a quote form with subsequent communications, shipment records, customer-account information, publicly available business information, and website analytics.

When we combine information, we treat the combined information as personal information to the extent required by applicable law.

5. HOW WE USE PERSONAL INFORMATION

Vesta Freight may use personal information for the purposes described below. The particular uses depend on the nature of our relationship with you and the context in which the information was collected.

5.1 Providing Freight Brokerage and Logistics Services

We may use personal information to:

• Respond to freight inquiries and quote requests;

• Evaluate transportation requirements;

• Identify and engage qualified motor carriers;

• Arrange transportation of shipments;

• Match shipments with available carrier capacity;

• Prepare rate confirmations, load confirmations, and other transportation documents;

• Coordinate pickup and delivery appointments;

• Communicate shipping instructions;

• Monitor shipment location, progress, and delivery status;

• Provide shipment updates;

• Address delays, exceptions, shortages, damage, or other service issues;

• Collect and maintain bills of lading, delivery receipts, photographs, signatures, and related records;

• Facilitate communication among customers, shippers, consignees, carriers, dispatchers, drivers, warehouses, and other shipment participants;

• Manage freight claims, disputes, and service concerns;

• Invoice customers and administer payments to carriers and vendors;

• Maintain records of transportation services; and

• Perform other activities reasonably necessary to provide requested services.

5.2 Responding to Inquiries and Managing Relationships

We may use personal information to:

• Respond to questions, requests, comments, or complaints;

• Communicate with customers, carriers, vendors, applicants, and other business contacts;

• Provide customer service and operational support;

• Establish, administer, and maintain business relationships;

• Verify contact and account information;

• Schedule calls, meetings, interviews, pickups, and deliveries;

• Maintain records of communications;

• Provide requested information about Vesta Freight and its services;

• Follow up regarding quotes or service inquiries; and

• Personalize communications based on the nature of the relationship.

5.3 Carrier Qualification, Onboarding, and Management

We may use carrier and transportation-provider information to:

• Confirm operating authority and registration;

• Verify motor carrier and U.S. Department of Transportation numbers;

• Review insurance coverage and certificates;

• Assess safety, inspection, compliance, and performance information;

• Evaluate equipment, capacity, lanes, and service areas;

• Conduct identity and business verification;

• Detect fictitious pickups, double brokering, cargo theft, identity theft, fraud, and other risks;

• Perform due diligence and monitor carrier eligibility;

• Prepare and administer carrier agreements and load confirmations;

• Communicate with dispatchers, drivers, owners, insurers, and factoring companies;

• Track shipment performance;

• Process carrier invoices and payments;

• Administer claims and investigations;

• Maintain carrier-performance and relationship records; and

• Comply with contractual, legal, insurance, safety, and regulatory requirements.

Carrier qualification and monitoring may be performed when a carrier is first considered, during onboarding, while a shipment is in transit, after services have been completed, and periodically throughout the business relationship.

5.4 Billing, Payments, Accounting, and Business Administration

We may use personal information to:

• Prepare and deliver invoices;

• Process or record customer payments;

• Process carrier and vendor payments;

• Verify remittance and factoring instructions;

• Maintain accounts-receivable and accounts-payable records;

• Resolve disputed charges or payment issues;

• Conduct credit, collection, or financial-risk activities as permitted by law;

• Maintain tax and accounting documentation;

• Complete audits and financial reporting;

• Administer contracts and business records; and

• Protect against payment fraud or unauthorized changes to payment instructions.

When payment processing is performed through an independent third-party provider, that provider may collect financial information directly. Vesta Freight may receive limited information confirming the transaction without receiving or retaining the complete payment-card number.

5.5 Recruiting and Employment

We may use job-applicant and recruiting information to:

• Receive and process applications;

• Communicate with applicants;

• Evaluate qualifications, experience, skills, and suitability for available positions;

• Schedule and conduct interviews;

• Verify employment history, education, credentials, references, and work authorization;

• Conduct lawful background checks or other screening;

• Consider applicants for current or future opportunities;

• Make recruiting and hiring decisions;

• Prepare an employment offer;

• Complete onboarding if an applicant is hired;

• Maintain recruiting records;

• Evaluate and improve recruiting processes;

• Comply with employment, recordkeeping, equal-opportunity, and other legal obligations; and

• Establish, exercise, or defend legal claims.

Application information may be retained for consideration in connection with future employment opportunities unless the applicant requests otherwise, subject to applicable law and Vesta Freight’s retention practices.

5.6 Marketing and Business Development

Subject to applicable law, we may use personal information to:

• Provide newsletters, industry updates, company news, and marketing communications;

• Inform existing or prospective customers about freight brokerage and logistics services;

• Follow up on service inquiries;

• Promote Vesta Freight’s business;

• Measure the effectiveness of marketing campaigns;

• Develop customer and prospective-customer relationships;

• Conduct market research;

• Understand interest in our services;

• Customize marketing based on business interests and website activity;

• Manage marketing preferences; and

• Maintain records of consent, subscription, and opt-out requests.

You may unsubscribe from marketing emails by using the unsubscribe link included in the communication or by contacting us at info@vestafreight.com.

Opting out of marketing communications does not prevent Vesta Freight from sending transactional, operational, employment-related, legal, security, or other non-promotional communications.

