Privacy Policy

This Privacy Policy explains how Pine Logistics LLC ("Pine Logistics," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit www.pinelogistics.com (the "Site"), contact us, apply to drive with us, or otherwise interact with our transportation and logistics services (together, the "Services").

We wrote this policy to be read, not skimmed past. If anything here is unclear, email us at info@pinelogistics.com and we will explain it in plain terms.

1. Who we are

Pine Logistics LLC is a limited liability company organized under the laws of the Commonwealth of Massachusetts, United States, providing freight transportation and logistics services.

For the purposes of this policy, Pine Logistics LLC is the party that determines why and how your personal information is processed — the "business" under California law, the "controller" under other U.S. state privacy laws and the EU/UK General Data Protection Regulation ("GDPR").

• Legal entity: Pine Logistics LLC
• Mailing address: 25 Olympia Ave, Woburn, MA 01801, United States
• Email: info@pinelogistics.com

2. Scope of this policy

This policy applies to personal information we process through the Site and in the course of our commercial relationships — visitors, prospective and current customers, carriers, brokers, vendors, and individuals who apply to drive with us.

This policy does not apply to:

• Information practices of third-party websites, platforms, or services we link to, which are governed by their own policies.
• Data we process solely on behalf of a customer as a service provider or processor, which is governed by our contract with that customer.
• Personal information of our employees and contractors, which is covered by a separate internal notice provided at the time of hire.

3. Personal information we collect

The table below lists the categories of personal information we may have collected in the twelve (12) months preceding the last updated date of this policy. Categories are stated using the definitions in the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), because those definitions are the broadest and most widely recognized in the United States.

Providing personal information is voluntary. However, if you do not provide the information we request in a form, we may be unable to respond to your inquiry, provide a quote, or process a driver application.

4. Where the information comes from

• Directly from you — when you complete a contact, quote, or application form, email or call us, or interact with us on social media.
• Automatically from your device — through cookies, pixels, SDKs, server logs, and similar technologies when you use the Site.
• From service providers and partners — analytics and advertising providers, hosting and security providers, and, for driver applicants, background screening providers, previous employers, the FMCSA Drug and Alcohol Clearinghouse, and state motor vehicle agencies, in each case as permitted by law and with any consent required.
• From publicly available sources — business registries, carrier databases, and public professional profiles.

5. How we use personal information

We use personal information for the following business and commercial purposes:

• Providing the Services — responding to inquiries, preparing quotes, arranging and performing transportation, and communicating about active shipments.
• Managing our relationship with you — account administration, billing, recordkeeping, and customer support.
• Recruiting and qualifying drivers — evaluating applications, verifying licensing and safety records, and maintaining driver qualification files required by federal regulation.
• Marketing and advertising — sending emails you have asked to receive, and delivering and measuring advertising on Google, Meta (Facebook), and similar platforms, including remarketing to people who have previously visited the Site.
• Analytics and improvement — understanding how the Site is used so we can improve its content, performance, and usability.
• Security and fraud prevention — protecting the Site and our systems, including through invisible reCAPTCHA to distinguish human visitors from automated traffic, and detecting, investigating, and preventing malicious, deceptive, or illegal activity.
• Legal and regulatory compliance — complying with the Federal Motor Carrier Safety Regulations, tax and insurance obligations, lawful requests from public authorities, and establishing, exercising, or defending legal claims.

We will not use your personal information for a materially different, unrelated, or incompatible purpose without first providing you notice.

6. Cookies, analytics, and advertising

Cookies are small files placed on your device. We also use related technologies such as pixels, tags, and local storage. We group them as follows:

• Strictly necessary — required for the Site to load, function securely, and remember your privacy choices. These cannot be switched off.
• Analytics — Google Analytics, which helps us measure traffic and understand how visitors use the Site. Google may set its own cookies and process the data as described in its privacy policy. You can install Google's opt-out browser add-on at tools.google.com/dlpage/gaoptout.
• Advertising and remarketing — Google Ads and Meta (Facebook) tools that allow us to show relevant advertising to people who have visited the Site and to measure whether that advertising works. These technologies involve disclosing online identifiers and browsing activity to the advertising platform.
• Security — Google invisible reCAPTCHA, which analyzes device and interaction signals to block automated abuse of our forms. Its use is subject to Google's Privacy Policy and Terms of Service.

You can control cookies through our cookie preferences tool on the Site and through your browser settings. Blocking or deleting cookies may affect how parts of the Site function. Industry opt-out tools are also available at optout.aboutads.info (DAA) and optout.networkadvertising.org (NAI).

