PRIVACY POLICY FOR FORDEX PLATFORM

Last Updated: 18 september 2025

Welcome to Fordex, a logistics and delivery platform owned and operated by Lion’s Byte GmbH («Company», «we», «us», or «our»). This Privacy Policy outlines how we collect, use, store, share, and protect your personal information when you access, browse, register, or use our website (www.fordex.ch), mobile applications for drivers, and associated services (collectively referred to as the «Platform»). By using the Platform, you («User», «you») consent to the practices described in this Privacy Policy.

This Privacy Policy applies to all Users, including drivers and dispatch teams, as defined in our Terms and Conditions. If you do not agree with this Privacy Policy, you must not access, use, or register on the Platform.

DEFINITIONS

Unless otherwise stated, for the purposes of this Privacy Policy, the terms «User», «Driver», «Platform», and «Services» have the same meanings as defined in the Fordex Terms and Conditions.

ELIGIBILITY AND AGE POLICY

The Fordex Platform is intended for use by individuals who are at least 18 years of age. By accessing or using the Platform, Users represent and warrant that they are at least 18 years old and have the legal capacity to enter into binding agreements.

Users under the age of 18 are not permitted to use the Platform independently. Accounts for minors must be created and managed by a parent or legal guardian, who consents to the collection and use of the minor’s personal information in accordance with this Privacy Policy. The parent or guardian assumes full responsibility for the minor’s use of the Platform and agrees to supervise all related activities.

Fordex does not knowingly collect personal data directly from children under 18 without verifiable parental consent. If we become aware that we have collected personal information from a minor without appropriate consent, we will take steps to delete such information promptly.

INFORMATION WE COLLECT

We collect various types of information to provide and improve our Services. The information we collect may include:

Personal Information of Drivers: We may collect the following personal information from Drivers during registration, verification, and usage of the Platform:

• Full name, contact details (email address and phone number), and profile photograph.

• Corporate ID, vehicle number, and schedule details for operational verification.

• Payment and financial details required for processing disbursements (e.g., bank account or preferred payment method).

Personal Information of Dispatch Teams/Companies: We may collect the following personal information from employing companies or dispatch teams:

• Company name, contact information (email and phone), and authorized representatives.

• Contractual details for individual agreements governing data processing.

Non-Personal Information: We also collect certain non-personal or anonymized data that helps us improve user experience and platform performance:

• Usage Data: Includes details about how Users interact with the Platform such as IP address, browser type, device information, access times, pages visited, time spent on the Platform, and clickstream data.

• Analytics Data: Aggregated or statistical data used for performance analysis, user behavior tracking, and traffic management. This data does not identify individual users.

• Operational Data: Includes geolocation coordinates (current position, speed, timestamps, map position), photos of cargo, handover locations, signatures, and lists of trips or schedules.

• Communication Data: We collect and store data related to communications made through the Platform:
  • Messages, files, or other content shared in support chats or notifications.
  • User-generated feedback or reports submitted in relation to trips or deliveries.

• Activity Data: We also collect activity-related data that reflects participation and performance on the Platform:
  • Trip records, delivery confirmations, route adherence, and evidentiary data for disputes.
  • Technical events such as app crashes, errors, device model, OS version, and interface language.

HOW WE COLLECT INFORMATION

Fordex collects personal and non-personal information through various channels to facilitate user experience, ensure platform security, and improve our services. Information is collected through the following means:

Registration: We collect information directly from Users during the account creation and verification process. This includes details such as name, contact information, corporate ID, vehicle details, and payment methods. This information is essential for user identification, authentication, and compliance with eligibility requirements.

Platform Usage: We automatically collect certain technical data when Users interact with the Platform. This may include IP address, device type, browser information, operating system, access times, and user navigation behavior. This data is captured using cookies (website only; technically necessary), web beacons, and other tracking technologies to help us analyze platform usage patterns, maintain system performance, and deliver a more tailored user experience. For the App, geolocation is collected via GPS only during active work shifts, controlled by the Driver.

User Interactions: We collect data generated through a User’s activity on the Platform. This includes uploaded content such as photos, signatures, trip lists, and route data, as well as interactions in chats or notifications. Additionally, we record in-app behavior such as shift start/end times, delivery proofs, and crash reports. This information enables us to support core logistics functionalities and performance tracking.

Third-Party Services: We may receive supplementary information from trusted third-party service providers integrated with the Platform. This includes mapping data from navigation services, crash reports from monitoring tools, and payment-related data from gateways. Such information enhances the security, reliability, and compliance of our services.