Vesta Freight does not presently offer a consumer SMS marketing program. We will not use a telephone number submitted through a general website form for automated marketing text messages unless we separately provide any notice and obtain any consent required by applicable law.

5.7 Website Operation and Improvement

We may use website, device, cookie, and interaction information to:

• Operate and maintain the website;

• Deliver requested website content and functionality;

• Remember settings and preferences;

• Understand how visitors navigate and interact with the website;

• Measure website traffic and audience engagement;

• Identify popular pages, content, and services;

• Diagnose errors and technical problems;

• Improve website layout, functionality, usability, and performance;

• Test website changes;

• Detect automated traffic, spam, abuse, and suspicious activity;

• Protect the website and connected systems;

• Generate aggregate statistics; and

• Support analytics, attribution, advertising, and marketing activities.

5.8 Analytics and Advertising

We may use information collected through cookies, pixels, tags, scripts, and similar technologies to:

• Measure website use;

• Analyze visitor behavior and navigation;

• Understand how visitors arrive at the website;

• Evaluate engagement with webpages, forms, and marketing campaigns;

• Create reports concerning website traffic and performance;

• Attribute inquiries or conversions to particular advertisements or campaigns;

• Develop audiences for advertising;

• Measure the effectiveness of advertisements;

• Display or support advertisements on third-party services;

• Limit repeated advertising; and

• Improve our website, content, and marketing.

Depending on the technology, settings, and applicable law, these activities may be considered targeted advertising, cross-context behavioral advertising, sharing, or a sale of personal information.

Vesta Freight does not sell personal information in exchange for money. However, some privacy laws define “sale” or “sharing” broadly enough to include disclosures of website identifiers and activity to advertising or analytics providers for targeted advertising. Where required, Vesta Freight will provide an appropriate method to opt out of these activities.

5.9 Security, Fraud Prevention, and Risk Management

We may use personal information to:

• Authenticate identities;

• Verify companies, carriers, vendors, applicants, and business contacts;

• Protect shipments and cargo;

• Prevent cargo theft, fictitious pickups, double brokering, unauthorized rebrokering, identity theft, and payment fraud;

• Detect suspicious or unlawful activity;

• Confirm changes to bank, payment, dispatch, or contact information;

• Investigate security incidents;

• Protect our personnel, customers, carriers, property, information, systems, and business;

• Enforce contracts and policies;

• Manage insurance and claims;

• Maintain business continuity;

• Respond to emergencies; and

• Establish, exercise, or defend legal rights.

5.10 Legal and Regulatory Compliance

We may use personal information to:

• Comply with federal, state, provincial, local, or other applicable laws and regulations;

• Respond to lawful subpoenas, court orders, warrants, government requests, and regulatory inquiries;

• Maintain transportation, tax, employment, accounting, and business records;

• Comply with transportation-safety, operating-authority, insurance, and licensing requirements;

• Address claims, disputes, litigation, audits, and investigations;

• Cooperate with law enforcement, regulators, courts, insurers, and professional advisors;

• Protect legal rights and remedies;

• Enforce agreements and policies; and

• Prevent, investigate, or report suspected unlawful activity.

5.11 Corporate Transactions

We may use personal information to evaluate, negotiate, complete, or administer:

• A merger;

• Acquisition;

• Financing;

• Reorganization;

• Sale of assets;

• Joint venture;

• Investment;

• Bankruptcy;

• Change of control; or

• Similar business transaction.

Information may be reviewed or transferred as part of a proposed or completed transaction, subject to appropriate confidentiality and legal requirements.

5.12 Aggregate and Deidentified Information

We may aggregate or deidentify information so that it cannot reasonably be linked to an identifiable individual. We may use this information for:

• Business analysis;

• Service improvement;

• Performance measurement;

• Market research;

• Operational planning;

• Security and fraud analysis;

• Industry analysis; and

• Other lawful purposes.

Where required by applicable law, Vesta Freight will maintain deidentified information in deidentified form and will not attempt to reidentify it except to verify that deidentification processes are effective or as otherwise permitted by law.

5.13 Other Disclosed or Compatible Purposes

We may use personal information for another purpose disclosed at the time of collection, with your consent, at your direction, or when the purpose is reasonably compatible with the context in which the information was collected.

6. COOKIES AND TRACKING TECHNOLOGIES

Vesta Freight and its service providers may use cookies, pixels, tags, scripts, local storage, log files, session-replay technologies, and similar tools on our website.

These technologies may collect information automatically and may recognize a browser or device over time and across different websites or services.

6.1 What Cookies Are

Cookies are small text files stored on a browser or device when a website is visited. Cookies may be:

• Session cookies, which expire when the browser is closed; or

• Persistent cookies, which remain on the device until they expire or are deleted.

Cookies may also be:

• First-party cookies, set by Vesta Freight or on our behalf; or

• Third-party cookies, set by another organization that provides analytics, advertising, social-media, or other services.

Other technologies, such as pixels and tags, may perform functions similar to cookies by recording website visits, interactions, conversions, or device information.

6.2 Categories of Cookies and Technologies We May Use

Strictly Necessary Technologies

These technologies support functions necessary for the website to operate, such as:

• Website security;

• Network management;

• Form submission;

• Load balancing;

• Fraud prevention;

• Preference management; and

• Other essential functionality.

Disabling these technologies may prevent portions of the website from working properly.