7. How we disclose personal information

We disclose personal information to the following categories of recipients, for the purposes described in Section 5:

• Service providers and processors — website hosting, email delivery, analytics, security, IT support, accounting, and professional advisors, each bound by contract to process personal information only on our instructions.
• Advertising platforms — Google and Meta (Facebook), in connection with the advertising technologies described in Section 6.
• Transportation and logistics partners — carriers, brokers, shippers, consignees, and warehouse operators, where necessary to perform a requested shipment.
• Background screening and compliance providers — for driver applicants only, and only with the disclosures and authorizations required by the Fair Credit Reporting Act and applicable regulations.
• Public authorities and legal recipients — regulators, law enforcement, courts, and other parties where we believe disclosure is required by law, necessary to comply with legal process, or necessary to protect the rights, property, or safety of Pine Logistics, our customers, or the public.
• Parties to a corporate transaction — in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case personal information may be transferred as a business asset. We will notify affected individuals where required by law.

8. Sale, sharing, and targeted advertising

However, U.S. state privacy laws define "sale," "sharing," and "targeted advertising" broadly. Because we use Google Ads and Meta advertising technologies that disclose online identifiers and browsing activity to those platforms for cross-context behavioral advertising, our use of those technologies may be treated as a "sale" or "share" under the CCPA/CPRA and as "targeted advertising" under the privacy laws of other states.

The categories involved are identifiers, internet or other network activity, approximate geolocation, and inferences, and the recipients are advertising networks and analytics providers.

We do not sell or share the personal information of individuals we know to be under 16 years of age.

How to opt out

You may opt out at any time by any of the following methods:

• Using the "Do Not Sell or Share My Personal Information" link in the footer of every page of the Site.
• Rejecting advertising cookies in our cookie preferences tool.
• Enabling a Global Privacy Control signal in your browser (see Section 14).
• Emailing info@pinelogistics.com with the subject line "Do Not Sell or Share My Personal Information."

Opting out does not stop all advertising — it stops advertising that is targeted based on your activity across different sites.

9. Driver applicants and DOT-regulated records

If you apply to drive with Pine Logistics, we collect and maintain the records required by the Federal Motor Carrier Safety Regulations (49 C.F.R. Parts 382, 383, and 391), which may include your commercial driver's license, driving record, employment history for the preceding three years, medical examiner's certificate, road test results, and drug and alcohol testing records, including queries to the FMCSA Drug and Alcohol Clearinghouse.

We obtain your written authorization before requesting consumer reports or investigative consumer reports, and we provide the disclosures required by the Fair Credit Reporting Act. These records are retained for the periods required by federal regulation, which may exceed the retention periods described in Section 10, and they are disclosed only to authorized personnel, regulators, and prospective employers acting under a valid release.

10. How long we keep information

We keep personal information only as long as necessary for the purposes it was collected for, and then delete or de-identify it. Our general criteria are:

• Website inquiries and quote requests: up to 24 months from the last interaction.
• Marketing email subscriptions: until you unsubscribe, plus a suppression record kept indefinitely so we do not contact you again.
• Customer and transaction records: for the life of the relationship plus the applicable statute of limitations and tax retention period, generally seven (7) years.
• Driver qualification and DOT records: for the periods mandated by 49 C.F.R. Parts 382 and 391, generally three (3) years after termination of employment, and longer for drug and alcohol testing records.
• Analytics and advertising data: according to the retention settings of the relevant platform, typically 14 months or less for event-level data.

11. How we protect information

We maintain a written information security program with administrative, technical, and physical safeguards appropriate to the sensitivity of the information we hold, consistent with Massachusetts regulation 201 CMR 17.00. These include encryption of data in transit using TLS, access controls limiting personal information to personnel with a business need, secured hosting environments, logging and monitoring, and periodic review of our vendors.

We do not describe our controls in greater detail here, because doing so would itself create a security risk. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a security incident affecting your personal information occurs, we will notify you and the relevant authorities as required by applicable breach notification law, including Mass. Gen. Laws ch. 93H.

12. Your U.S. privacy rights

Depending on where you live, you may have some or all of the rights below. As a matter of policy, Pine Logistics extends the core rights of access, correction, deletion, and opt-out to all U.S. residents, regardless of whether a state privacy law applies to you.

• Right to know / access — to confirm whether we process your personal information and to obtain the categories of information collected, the sources, the purposes, the categories of recipients, and the specific pieces of information we hold about you.
• Right to delete — to request deletion of personal information we collected from you, subject to legal exceptions such as regulatory recordkeeping obligations.
• Right to correct — to request correction of inaccurate personal information.
• Right to data portability — to receive a copy of your personal information in a portable and, to the extent technically feasible, readily usable format.
• Right to opt out of sale, sharing, and targeted advertising — as described in Section 8.
• Right to limit the use of sensitive personal information — we already limit our use of sensitive personal information to the purposes permitted under Cal. Civ. Code § 1798.121(a), so no further limitation is required, but you may still submit a request.
• Right to opt out of profiling — we do not use automated decision-making or profiling that produces legal or similarly significant effects concerning you.
• Right to non-discrimination — we will not deny you services, charge you a different price, or provide a different level of quality because you exercised a privacy right.
• Right to appeal — if we decline a request, you may appeal that decision as described in Section 13.

