PRIVACY STATEMENT

1. INTRODUCTION

We are aware of how important it is for you to know how we use your personal data and we thank you for trusting that we will do so carefully, sensibly and in strict adherence to Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable privacy laws. This Privacy Policy describes the way in which GOFO Inc. and its subsidiaries (collectively “GOFO” or “GOFO EXPRESS”) collect and process your personal data that is collected, through the website www.gofo.com, by provide the messaging and parcel service, through the ecommerce platforms of GOFO clients, the GOFO System and the application called GOFO COURIER that refer to this Privacy Policy (jointly “GOFO Services”). By using the GOFO Services, you are consenting to the practices described in this Privacy Policy.

Last updated: August 1, 2025.

When this Privacy Statement mentions “GOFO”, “we”, “us”, it is referring to the company that is decided on the purposes and means of the processing of your Personal Data under this Privacy Statement. Your Personal Data will be collected and controlled by GOFO Express.

Before logging in and using our system, please read our Privacy Policy. By logging in and using this system, you agree to the collection, use, and transfer of your data, including the transfer of data to China.

Contact Information:

GOFO INC

36-47 main St, Flushing, NY 11354

If you have any questions about our use of your personal data during or after reading this Privacy Statement, you can of course always contact us through the email of dpo@gofo.com.

2. DOES THIS PRIVACY STATEMENT APPLY TO YOU?

This Privacy Statement applies to you if you：

“Are a customer of GOFO or use GOFO Services (by visiting website including any pages and mobile apps ，hereafter “Websites”)”;

“Visit www.gofo.com or contact us directly”;

“Receive communications or deliveries facilitated by GOFO”.

Our Websites, products and services are for a general audience and not aimed at children. In principle, we do not collect Personal Data from children under age 13 （14 in the province of Quebec）. If you are under the age of 13 （14 in the province of Quebec） and you want to use our services, please rely on a parent or guardian to assist you.

If a child under the age of 13（14 in the province of Quebec） may have disclosed Personal Data to us, the parent or guardian can contact us at dpo@gofo.com and we will remove Personal Data if required.

3.SOURCES OF PERSONAL INFORMATION

a)Information you provide to us directly:

￮ When you register and/or use our GOFO express Services;

￮ When you submit any form, including, but not limited to, GOFO express application forms, related to any of our GOFO express Services, whether online or offline.

￮ When you enter into any agreement or provide other documentation or information regarding your interactions with us, or when you use the GOFO express Services.

￮ When you interact with us, through phone calls (which may be recorded), letters, video-conference meetings, social media platforms, and emails, including when you interact with our customer service agents;

￮ When you grant us permissions in the application called GOFO Express to share information with our GOFO Express System;

￮ When you carry out transactions through the GOFO Express System;

￮ When you provide us with feedback or complaints;

￮  When you submit your personal data to us for any reason;

b)Information we collect automatically:

￮ When you enter the website www.gofo.com, this includes, without limitation, through cookies that we may set when you interact with our website;

￮  When you grant us permissions in the application called GOFO Express to share information with our GOFO Express System;

c)Information from third parties:

￮ When you contact the GOFO Express transport provider in order to execute the GOFO Express Services.

￮ Information from third parties, including our business partners, service providers, and other third parties we have contracted with in connection with the delivery of the Services.

￮ Information provided to us on the Website or Courier App by individuals we have hired or engaged in connection with the delivery services (“GOFO COURIER”). The Driver App is intended to assist in facilitation of the delivery services, by providing Delivery Drivers with information and services related to the delivery services, and by enabling the exchange of information between Delivery Drivers. which may include driver registration details such as name, email address, phone number, login username and password, contact address, and bank account or payment account information.

￮  Evidence of the delivery and receipt of your package by means of a photograph of you receiving the package and/or of the package with your official identification.

4. WHAT PERSONAL DATA DO WE COLLECT?

GOFO, we collect certain personal data, personal data being understood as all information that identifies or makes a person identifiable or that other information to which the organization has or is likely to have access, such as: name and facial data, of all Users to whom GOFO provides the GOFO Services.