Functional Technologies

These technologies allow the website to remember choices and provide enhanced functionality, such as:

• Language or region preferences;

• Form settings;

• Display preferences;

• Embedded content; and

• Other customized features.

Analytics and Performance Technologies

These technologies help us understand website use and performance, including:

• Number of visitors;

• Pages viewed;

• Time spent on pages;

• Referring websites;

• Navigation paths;

• Device and browser characteristics;

• Website errors;

• Form and content engagement; and

• General interaction patterns.

Advertising and Targeting Technologies

These technologies may be used to:

• Measure advertising performance;

• Attribute visits or inquiries to marketing campaigns;

• Create or develop advertising audiences;

• Deliver more relevant advertising;

• Limit repeated advertisements; and

• Understand interactions with advertisements on third-party platforms.

These technologies may permit advertising providers to recognize a browser or device across different websites, applications, or services.

6.3 Google Analytics

We use Google Analytics to help measure and analyze website traffic and visitor activity.

Google Analytics may collect information such as:

• IP address;

• Device and browser information;

• Approximate geographic location;

• Referring and exit pages;

• Pages viewed;

• Session duration;

• Website interactions;

• Advertising identifiers, when enabled; and

• Other usage and technical information.

Google may process this information to provide analytics services to Vesta Freight and for other purposes described in Google’s applicable policies and terms.

Available choices may include browser settings, a cookie-preference tool provided on our website, and Google’s browser-based analytics opt-out tools.

You can read more on how Google Analytics collects and processes data here: How Google Uses Data When You Use Our Partners’ Sites or Apps.

6.4 Google Tag Manager

We use Google Tag Manager to manage and deploy website tags and related technologies.

Google Tag Manager helps control when other analytics, measurement, or advertising technologies are activated. Although Google Tag Manager primarily manages tags, the technologies deployed through it may collect personal information as described in this Privacy Policy.

Disabling or opting out of a particular tag depends on the underlying technology controlled by Google Tag Manager.

6.5 Meta Pixel

We use Meta Pixel to help measure advertising performance and understand actions taken after a person views or interacts with an advertisement on Meta services.

Meta Pixel may collect or receive information including:

• Website visits;

• Page views;

• Browser and device information;

• IP address;

• Cookie or advertising identifiers;

• Referring information;

• Interactions with website content or forms; and

• Information concerning advertising conversions.

Meta may use this information according to its own privacy policy, including to provide measurement, audience, personalization, and advertising services.

Visitors may be able to manage certain uses through our cookie-preference tool, browser controls, applicable privacy-request mechanisms, and settings made available by Meta.

6.6 Microsoft Clarity

We use Microsoft Clarity to understand how visitors use and interact with our website.

Microsoft Clarity may provide:

• Heatmaps;

• Session-replay or session-recording functionality;

• Navigation and click information;

• Scroll activity;

• Device and browser information;

• Approximate location;

• Website performance information; and

• Other interaction and diagnostic information.

Clarity is intended to help us evaluate website usability, identify technical issues, understand engagement, and improve our website and marketing.

Depending on the configuration, Clarity may use cookies or other identifiers to recognize a browser or device. We do not intend to use Clarity to collect the contents of sensitive form fields, passwords, full payment-card numbers, or other information that should not be included in analytics tools.

For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

6.7 LinkedIn Insight Tag

We use LinkedIn Insight Tag to help measure advertising campaigns, understand website visits associated with LinkedIn, and develop advertising audiences.

The LinkedIn Insight Tag may collect information such as:

• Website URL;

• Referring URL;

• IP address;

• Device and browser information;

• Timestamp;

• Page views;

• LinkedIn cookie identifiers; and

• Advertising-conversion information.

LinkedIn may use the information in accordance with its own privacy policy and account settings.

6.8 Additional Technologies

We may add, remove, or replace analytics, advertising, website-management, fraud-prevention, form, hosting, recruiting, social-media, or similar technologies as our operations change.

When required, we will update this Privacy Policy, our cookie notice, or our preference-management tools to reflect material changes.

6.9 Cookie Choices

Depending on where you reside and the technology used, you may manage cookies and similar technologies through one or more of the following methods:

• A cookie banner or preference-management tool available on our website;

• Browser settings that block or delete cookies;

• Device privacy settings;

• Settings or opt-out tools provided by the applicable analytics or advertising provider;

• Advertising-industry opt-out tools; or

• A privacy request submitted to Vesta Freight.

Blocking cookies may affect website functionality. Browser controls may not affect technologies that do not rely on browser cookies, and preferences may need to be set separately for each browser and device.

6.10 Global Privacy Control and Other Preference Signals

Certain browsers and extensions allow users to transmit privacy-preference signals, including Global Privacy Control.

Where required by applicable law and technically feasible, Vesta Freight will process a recognized opt-out preference signal as a request to opt out of sale, sharing, or targeted advertising for the browser or device transmitting the signal.

A preference signal may not identify you by name or apply to other browsers, devices, accounts, or information collected outside the website. We may request additional information when needed to apply a request more broadly.

6.11 Do Not Track

Some browsers transmit a “Do Not Track” signal. Because there is not a universally accepted standard governing how all websites should respond to these signals, our website may not respond to traditional Do Not Track signals.

This does not affect our obligation to honor Global Privacy Control or another legally recognized preference signal where required by applicable law.