HOW WE USE YOUR INFORMATION

Fordex collects and processes personal and non-personal information to operate the Platform effectively, deliver high-quality logistics services, and meet legal and regulatory obligations. The ways in which we use your information include the following:

Provide Services:

• Facilitate connections between Drivers and dispatch teams/companies.

• Enable account creation, verification, and access to the Platform.

• Manage trip schedules, routes, deliveries, and proofs of completion.

• Process payments and disbursements.

• Provide communication tools (e.g., notifications, support chats).

Improve the Platform:

• Analyze usage patterns to enhance functionality and user experience.

• Develop new features, such as optimized route planning or stability improvements.

Personalize Experiences:

• Display relevant trip assignments or route suggestions based on operational criteria.

• Track and support Driver performance through evidentiary data.

Ensure Security:

• Verify Driver identities and vehicle details.

• Detect and prevent fraudulent activities or unauthorized access.

Communicate:

• Send notifications about trip assignments, route updates, or Platform alerts.

• Respond to inquiries or support requests.

Comply with Legal Obligations:

• We may process your information as required to comply with applicable laws, regulations, tax requirements, or court orders, or to cooperate with regulatory or enforcement authorities where legally mandated.

Legal Bases for Processing: Under the EU General Data Protection Regulation (GDPR) and Swiss Federal Act on Data Protection (DSG), processing is based on:

• Art. 6(1) (b) GDPR / Art. 31 DSG: Performance of contracts (e.g., trip execution).

• Art. 6(1) (f) GDPR / Legitimate interests: Security, optimization, and communication.

Our legitimate interests include maintaining secure, efficient services without overriding your rights. No data is used for marketing.

HOW WE SHARE YOUR INFORMATION

Fordex respects your privacy and shares personal information only when necessary and in accordance with this Privacy Policy. We do not sell your personal information to third parties. Information may be disclosed under the following circumstances:

With Other Users:

• Driver profile information (e.g., name, vehicle number) is visible to dispatch teams for assignment purposes.

• Trip proofs (e.g., photos, geodata) are shared with employing companies for verification.

• Communication in support chats is visible to involved parties.

With Service Providers:

• Third-party vendors (e.g., hosting providers, payment processors, Mapbox for maps, Sentry for crash reporting, Syncfusion for UI) assist with Platform operations, bound by data processing agreements.

• Verification services may access minimal data for compliance.

With the Fordex Community:

• Aggregated operational insights may be shared internally for optimization.

• No user-generated content is reused beyond contractual needs.

For Legal Purposes:

• To comply with legal obligations, such as responding to subpoenas or government requests.

• To protect our rights, property, or safety, or that of our Users or the public.

In Aggregated Form:

• Non-identifiable, aggregated data may be shared for analytics purposes.

Data Transfers: Our servers are located in Switzerland, with no commercial international data transfers occurring. For users in the European Economic Area (EEA), the EU adequacy decision applies, and we implement appropriate safeguards for any third-party processing, such as Standard Contractual Clauses, to ensure equivalent protection.

DATA STORAGE AND SECURITY

Storage: Your information is stored on secure servers located in Switzerland, with scheduled backups. Minimal data (e.g., caches, tokens) is stored on devices in secure areas.

Security Measures:

• We use encryption (SSL/TLS in transit, at rest), access controls (role-based, least privilege), regular security audits, key rotation, and incident monitoring to protect your data.

• App permissions (location during shifts, camera for photos) are explained via prompts; background indicators are visible.

Limitations: While we take reasonable and appropriate steps to secure your data, no system or method of electronic storage or transmission over the internet can be guaranteed to be 100% secure. Therefore, Fordex cannot guarantee absolute security, and Users acknowledge and accept that they share information with the Platform at their own risk.

YOUR DATA RIGHTS

Subject to applicable data protection laws (GDPR and DSG), you may have the following rights:

• Access: Request a copy of the personal information we hold about you.

• Rectification: Update or correct inaccurate or incomplete information.

• Deletion: Request deletion of your personal information, subject to legal or contractual obligations.

• Restriction: Request that we restrict the processing of your information in certain circumstances.

• Portability: Request a transferable copy of your data in a structured, machine-readable format.

• Objection: Object to certain types of processing based on legitimate interests.

• Withdraw Consent: Withdraw consent for data processing at any time, though this may limit your ability to use the Platform.

To exercise these rights, contact us at support@fordex.ch. We will respond within one month (extendable if complex), subject to verification of your identity. Complaints may be filed with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local supervisory authority.