The Personal Information GOFO collects or receives includes:

￮  Identifiers such as names, postal addresses（including postal codes）, email addresses, and telephone numbers

￮  Device information including device time and date settings, hardware and software details, internet and electronic network activity such as browsing and search history

￮  Geolocation data

￮  A consumer’s precise latitude and longitude coordinates

Among the aforementioned data, including but not limited to, we can find: surname, address,  date  of  birth,  gender,  nationality,  telephone   number,  email  address,  information  on   bank  accounts and payments, valid official identification (required for our due diligence, know the User, identity verification or fraud prevention purposes), information sent by or associated with the  devices used to access any of the GOFO Services, information regarding its network, data on  marketing and communications (such as your preferences in receiving marketing communications from us, your communication preferences), usage and transaction data (including details about your searches, orders, requests, advertising and content with which you interact on the GOFO System, location data , shipping/delivery address, aggregate data about the content with which the User interacts, information related to compliance with applicable legislation, and any other information about the User when registering to use the GOFO Services.

You agree not to submit any information to us that is false, inaccurate or misleading, and you agree to inform us of any inaccuracies or changes in such information. We reserve the right, at our sole discretion, to require further documentation to verify the information provided by you. These personal data are provided by you voluntarily when requesting our GOFO Services. As a rule, the Personal Data that you provide directly or indirectly to GOFO when using our services and visiting our Websites are:

￮  Contact  Information.  This  includes  your  name,  address,  email  address  and  telephone number;

￮  Financial  Information.  This  includes  your   bank  account   number,  payment  status  and invoices;

￮  Identification Information. This may include your Social Security Number (SSN), ID number, passport number, driver ’s  license number, identification photographs, records of issuance and expiration dates of such identification documents, and insurance information, which ensures that we can identify you;

￮  Account  Information.  This  includes  login  information,  including  your  user  name,  email address, telephone and other information provided through your account;

￮  Shipper ’s Information. This includes shipper ’s name, address, email address and telephone number;

￮  Recipient ’ s Information. This includes recipient ’ s name, address, email address and telephone number;

￮  User Data and Preferences. This includes, where applicable, shipment volumes, complaints, transaction  history and  related commercial activity, communications, survey information, and    your preferences;

￮  Automatically generated information. This includes IP address, device model, software version, operating system type and version, unique device or user ID,  system and  browser type, date and time stamp,  referring website address,  content and pages you accessed on our websites or mobile applications, date, time and location actions.

In addition to the above categories of Personal Data, depending on your interaction with GOFO, we may collect other types of information which may or may not contain Personal Data. Such information related to shipments and services may include shipment tracking number, shipment routing  information,  location  data,  status  of  a  shipment,  delivery  location,  packaging  type, number  of  pieces,  weight,  prices,  picture  of  the  parcel,  proof  of  delivery  and  customs information.

Automatic Data Collection: We collect certain information automatically when you use our services. This includes:

-          Page Performance Data: Information about the performance of the web pages you visit.

-          Country: Your current country.

-          Error Information: Details of any errors that occur while you use our website.

-          Page Views (PV): The number of times our pages are viewed.

-          Unique Visitors (UV): The number of distinct users visiting our website.

This data helps us improve our website and services, ensuring a better user experience.

Driver Registration Information: When drivers register on our platform, we collect and store the following information in our local backend server database:

-          Full Name

-          Phone Number

-          Email Address

-          Identification Number (Social Security Number, Visa, Resident Permit)

-          login username and password

-          License Plate Number and Photo

-          Driver's License Number and Photo

-          Work Contact Name and Phone Number

-          Referrer's Phone Number

-          bank account or payment account information

-          insurance information

This information is essential for verifying driver identity, ensuring compliance with local regulations, and maintaining service quality.

5. HOW DO WE COLLECT PERSONAL DATA?

GOFO collects Personal Data when it is provided by the shipper or our contractual customer or by a visitor to our website. If you are the shipper or our contractual customer, then we receive your Personal Data directly from you. Examples of situations where GOFO collects Personal Data directly are:

￮ The name, address, and phone number of a person tendering the shipment listed as the shipper.

￮ The name, address, identity information, payment card information, and account number of a person who opens a GOFO shipping account, namely our contractual customer.

If the shipper or our contractual customer provides Personal Data of others, then we receive that Personal Data indirectly. Examples of situations where GOFO collects Personal Data indirectly are:

￮ The name, address, and phone number of the recipient of the shipment.