6.12 Third-Party Privacy Practices

Third-party analytics, advertising, and social-media providers may collect information directly from a browser or device and process it under their own privacy policies.

Vesta Freight does not control all aspects of these providers’ data practices. We encourage visitors to review the privacy policies and settings offered by Google, Meta, Microsoft, LinkedIn, and other relevant providers.

7. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to the categories of recipients described below for legitimate business, operational, legal, security, employment, and commercial purposes.

7.1 Customers, Shippers, Consignees, and Shipment Participants

We may disclose information to customers, shippers, consignors, consignees, warehouses, facilities, receivers, and other shipment participants as necessary to:

• Arrange transportation;

• Coordinate pickup and delivery;

• Confirm identities and appointments;

• Provide shipment status;

• Address service issues;

• Maintain shipping documentation;

• Process claims; and

• Complete transportation services.

For example, a carrier or driver’s name, telephone number, equipment information, location, estimated arrival time, and delivery status may be provided to a customer or facility when reasonably necessary to manage a shipment.

7.2 Motor Carriers and Transportation Providers

We may disclose information to motor carriers, owner-operators, drivers, dispatchers, rail providers, warehouses, transloading providers, and other transportation-service providers.

Information disclosed may include:

• Customer or shipper contacts;

• Pickup and delivery locations;

• Facility contacts;

• Shipment details;

• Commodity, weight, and handling requirements;

• Appointment information;

• Shipping instructions;

• Reference numbers;

• Documents needed to complete transportation;

• Claims or incident information; and

• Other information reasonably necessary to arrange and perform services.

7.3 Service Providers

We may disclose information to companies that provide services to Vesta Freight, including providers of:

• Website hosting;

• Cloud storage;

• Microsoft 365 and business communications;

• Information technology;

• Cybersecurity;

• Customer relationship management;

• Transportation management;

• Carrier sourcing and monitoring;

• Load tracking and visibility;

• Identity and business verification;

• Fraud prevention;

• Insurance verification;

• Payment and factoring administration;

• Accounting and invoicing;

• Data analytics;

• Digital advertising;

• Marketing and email distribution;

• Recruiting and applicant tracking;

• Background screening;

• Document management;

• Customer support;

• Auditing; and

• Other business functions.

We authorize service providers to process information for specified business purposes and expect them to protect it in accordance with applicable contracts and laws.

7.4 Analytics, Advertising, and Social-Media Providers

We may disclose or make available website, cookie, device, and interaction information to analytics, advertising, and social-media providers, including Google, Meta, Microsoft, and LinkedIn.

These providers may process information for:

• Analytics;

• Advertising measurement;

• Attribution;

• Audience creation;

• Targeted advertising;

• Website improvement;

• Fraud prevention;

• Service improvement; and

• Other purposes described in their respective privacy policies.

Depending on applicable law, disclosures for targeted advertising may be considered a sale or sharing of personal information even when no money is exchanged.

Vesta Freight does not sell personal information to data brokers for money. Where required, we will provide a method for opting out of legally defined sale, sharing, or targeted advertising.

7.5 Payment, Financial, and Factoring Providers

We may disclose transaction and financial information to:

• Banks;

• Payment processors;

• Accounts-receivable providers;

• Factoring companies;

• Credit providers;

• Collection agencies;

• Auditors;

• Accountants; and

• Other financial-service providers.

Such disclosures may be necessary to process payments, verify payment instructions, administer receivables, prevent fraud, maintain accounting records, and resolve disputes.

7.6 Insurers and Claims Participants

We may disclose information to:

• Cargo insurers;

• Liability insurers;

• Insurance brokers;

• Claims administrators;

• Adjusters;

• Surveyors;

• Investigators;

• Customers;

• Carriers;

• Legal counsel; and

• Other parties involved in a loss, damage, shortage, accident, or claim.

7.7 Professional Advisors

We may disclose information to attorneys, accountants, auditors, consultants, insurance professionals, investigators, and other professional advisors when reasonably necessary to obtain advice, protect our interests, conduct an audit, manage risk, or establish, exercise, or defend legal claims.

7.8 Government Authorities and Legal Recipients

We may disclose information to courts, law-enforcement authorities, regulators, government agencies, licensing bodies, or other legally authorized recipients when we believe disclosure is necessary or appropriate to:

• Comply with law;

• Respond to a subpoena, warrant, court order, or lawful request;

• Cooperate with an investigation;

• Satisfy transportation or safety requirements;

• Report suspected unlawful conduct;

• Protect cargo, individuals, or property;

• Enforce a contract;

• Protect legal rights; or

• Address an emergency involving potential harm.

7.9 Recruiting and Employment Recipients

We may disclose applicant information to:

• Recruiting providers;

• Applicant-tracking providers;

• Background-screening providers;

• References;

• Former employers;

• Credential-verification services;

• Professional advisors;

• Government authorities; and

• Vesta Freight personnel involved in recruiting or hiring.

Such disclosures will be made as reasonably necessary and in accordance with applicable law.

7.10 Business Transfers and Corporate Transactions

We may disclose personal information to prospective or actual buyers, investors, lenders, advisors, affiliates, successors, or transaction participants in connection with:

• A merger;

• Acquisition;

• Financing;

• Investment;

• Reorganization;

• Sale of assets;

• Joint venture;

• Bankruptcy; or

• Other corporate transaction.

