FedEx Privacy Policy:  Keeping Your Information Safe

Privacy Policy Overview

FedEx (including all its companies and groups) understands how important it is to protect your personal information.  FedEx follows all data privacy laws and company rules to keep your information safe.  These protections help build trust with customers and employees, and make sure FedEx follows local laws.  This Global Privacy Policy is based on common worldwide rules for protecting personal data.

Who This Policy Applies To

This policy applies to all FedEx employees and companies around the world.  No FedEx company can create rules that go against this policy.  However, additional privacy rules for specific countries or regions can be added if approved by FedEx’s Global Chief Compliance and Governance Officer (GCCGO).

Following Local Laws

Each FedEx company is responsible for following this policy.  If a local law conflicts with this policy, the company must tell the GCCGO.  FedEx will then try to find a solution that respects both the local law and this privacy policy.

Personal Data

Personal data is any information that can be used to identify a person, either directly or indirectly. This can include employees, customers, vendors, job applicants or any other person.

Examples of personal data include:

  • Names
  • ID numbers (like social security or driver’s license numbers)
  • Home addresses
  • Phone numbers
  • Email addresses
  • Photos

Processing

Processing means doing anything with personal data, whether by computer or by hand.  This includes collecting, saving, organizing, storing, changing, using, sharing, sending or combining the data.  It also includes deleting, destroying or blocking the data.

Examples:

  • Saving information in a database
  • Looking at information on another computer
  • Moving data from one system to another

Notes:

  • If personal information is changed so that no one can identify the individuals, it is no longer considered Personal Data.
  • Simply moving physical items (like papers or computers) that have Personal Data on them is not considered “Processing” that data.

Data Protection Principles

Overview

FedEx handles personal data carefully and professionally—whether it’s on paper, saved on a computer or stored in any other way. FedEx must follow these rules and show that it follows them properly.

Fair and Legal Use

FedEx must protect people’s rights when collecting or using their personal data. The data must be collected and used in a fair and legal way.

Clear Purpose

Personal data should only be used for the specific reason it was collected. It cannot be used for any other purpose unless the law allows it.  Data should not be stored just in case it’s needed later, unless legally allowed.

 Limited Collection

FedEx only collects the personal data that is truly needed for the specific reason at the time of collection. Nothing extra is collected without a valid reason.

Data Deletion

If personal data is no longer needed, it should be deleted as per the rules, unless there’s a legal reason to keep it longer.

Accuracy

The personal data collected must be correct and updated if necessary.

Data Security

FedEx protects personal data using strong security methods—technical, physical and managerial—to keep it safe from loss, misuse or unauthorized access.

Transparency

When data is collected, people must be told how their information will be used, who is collecting it, and whether anyone else will use it. This information must be approved by FedEx’s Legal Department.

 Individual Rights

According to the law, people can see their personal data, ask to correct or delete it and use any other rights the law gives them.

Data Protection Policy

Security and Access to Personal Data

  • Personal Data is private and must be kept safe.
  • Employees must not access or use Personal Data unless it’s part of their job.
  • It is not allowed to share Personal Data with anyone who is not approved.
  • Managers must inform employees about the importance of protecting Personal Data when they start working at FedEx.  This rule continues even after the employee leaves the job.
  • All Personal Data must be protected from misuse, hacking or illegal sharing—whether it’s stored digitally or on paper.
  • Before using new tools or systems to handle data, a privacy check must be done to make sure the data stays safe.
  • Employees must follow FedEx’s Information Security Standards.  These standards help protect all types of data (Sensitive, Internal or Public).
  • If there is any suspicious activity, cyberattack or data breach, employees must report it immediately using the “incident” website or by calling FedEx Information Security.

Special Situations

Data Sharing with Third Parties or Other Countries

  • Personal Data cannot be sent to another country unless approved by the Legal Department to ensure it stays protected.
  • If a third-party company helps handle the data, a written agreement must be in place.
  • These third parties can only use the data as FedEx instructs.

Sensitive Personal Data

  • Some Personal Data, like a person’s religion, race, politics, health or union membership, is very sensitive.
  • This kind of data can only be used under special rules and laws.
  • If new systems will handle sensitive data, FedEx’s Global Compliance Team must be informed first.

Use of Communication Tools

  • Some Personal Data, like a person’s religion, race, politics, health or union membership, is very sensitive.
  • This kind of data can only be used under special rules and laws.
  • If new systems will handle sensitive data, FedEx’s Global Compliance Team must be informed first.

Employee Responsibilities

All employees must:

  • Read and follow this Policy and related guidelines.
  • Report any policy violations.

Managers must:

  • Make sure their teams understand this Policy.
  • Set up the right protections for Personal Data.
  • Provide training if needed.

Related Policies

Some important related policies include:

  • Code of Business Conduct and Ethics
  • Information Security Standards
  • Use of Computer Resources
  • Pre-employment Screening
  • Recruitment Policy
  • Data Retention and Destruction
  • Anti-Retaliation Policy

FedEx does not allow punishment of anyone who honestly reports a possible policy violation.

Policy Owner

Global Chief Compliance & Governance Officer (GCCGO)

Policy Start Date

Effective from May 1, 2018

How FedEx Helps Keep You Safe

To keep your personal and business information safe, FedEx requires you to use a modern browser with 128-bit encryption when logging into fedex.com.  This means any information you send or receive is protected.  Look for a padlock symbol and “https” in the website address to know it’s secure.  If you don’t see the padlock, your browser may be outdated and needs to be updated.

VeriSign Extended Validation (EV) Certificates

FedEx uses VeriSign EV Certificates to prove that our site is safe and trustworthy.  Some browsers show a special sign when this certificate is verified. Even if your browser does not support it, you can still use fedex.com.

Customer Login Protection

To access FedEx account features, you must use a user ID and password.  These are private, so don’t share them with anyone.

Protecting Your Account Number

FedEx offers Shipping Administration, which helps you control who can use your FedEx account.  You can give access to trusted users and manage how they use your account.  FedEx recommends that all account owners sign up for this feature.

Automatic Logout

If you’re not active for 60 minutes, FedEx will automatically log you out to protect your account.

Email Alerts for Account Use

FedEx may send you an email notification when someone else gets permission to use your account number for shipping.  The email will include their name and part of your account number.

What You Should Do

  • Report Fraud:  If you don’t recognize the person in the email, contact FedEx at 1.877.339.2774 or email them to block that person.
  • Not the Owner?:  If you are no longer the account owner, contact FedEx with your name and phone number.
  • Agree with Access?:  If you know and trust the person mentioned in the email, no action is needed.
  • Stop Emails:  To stop getting these emails, register for Shipping Administration, which gives you full control over your account and its users.  You can learn more by contacting your FedEx sales representative or calling 1.877.339.2774.
  • Recruitment Policy

Note:  FedEx is not responsible for any losses caused by fraud or misuse of the FedEx name or logo.