These rights are recognized, with variations, under the California Consumer Privacy Act as amended, the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, the Texas Data Privacy and Security Act, the Oregon Consumer Privacy Act, the Montana Consumer Data Privacy Act, and comparable laws in other states as they take effect.

California "Shine the Light"

California Civil Code § 1798.83 permits California residents to request information about the personal information we disclosed to third parties for their own direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

13. How to exercise your rights

Submit a request by:

• Email: info@pinelogistics.com with the subject line "Privacy Rights Request"; or
• Mail: Privacy Requests, Pine Logistics LLC, 25 Olympia Ave, Woburn, MA 01801, United States.

Verification. To protect your information, we must verify your identity before acting on an access, correction, deletion, or portability request. We will ask you to provide information we can match against our records — typically the email address you used to contact us, plus one or two additional data points. For requests involving sensitive information, we may require a signed declaration under penalty of perjury. We will not use the information you provide for verification for any other purpose.

Authorized agents. You may use an authorized agent to submit a request. We will require written proof of the agent's authority and may separately verify your identity, unless the agent provides a valid power of attorney.

Timing. We will confirm receipt within ten (10) business days and respond substantively within forty-five (45) calendar days. If we need more time, we will tell you why and extend by up to an additional forty-five (45) days. Responses are provided free of charge unless a request is manifestly unfounded or excessive, in which case we will explain any fee before proceeding.

Appeals. If we decline your request, our response will explain why and how to appeal. To appeal, reply to our response or email info@pinelogistics.com with the subject line "Privacy Request Appeal." We will respond to an appeal within forty-five (45) days with a written explanation of our decision. If your appeal is denied, you may contact your state Attorney General.

14. Global Privacy Control and Do Not Track

Global Privacy Control (GPC). We recognize and honor the GPC signal. If your browser or extension transmits a GPC signal, we treat it as a valid request to opt out of the sale and sharing of personal information, and of targeted advertising, for that browser and device. Because the signal is browser-specific, you will need to enable it on each browser and device you use. Learn more at globalprivacycontrol.org.

Do Not Track. Under the California Online Privacy Protection Act ("CalOPPA"), we are required to disclose how we respond to browser "Do Not Track" signals. Because there is no common industry standard for interpreting DNT, our Site does not respond to DNT signals. We do honor GPC, as described above.

15. Children's privacy

Our Services are directed to businesses and adults, not to children. We do not knowingly collect personal information from children under 13 years of age, consistent with the Children's Online Privacy Protection Act ("COPPA"), and we do not sell or share the personal information of anyone under 16.

If you are a parent or legal guardian and believe your child has provided us with personal information, contact us at info@pinelogistics.com. We will delete that information promptly.

16. Notice for individuals in the EEA, UK, and Switzerland

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the following additional information applies.

Legal bases for processing

• Contract — to take steps at your request before entering into a contract and to perform a contract for transportation or logistics services.
• Legitimate interests — to operate and secure the Site, respond to inquiries, prevent fraud and abuse, understand how our Site is used, and promote our services, where those interests are not overridden by your rights.
• Consent — for non-essential cookies, marketing emails, and any processing of special category data. You may withdraw consent at any time without affecting processing carried out before withdrawal.
• Legal obligation — to comply with tax, accounting, transportation safety, and other legal requirements.

Your rights

You have the right to access, rectify, erase, restrict, and port your personal data, to object to processing based on legitimate interests or carried out for direct marketing, and to withdraw consent. Use the contact details in Section 20 to exercise these rights. You also have the right to lodge a complaint with your local supervisory authority or, in the UK, the Information Commissioner's Office.

Facebook page insights

We operate a Facebook page. Where Meta Platforms provides us with aggregated page insights, Meta and Pine Logistics act as joint controllers for that limited processing, as described in Meta's Page Insights Controller Addendum. Meta's own data practices are governed by its privacy policy.

17. International data transfers

Pine Logistics is based in the United States, and our servers and service providers are primarily located in the United States. If you access the Services from outside the United States, your personal information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Where we transfer personal data from the EEA, the UK, or Switzerland to the United States, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful transfer mechanism, together with supplementary technical and organizational measures where appropriate. Contact us to request further information about the safeguards we use.

18. Third-party links and social features

The Site contains links to third-party websites and social media platforms, including Facebook. Following those links takes you to services we do not control. This policy does not apply to them, and we are not responsible for their content or privacy practices. Review the privacy policy of any site or platform before providing it with personal information.

19. Changes to this policy

We may update this policy to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the "Last updated" date at the top of this page. If the changes are material, we will provide additional notice — for example, a prominent notice on the Site or an email to subscribers — before the changes take effect. We review this policy at least once every twelve (12) months, as required by California law.

Continuing to use the Services after an update takes effect means you acknowledge the revised policy.

20. Contact us

For questions about this policy, to exercise a privacy right, or to raise a concern about how we handle personal information:

We respond to all privacy inquiries. If you are unsatisfied with our response, you may contact your state Attorney General or, if you are in the EEA or UK, your local data protection authority.

© 2026 Pine Logistics LLC. All rights reserved.