Information may be disclosed during due diligence and transferred as part of the completed transaction, subject to applicable confidentiality and legal obligations.

7.11 With Your Direction or Consent

We may disclose information:

• At your direction;

• With your consent;

• To a recipient you designate;

• When necessary to fulfill a request you make; or

• For another purpose disclosed when the information is collected.

7.12 Aggregate or Deidentified Information

We may disclose aggregated or deidentified information that cannot reasonably be linked to an identifiable individual.

For example, we may disclose statistical information about website use, shipment activity, service performance, transportation lanes, or business trends, provided that the information does not identify an individual as required by applicable law.

7.13 No Sale for Monetary Consideration

Vesta Freight does not sell personal information to third parties in exchange for money.

As explained above, disclosures involving advertising cookies and similar technologies may nevertheless be classified as a “sale,” “sharing,” or “targeted advertising” under certain privacy laws. Applicable choices and request procedures will be described in the privacy-rights portion of this Privacy Policy.

8. DATA RETENTION

Vesta Freight retains personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including providing transportation services, maintaining business relationships, complying with legal obligations, resolving disputes, preventing fraud, and enforcing agreements.

The length of time we retain a particular record depends on factors including:

• The nature, sensitivity, and amount of information;

• The purposes for which the information was collected or used;

• The duration of our relationship with the individual or organization;

• The length and nature of a shipment, transaction, contract, application, or service;

• Transportation, tax, accounting, employment, insurance, safety, and regulatory recordkeeping requirements;

• Applicable limitation periods;

• The need to investigate or defend against claims;

• Fraud-prevention, cargo-security, and carrier-monitoring considerations;

• The existence of a legal hold, subpoena, investigation, audit, or dispute;

• Contractual requirements; and

• Whether retention remains reasonably necessary for a legitimate business purpose.

Examples of records we may retain include:

• Customer, carrier, vendor, and business contact records;

• Quote requests and related communications;

• Contracts, rate confirmations, load confirmations, and service records;

• Bills of lading, proofs of delivery, invoices, and payment records;

• Carrier qualification, authority, insurance, safety, and compliance records;

• Shipment-tracking and status information;

• Claims, incident, fraud, dispute, and investigation records;

• Tax, accounting, and audit records;

• Website analytics and security logs;

• Marketing consent and opt-out records; and

• Recruiting and job-application records.

Job-applicant information may be retained after a position is filled so that we can comply with employment-related obligations, document the recruiting process, respond to disputes, or consider the applicant for future opportunities. Applicants may contact us if they do not wish to be considered for future positions, subject to records we must retain by law.

Cookie and analytics information may be retained according to the lifespan of the applicable cookie, the configuration of the relevant service, and the retention settings made available by the technology provider.

When personal information is no longer reasonably necessary, we may delete it, destroy it, anonymize it, or place it beyond practical use in accordance with our record-management practices. Residual copies may remain temporarily in backups, archives, disaster-recovery systems, or records that cannot reasonably be isolated, until those records are overwritten or deleted through ordinary processes.

Nothing in this section requires Vesta Freight to retain personal information for a particular period unless retention is required by applicable law or contract.

9. INFORMATION SECURITY

Vesta Freight uses reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, acquisition, use, disclosure, alteration, loss, or destruction.

Depending on the nature of the information and the systems involved, these measures may include:

• Access controls based on job responsibilities;

• Password and authentication requirements;

• Multifactor authentication where appropriate;

• Encryption or secure transmission methods where appropriate;

• Firewalls, endpoint protection, and system-monitoring tools;

• Secure cloud and business-technology providers;

• Employee confidentiality and security obligations;

• Vendor and service-provider review;

• Fraud-detection and identity-verification procedures;

• Payment-instruction verification;

• Security awareness and employee training;

• Data backup and recovery procedures;

• Incident-response processes; and

• Policies governing the handling and disposal of information.

No method of transmitting information over the internet, and no method of electronic storage, is completely secure. We therefore cannot guarantee that personal information will always remain secure or that unauthorized parties will never defeat our safeguards.

You are responsible for taking reasonable precautions when communicating with Vesta Freight. Do not send passwords, full payment-card numbers, bank credentials, Social Security numbers, or other highly sensitive information through an ordinary email or general website form unless we have specifically requested it and provided an appropriate method for submission.

9.1 Payment and Carrier-Fraud Awareness

Transportation businesses may be targeted by fraudulent payment-change requests, identity theft, fictitious pickups, cargo theft, double brokering, and unauthorized use of carrier or customer identities.

Vesta Freight may independently verify requests involving:

• Changes to bank-account information;

• Changes to remittance or factoring instructions;

• Changes to carrier ownership or contact information;

• Changes to pickup or delivery instructions;

• Requests to reassign or rebroker a load;

• Requests for sensitive documents;

• Unusual or urgent payment instructions; and

• Other activity that appears suspicious.

Individuals and businesses interacting with Vesta Freight should independently verify unusual instructions through a known and trusted contact method.

9.2 Security Incidents

If we become aware of a security incident involving personal information, we may investigate the incident, take reasonable containment and remediation measures, notify affected parties when required, and cooperate with law enforcement, regulators, insurers, service providers, and professional advisors.

Notification will be provided in the manner and within the period required by applicable law.