￮ The name, address, phone number, email address, identify information of the shipper or account holder’s director, employees, workers or representatives.

￮ The actual shipper’s name and address when the shipper places an order with an online market platform such as Amazon, ebay, Wish and when they use GOFO as the final-mile delivery provider.

When GOFO receives Personal Data indirectly, we rely on the provider to ensure：

The information is accurate, complete, and up to date;

The individuals whose data is shared have been informed of such sharing and, where necessary, have provided valid consent in accordance with applicable laws.

We encourage all parties who share personal data with us to do so lawfully, transparently, and in compliance with their obligations under privacy laws such as PIPEDA.

6. FOR WHICH PURPOSES AND ON WHAT GROUNDS DO WE PROCESS YOUR PERSONAL DATA?

Personal Data shall be collected, used, stored or otherwise processed when necessary within the framework of responsible, efficient and effective business management of GOFO. GOFO processes Personal Data based on Canada’s PIPEDA and other applicable privacy laws. The legal ground is often intrinsically linked to the business purpose. This means, for example, that the performance of an agreement can be both a legal ground and a business purpose for GOFO. Therefore, we will first clarify the legal ground on which GOFO processes your Personal Data and, subsequently, the business purpose that we use your Personal Data for:

Legal Grounds: In general, GOFO processes your personal data on one of the following legal grounds:

￮ The processing is necessary to fulfill an agreement between you and GOFO,

￮ The processing is necessary for us to comply with our legal obligations,

￮ The processing is necessary to protect your vital interests or those of another person,

￮ The processing is necessary for GOFO’s legitimate interests, unless those interests are overridden by your interests or fundamental rights and freedoms, or

where appropriate and necessary, we will ask for your consent.

Business Purposes: GOFO collects, uses or processes personal data only where the processing falls within the scope of one (or more) of the legitimate business purposes listed below:

￮ Performing agreements. This includes shipping services, tracking GOFO services, communication with our contractual customer, shipper and other parties regarding services, responding to requests for further information, dispute resolution and preparing agreements (e.g., link the shipment tracking number to your account to enable you to follow your shipment).

￮ Product development, research and improvement of GOFO products and/or services. GOFO processes Personal Data as necessary for the development and improvement of GOFO products and/or services, research and development (e.g., analyze information related to the shipment and services to improve our services).

￮ Relationship management and marketing for commercial activities. In general, GOFO processes Personal Data as necessary for the development and improvement of GOFO products and/or services, account management, customer services and the performance of targeted marketing activities in order to establish a relationship with a customer and/or maintaining as well as extending a relationship with a customer or business partner and for performing analyses with respect to Personal Data for statistical purposes (e.g., send advertising, communications and content more specific to your interests to you).

￮ Business process execution, internal management and management reporting. This includes addressing activities such as managing company assets, conducting internal audits and investigations, finance and accounting, implementing business controls, provision of central processing facilities for efficiency purposes, managing mergers, acquisitions and divestitures and Processing Personal Data for management reporting and analysis.

￮ Security and Protection . The processing of data for processes such as those related to safety, protecting GOFO and its customers, or business partners, and authenticating the status and access rights (e.g. providing secure services for online and offline transactions) of customers or business partners.

￮ Protecting the vital interests of individuals. This includes processing data when necessary to protect your vital interests or those of other individuals (e.g., for urgent safety reasons).

￮ Compliance with legal obligations. This addresses the processing of Personal Data as necessary for compliance with laws and regulations to which GOFO is subject (e.g., checking the names of customers and business partners against blacklists to avoid conflicts of interest, compliance with trade regulations , anti-money laundering and anti-corruption regulations and other policies, procedures and regulations).

7. HOW DO WE USE COOKIES?

GOFO may use cookies and similar technologies on its Websites. These technologies may automatically collect certain information about your device and usage, such as，Browser type and version, Operating system, IP address, Pages viewed, time spent, and Referral sources. Through these cookies, GOFO automatically obtains Personal Data as listed above when you visit our Websites. You can control or withdraw your cookie preferences at any time, to learn more about the cookies and similar technologies, please consult our Cookie Notice.