COOKIES AND TRACKING TECHNOLOGIES

Fordex uses cookies and similar tracking technologies on the website to enhance your experience, improve performance, and deliver personalized services. These are limited to technically necessary cookies for functionality and security. No tracking or marketing cookies are used.

You may manage or disable cookies through your browser settings. However, please note that restricting cookies may impact the functionality and performance of certain features on the Platform.

For the App, no cookies are used, tracking is limited to operational geolocation during shifts.

THIRD-PARTY LINKS AND SERVICES

The Platform may contain links to third-party websites or services (e.g., external navigators like Google Maps). We are not responsible for the privacy practices or content of these third parties. Review their privacy policies before sharing information.

Integrated Services:

• Mapbox: Privacy Policy; Telemetry; Opt-out.

• Sentry: Privacy Policy; Security; DPA.

• Syncfusion: Privacy Policy.

INTERNATIONAL DATA TRANSFERS

Your information is primarily processed in Switzerland. Transfers to third countries occur only with appropriate safeguards, such as Standard Contractual Clauses, to ensure protection equivalent to GDPR/DSG standards.

DATA RETENTION

We retain your personal information for as long as necessary to provide Services and fulfill contractual obligations, comply with legal, tax, or accounting requirements, and resolve disputes or enforce our Terms and Conditions.

Specific retention periods include: trip geolocation data for up to 90 days; photos and proofs for up to 1 year; technical logs for 30–90 days; profile and operational data for the duration of the contract, after which it is archived or deleted; and usage and contact data for 1 year after the last interaction.

Inactive accounts may be deleted after an extended period. Data is deleted automatically or upon request, subject to legal holds.

GOVERNING LAW

This Privacy Policy is governed by the laws of Switzerland, with GDPR applicability for EEA users. Any disputes arising from this Privacy Policy shall be resolved in accordance with the Dispute Resolution and Governing Law clauses in our Terms and Conditions.

DISPUTE RESOLUTION

Informal Resolution: If you have any dispute or concern regarding this Privacy Policy, the Terms and Conditions, or your use of the Fordex Platform, please contact us at support@fordex.ch. We will work in good faith to resolve the matter within 30 days of your notice.

Binding Arbitration: Any unresolved disputes shall be settled exclusively by binding arbitration administered by the Swiss Chambers’ Arbitration Institution (SCA) under its Commercial Arbitration Rules. The arbitration will take place in Zurich, Switzerland, in English, before a single arbitrator. The arbitrator’s decision is final and enforceable in court. You and Lion’s Byte GmbH waive the right to litigate in court or participate in class actions.

Exceptions: You may seek injunctive relief in court for intellectual property matters or small claims within jurisdictional limits.

Costs: Each party bears its own costs, unless the arbitrator awards otherwise under applicable law.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or Platform features. Updates will be posted on the Platform and effective immediately, unless otherwise specified. Continued use of the Platform after changes constitutes acceptance of the revised Privacy Policy. Significant changes will be notified via email or in-App notice.

CONTACT US

For questions, concerns, or to exercise your data rights, contact us at:

• Email: support@fordex.ch

• Phone: +41 79 322 14 47

By accessing, browsing, registering for, or otherwise using the Fordex Platform, including our website (www.fordex.ch), mobile applications for drivers, and any associated services, features, or functionalities, you expressly acknowledge that you have carefully read, fully understood, and unconditionally agree to be bound by the terms and conditions set forth in this Privacy Policy in its entirety. This agreement constitutes a legally enforceable contract between you and Lion’s Byte GmbH, and it applies to all interactions with the Platform, whether as a driver, dispatch team member, or other authorized user. Your continued use of the Platform following any updates or modifications to this Privacy Policy shall be deemed as your affirmative acceptance of such changes, and it is your ongoing responsibility to review this policy periodically to remain informed of any revisions. If you do not agree with any provision of this Privacy Policy, or if you are accessing the Platform on behalf of a minor, organization, or third party without proper authorization, you must immediately cease all use of the Platform and delete any associated accounts or data in your possession. The Company reserves the right to terminate or suspend your access at any time for non-compliance with this policy, without prior notice, and such actions shall not relieve you of your obligations hereunder. This Privacy Policy is incorporated by reference into, and forms an integral part of, our Terms and Conditions, and any disputes arising from your use of the Platform or interpretation of this policy shall be governed exclusively by the laws of Switzerland, subject to the dispute resolution mechanisms outlined therein. For clarity, your consent extends to all data collection, processing, storage, sharing, and retention practices described herein, and you waive any claims related to privacy expectations beyond those explicitly stated. If you have any questions or require clarification before proceeding, please contact us at support@fordex.ch prior to engaging with the Platform.