10. YOUR PRIVACY RIGHTS AND CHOICES

Depending on where you reside, the nature of your relationship with Vesta Freight, and whether an applicable privacy law applies to Vesta Freight or the information involved, you may have some or all of the rights described below.

These rights are not absolute. A request may be denied or limited where an exception applies, where we cannot reasonably verify the request, or where the information is exempt from the applicable law.

10.1 Right to Know or Access

You may have the right to request information about our processing of your personal information, including:

• The categories of personal information we process;

• The specific pieces of personal information we maintain about you;

• The categories of sources from which the information was collected;

• The purposes for collecting, using, or disclosing the information;

• The categories of third parties to which information was disclosed;

• The categories of personal information sold, shared, or used for targeted advertising, if any; and

• A portable copy of certain information.

10.2 Right to Correct

You may have the right to request correction of inaccurate personal information.

When evaluating a correction request, we may consider the nature of the information, the purpose for which it is maintained, and documentation relating to its accuracy.

10.3 Right to Delete

You may have the right to request deletion of personal information we collected from or about you.

We may retain information when permitted or required to do so, including when it is reasonably necessary to:

• Complete a transaction or provide requested services;

• Maintain transportation, accounting, tax, safety, insurance, or employment records;

• Detect, prevent, or investigate fraud or security incidents;

• Exercise or defend legal claims;

• Comply with a legal obligation;

• Honor an opt-out or suppression request;

• Maintain internal uses reasonably aligned with your relationship with us; or

• Exercise another exception under applicable law.

10.4 Right to Data Portability

You may have the right to receive certain personal information in a portable and, where technically feasible, readily usable format.

10.5 Right to Opt Out of Sale, Sharing, or Targeted Advertising

Vesta Freight does not sell personal information to third parties in exchange for money.

As explained in this Privacy Policy, we may use analytics and advertising technologies that disclose website identifiers, device information, and internet activity to providers such as Google, Meta, Microsoft, and LinkedIn.

Depending on applicable law, some of these disclosures may be characterized as:

• A sale of personal information;

• Sharing for cross-context behavioral advertising; or

• Processing for targeted advertising.

Where applicable, you may opt out through:

• The cookie-preference or privacy-choice tool available on our website;

• A recognized browser-based opt-out preference signal;

• The privacy controls offered by the applicable provider; or

• A request submitted using the contact information below.

Your choice may apply only to the browser or device from which it is submitted. You may need to repeat your selection on other browsers or devices or after clearing cookies.

10.6 Right to Opt Out of Profiling

If Vesta Freight engages in profiling that produces legal or similarly significant effects concerning an individual, applicable law may provide a right to opt out.

Vesta Freight does not currently intend to use website analytics or advertising data to make decisions producing legal or similarly significant effects concerning consumers.

Ordinary activities such as carrier qualification, shipment-risk evaluation, fraud prevention, employment screening, and business due diligence may not constitute consumer profiling under certain privacy laws or may be subject to separate legal standards and exceptions.

10.7 Right to Withdraw Consent

Where processing is based on your consent, you may have the right to withdraw that consent.

Withdrawal does not affect processing that occurred before the withdrawal and does not prevent us from processing information under another lawful basis.

10.8 Right to Nondiscrimination

Vesta Freight will not unlawfully discriminate against you because you exercised an applicable privacy right.

For example, we will not unlawfully:

• Deny goods or services;

• Charge different prices or rates;

• Provide a different level or quality of service;

• Retaliate against an employee, applicant, or contractor; or

• Suggest that you will receive different treatment.

This right does not prevent us from offering a lawful program or difference in service that is reasonably related to the value of personal information, or from taking action necessary to respond to a request.

10.9 Right to Appeal

Residents of certain states may have the right to appeal our refusal to act on a privacy request.

Instructions for submitting an appeal will be included in our response when the right applies. An appeal should identify the original request and explain why you believe our decision should be reconsidered.

If an appeal is denied, we may provide information about how to contact the appropriate state attorney general or other regulator, where required by law.

10.10 Marketing Choices

You may unsubscribe from promotional emails by selecting the unsubscribe link in the email or contacting us at info@vestafreight.com.

After an opt-out request is processed, we may retain your email address on a suppression list so that we can honor the request. You may continue to receive communications concerning:

• Active or past shipments;

• Quotes or service requests;

• Contracts or accounts;

• Payments or invoices;

• Job applications;

• Security or legal matters; and

• Other non-promotional business interactions.

10.11 Cookie and Device Choices

You may be able to control cookies and related technologies through:

• Our website’s cookie-preference tool;

• Browser settings;

• Device settings;

• Provider-specific privacy controls;

• Advertising-industry opt-out mechanisms; and

• Recognized opt-out preference signals.

Disabling cookies may affect the functionality or availability of certain website features.

11. HOW TO SUBMIT A PRIVACY REQUEST

To submit a request concerning your personal information, contact:

Email: info@vestafreight.com

Mail:
MAP3 LLC d/b/a Vesta Freight
Attn: Privacy Request
801 Steam Plant Rd.
Gallatin, TN 37066

Please use the subject line “Privacy Request” when submitting a request by email.

Your request should clearly state:

• Your full name;

• Your email address or other contact information;

• Your relationship with Vesta Freight;

• The state or country in which you reside;

• The right you wish to exercise;

• The information or interaction to which the request relates; and

• Any additional details reasonably necessary to locate relevant records.