8. HOW DO WE SHARE YOUR PERSONAL DATA?

We do not sell, rent, or trade your personal data to third parties for monetary or other valuable consideration. We may only share your Personal Information by disclosing it to a third party for a legitimate purpose, such as providing our services, complying with legal obligations, or operating our business. We only make these purpose disclosures under written contracts that describe the purposes, require the recipient to keep the Personal Information confidential, with appropriate safeguards in place, and prohibit using the disclosed information for any purpose except performing the contract. In the preceding twelve (12) months, the Company has disclosed Personal Information for a business purpose to the categories of third parties indicated in the chart below.

9. HOW ARE YOUR PERSONAL DATA SECURED?

We have taken adequate safeguards to ensure the confidentiality and security of your personal data. We have implemented appropriate technical, physical and organizational measures to protect personal data against accidental or unlawful destruction or accidental loss, damage, alteration, unauthorized disclosure or access as well as all other forms of unlawful processing (including, but not limited to, unnecessary collection) or further processing, including protecting your Personal Data against unauthorized access, maintaining the confidentiality, integrity and availability of your Personal data, and training personnel on information security requirements.

The automatically collected data (such as page performance data and Country) is transferred to and stored in our facilities located in Canada. We take appropriate measures to ensure that your data is protected in compliance with applicable privacy laws and regulations.

However, no security measure can guarantee against compromise. You also have an important role in protecting your Personal Data. You should not share your username and password with anyone, and you should not re-use passwords across more than one website. If you have a reason to believe that your Personal Data has been compromised, please contact us.

Your Consent: By using our system, you consent to the collection, use, and storage of your information as described in this Privacy Policy.

10. HOW LONG ARE YOUR PERSONAL DATA RETAINED?

Except as otherwise permitted or required by applicable law or regulation, we will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, as required to satisfy any legal, accounting, or reporting obligations, or as necessary to resolve disputes. To determine the appropriate retention period for personal data, we consider applicable legal requirements, the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes we process your personal data for, and whether we can achieve those purposes through other means. You can request the deletion of your personal data at any time by contacting us according to article 12”Right to erasure”.

Under some circumstances we may anonymize your personal data so that it can no longer be associated with you. We reserve the right to use such anonymous and de-identified data for any legitimate business purpose without further notice to you or your consent.

11. WHERE DO WE STORE OR TRANSFER YOUR PERSONAL DATA?

Generally, the Personal Data with respect to you legally collected by GOFO within the territory of Canada will be stored or transfer in the territory of Canada. The Website is hosted, and the services are performed in Canada and are intended for Canada customers and consumers.

Some of our services, systems, and providers may involve the transfer of your personal data to jurisdictions outside of Canada. When personal data is transferred outside of Canada, we ensure that your data continues to be protected through appropriate safeguards, such as contractual agreements, data processing agreements, or equivalent protections required by applicable law.

By using our services, you acknowledge that your personal data may be processed or stored in other countries. These jurisdictions may have different data protection laws than those in Canada. In such cases, your information may be accessible to foreign courts, law enforcement and national security authorities under their respective legal frameworks.

If you are physically located in one of the 27 European Union Countries, please do not submit any Personal Information to us. If you believe you may have disclosed Personal Information to us, please contact us and we will remove it.

If you are a consumer accessing the Website from Asia, or any other region with laws or regulations governing personal data collection, use and disclosure that differ from PIPEDA and other applicable privacy laws, your continued use of our Website or services, which are governed by PIPEDA and other applicable privacy laws and these terms, indicates your consent to transfer of your information to Canada.

12. WHAT RIGHTS CAN YOU EXERCISE IN RELATION TO YOUR PERSONAL DATA?

Based on the law applicable to the use of your Personal Data, you may have rights that you can exercise in relation to your Personal Data. Note that in some cases we are not required to completely comply with your request, as such rights may be conditional or because we have to balance your rights against our rights and obligations to process your Personal Data and to protect the rights and freedoms of others. A number of the rights you have in relation to your Personal Data, as applicable in Canada are listed below:

Right of access

You may be entitled to a copy of the Personal Data we hold about you and to learn details about how we use it. Your Personal Data will usually be provided to you digitally. We may require you to prove your identity before providing the requested information.