Please do not send a Social Security number, full bank-account number, driver’s-license image, passport, or other highly sensitive document through ordinary email unless we specifically request it and provide a secure method.

11.1 Verification

Before fulfilling a request, we may need to verify your identity and authority to make the request.

Verification measures may depend on:

• The type of request;

• The sensitivity of the information;

• The risk of harm from unauthorized access or deletion;

• The information we already maintain;

• Your relationship with Vesta Freight; and

• Applicable legal requirements.

We may ask you to confirm information already associated with you or provide additional documentation. We will use verification information only to process the request, prevent fraud, and maintain required records.

If we cannot reasonably verify your identity, we may be unable to fulfill the request.

11.2 Authorized Agents

Where permitted by applicable law, you may designate an authorized agent to submit a request on your behalf.

We may require:

• Evidence that you gave the agent signed permission;

• Verification of your identity directly with us;

• Confirmation that you authorized the request; or

• Proof that the agent has lawful authority, such as a valid power of attorney.

We may deny a request from an agent who does not provide sufficient proof of authorization.

11.3 Response Timing

We will respond within the period required by applicable law.

We may extend the response period when reasonably necessary, taking into account the complexity and number of requests. When required, we will notify you of the extension and explain the reason.

11.4 Fees

We generally do not charge a fee for processing a privacy request.

Where permitted by law, we may charge a reasonable fee or decline to act when requests are manifestly unfounded, excessive, technically burdensome, or repetitive.

11.5 Limitations and Exceptions

Privacy rights may not apply to all information or all individuals.

For example, applicable laws may exclude or exempt:

• Information maintained solely in a commercial or employment context;

• Information governed by another federal or state law;

• Publicly available information;

• Deidentified or aggregated information;

• Information processed on behalf of another organization;

• Information necessary to complete a transaction;

• Information required for security, fraud prevention, legal compliance, or claims;

• Records subject to a legal hold or retention requirement; and

• Requests that cannot be reasonably verified.

When we deny or limit a request, we will explain the basis to the extent required by law.

11.6 Requests Relating to Another Organization

In some circumstances, Vesta Freight may process information on behalf of a customer, carrier, employer, technology provider, or other organization that determines how the information is used.

Where another organization is responsible for the processing, we may direct you to submit your request to that organization.

12. ADDITIONAL DISCLOSURES FOR CALIFORNIA RESIDENTS

This section supplements the remainder of this Privacy Policy for California residents. It applies only to the extent Vesta Freight is subject to the California Consumer Privacy Act, as amended, for the information involved.

12.1 Categories of Information Collected

During the preceding 12 months, Vesta Freight may have collected the following categories of personal information:

Statutory category	Examples relevant to Vesta Freight
Identifiers	Name, business address, email address, telephone number, IP address, account identifier, carrier number, government-issued identifier when required
Customer-record information	Contact details, signature, insurance information, payment or bank information, employment information
Protected classifications	Information voluntarily disclosed in recruiting or employment records, where applicable
Commercial information	Quote requests, shipment history, transaction records, service history, invoices, payment status
Internet or electronic-network activity	Browsing activity, website interactions, device data, cookie identifiers, advertising interactions
Geolocation information	Approximate location derived from IP address and shipment or transportation-location information
Sensory information	Photographs, voicemail, delivery images, or recorded communications where used
Professional or employment information	Employer, job title, work history, qualifications, certifications, carrier affiliation
Education information	Education and training information submitted by job applicants
Inferences	Business or service interests, advertising audiences, fraud or risk indicators
Sensitive personal information	Government identifiers, account credentials, bank information, precise location where applicable, and employment-screening information

We may not collect every example listed from every person.

The sources, purposes, and recipients associated with these categories are described in Sections 3, 5, and 7 of this Privacy Policy.

12.2 Categories Disclosed for Business Purposes

During the preceding 12 months, we may have disclosed the categories listed above to:

• Customers, shippers, consignees, and shipment participants;

• Motor carriers and transportation providers;

• Technology and cloud-service providers;

• Analytics and advertising providers;

• Payment, financial, and factoring providers;

• Insurers and claims participants;

• Recruiting and screening providers;

• Professional advisors;

• Government authorities; and

• Parties to a business transaction.

The category disclosed depends on the recipient’s role and the purpose of the disclosure.

12.3 Sale or Sharing

Vesta Freight does not sell personal information in exchange for money.

Our use of advertising and analytics tools may constitute “sharing” or a “sale” under California law when website identifiers and activity are disclosed for cross-context behavioral advertising.

California residents may opt out using our cookie or privacy-choice tool, a legally recognized opt-out preference signal, or the request procedures described above.

12.4 Sensitive Personal Information

Vesta Freight uses sensitive personal information for purposes such as providing services, processing payments, carrier qualification, fraud prevention, security, employment, and legal compliance.

We do not intend to use or disclose sensitive personal information for the purpose of inferring characteristics in a manner that creates a right to limit under California law. If our practices change, we will provide the required notice and method for exercising that right.

12.5 Minors

Vesta Freight does not knowingly sell or share the personal information of individuals under 16 years of age.

Our website and services are directed to businesses and adults and are not intended for children.

12.6 California “Shine the Light”

California residents may request certain information regarding disclosures of personal information to third parties for those third parties’ direct-marketing purposes.

Vesta Freight does not intend to disclose personal information to third parties for their own direct-marketing purposes in a manner requiring a disclosure under California’s “Shine the Light” law.

Questions may be submitted using the contact information in Section 11.

13. JOB APPLICANTS AND WORKFORCE INFORMATION

The job-applicant provisions of this Privacy Policy apply to information collected through our careers webpage, recruiting platforms, recruiters, referrals, interviews, and related communications.

Applicant information may be used and disclosed for:

• Recruiting and hiring;

• Evaluating qualifications;

• Scheduling and conducting interviews;

• Verifying references and credentials;

• Conducting lawful screenings;

• Communicating about an application;

• Meeting legal and recordkeeping obligations;

• Protecting Vesta Freight’s legal rights; and

• Considering an applicant for future opportunities.

Applicant information may be accessible to employees involved in recruiting, managers responsible for the position, technology providers, recruiters, screening providers, professional advisors, and government authorities where appropriate.

Submission of an application does not create an employment relationship or guarantee consideration, an interview, or employment.

Where an applicable privacy law provides rights to job applicants, applicants may submit requests using the procedures in Section 11.

14. INTERNATIONAL USERS AND CROSS-BORDER PROCESSING

Vesta Freight is based in the United States. Our website and services are operated primarily from the United States, and personal information may be stored or processed in the United States and other countries where Vesta Freight’s service providers or business partners operate.

Privacy and data-protection laws in those countries may differ from the laws of your jurisdiction.

Where an applicable law restricts the transfer of personal information across national borders, Vesta Freight will use a lawful transfer mechanism or other appropriate safeguard when required. Depending on the circumstances, safeguards may include:

• Contractual protections;

• Data-processing terms;

• Transfer agreements;

• Adequacy determinations;

• Consent where legally valid;

• Transfers necessary to perform a contract or requested service; or

• Another mechanism recognized by applicable law.

14.1 Individuals in Canada

Vesta Freight’s services may involve transportation within or involving Canada.

Where Canadian privacy law applies, individuals may have rights to request access to and correction of their personal information and to withdraw consent where processing is based on consent, subject to legal and contractual limitations.

Questions or requests may be submitted using the contact information in Section 11.

14.2 Individuals in the European Economic Area, United Kingdom, or Switzerland

Vesta Freight does not represent that its website or services are specifically directed to consumers in the European Economic Area, United Kingdom, or Switzerland.

If an applicable European privacy law governs a particular processing activity, the lawful basis may include:

• Performance of a contract;

• Steps taken at your request before entering a contract;

• Compliance with a legal obligation;

• Vesta Freight’s legitimate interests in operating, securing, and developing its business;

• Protection of legal rights; or

• Consent, where required.

Subject to applicable law, individuals may have rights to:

• Access personal information;

• Correct inaccurate information;

• Request deletion;

• Restrict processing;

• Object to processing;

• Receive portable information;

• Withdraw consent; and

• Complain to an applicable supervisory authority.

Vesta Freight may request information necessary to verify identity and determine whether the law applies.

15. CHILDREN’S PRIVACY

Vesta Freight’s website and services are intended for commercial users, motor carriers, business representatives, and adult job applicants. They are not directed to children.

We do not knowingly collect personal information online from children under 13. We also do not knowingly sell or share the personal information of individuals under 16.

If you believe a child has submitted personal information to Vesta Freight, contact us at info@vestafreight.com. We will review the request and take appropriate action in accordance with applicable law.

Parents and guardians should not allow children to submit personal information through our quote, contact, newsletter, carrier, or employment forms.

16. THIRD-PARTY LINKS, PLATFORMS, AND SERVICES

Our website may contain links to or integrations with third-party websites, social-media platforms, payment providers, recruiting services, mapping tools, videos, documents, or other services.

When you select a third-party link or interact with embedded third-party content:

• The third party may collect information directly from you;

• The third party may receive website, device, or referral information;

• The third party’s own privacy policy and terms will apply; and

• Vesta Freight may not control the third party’s use of information.

The inclusion of a link does not necessarily mean that Vesta Freight endorses the third party’s privacy or security practices.

You should review the applicable third-party policies before providing personal information or completing a transaction.

17. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to reflect changes in:

• Our business or services;

• Website functionality;

• Data-collection or sharing practices;

• Analytics, advertising, or technology providers;

• Legal or regulatory requirements;

• Industry standards; or

• Security and risk-management practices.

When we update the policy, we will revise the “Last Updated” date at the beginning of the policy.

If a change is material, we may provide additional notice through the website, email, account communication, or another appropriate method.

Unless otherwise stated, an updated policy becomes effective when it is posted. Your continued interaction with Vesta Freight after the effective date is subject to the updated policy, to the extent permitted by law.

We encourage you to review this Privacy Policy periodically.

18. CONTACT US

Questions, concerns, complaints, or requests concerning this Privacy Policy or Vesta Freight’s handling of personal information may be directed to:

MAP3 LLC d/b/a Vesta Freight
Attn: Privacy
801 Steam Plant Rd.
Gallatin, TN 37066

Email: info@vestafreight.com

Please include sufficient information for us to understand and respond to your inquiry. Do not include highly sensitive information in an ordinary email unless requested through a secure process.

19. EFFECTIVE DATE

This Privacy Policy is effective as of the date stated at the beginning of the policy and supersedes any earlier website privacy policy addressing the same subject matter.