Right to rectification

We take reasonable steps to ensure that the information we hold about you is accurate and complete. However, if you believe this is not the case, you may have the right to request that any incomplete or inaccurate Personal Data that we process about you is amended.

Right to erasure

You may have the right to ask us to erase your Personal Data, for example where the Personal Data we collected is no longer necessary for the original purpose, where Personal Data has become obsolete or where you withdraw your consent (if we are processing your Personal Data based on consent). However, this will need to be balanced against other factors. For example, we may not be able comply with your request due to certain legal or regulatory obligations.

Right to restriction of processing

You may be entitled to ask us to (temporarily) stop using your Personal Data, for example where you think that the Personal Data we hold about you may be inaccurate or where you think that we no longer need to use your Personal Data.

Right to data portability

You may have the right to ask that we transfer Personal Data that you have provided to us to a third party of your choice. This right can only be exercised when you have provided the Personal Data to us, and when we are processing that data by automated means on the basis of your consent or in order to perform our obligations under a contract with you.

Right to object

You may have the right to object to processing which is based on our legitimate interests. In case of the processing of Personal Data for marketing purposes, you have the right to object at any time. When you ask us to stop using your Personal Data for marketing purposes, GOFO will immediately cease to use your Personal Data. For other purposes based on our legitimate interests, we will no longer process the Personal Data on that basis when you file an objection based on your grounds relating to your particular situation, unless we have a compelling legitimate ground for the processing. Note, however, that we may not be able to provide certain services or benefits if we are unable to process the necessary Personal Data for that purpose.

Rights relating to automated decision-making

You may have the right not to be subjected to automated decision-making, including profiling, which produces legal effect for you or has a similar significant effect. If you believe you have been subject to an automated decision and do not agree with the outcome, you can contact us using the details below and ask us to review the decision.

Right to withdraw consent

We may ask for your consent to process your Personal Data in specific cases. When we do this, you have the right to withdraw your consent at any time. GOFO will stop the further processing as soon as possible after the withdrawal of your consent. However, this does not affect the lawfulness of the processing before consent was withdrawn.

To exercise any of these rights, please contact us at dpo@gofo.com. We may ask you to verify your identity before responding to your request. In some cases, we may not be able to fully comply with your request due to legal or regulatory requirements.

GOFO complies with PIPEDA and provincial privacy legislation where applicable (e.g., Quebec’s Law 25)，if you are not satisfied with how we handle your request, you may also file a complaint to us at dpo@gofo.com, or to the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca or contact the Office of the Privacy Commissioner of Canada.

If you are a U.S. or E.U. resident, please visit our U.S. Privacy Statement or E.U. Privacy Statement for more information about your rights under applicable law.

13. CHILDREN’S PRIVACY

Our Service is not meant for, and should not be accessed or used by, anyone under the age of 13. Any Personal Information submitted pertaining to a child under the age of 13 must be explicitly consented to by that child’s parent or legal guardian. We do not knowingly collect Personal Information from anyone under the age of 13. If you are located in the province of Quebec, individuals under the age of 14 may not provide personal information without the express consent of a parent or legal guardian.

If you are a parent or guardian and you are aware that your child has provided us with Personal Information, please contact us at dpo@gofo.com.

If we become aware that we have collected Personal Information from anyone under the age of 13（14 in the province of Quebec） without verification of parental consent, we take steps to remove that information from our servers where required by law.

14. LINKS TO OTHER WEBSITES

Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third-party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

15. WHAT IF YOU HAVE OTHER QUESTIONS OR COMPLIANS?

Questions or complaints regarding the processing of your Personal Data can be directed to GOFO by using the contact information as provided at the top of this Privacy Statement.

You also have the right to lodge a complaint with the competent data protection authority in the jurisdiction where you work, where you live or where an alleged infringement takes place.

16. HOW WILL THIS PRIVACY STATMENT BE UPDATED?

GOFO may update this Privacy Statement from time to time. If an amendment will have a serious impact, GOFO will endeavor to actively inform you about such amendments. GOFO will publish an up -to-date Privacy Statement on the Websites at all times indicating the latest amendments.

17. CONTACT US

If you have any questions or complaints about this Privacy Policy, you can contact us by email at dpo@gofo.com. Please indicate in your email or letter whether your inquiry pertains to services provided in Canada or another region, so we can direct your request appropriately.