Privacy Policy

This Privacy Policy (the "Policy") describes how Fortus Group Inc. and its affiliates (collectively, "Fortus," "we," "us," or "our") collect, use, disclose, retain, and otherwise process Personal Information in connection with the website located at shipfortus.com (the "Website"), the Atlantis transportation management platform (the "Platform"), and any related products, features, mobile applications, communications channels, and services we provide (collectively, the "Services").

This Policy applies to visitors of the Website, customers (shippers and consignees), motor carriers, owner-operators, dispatchers, suppliers, business partners, job applicants, and any other individual whose Personal Information we process in connection with the Services (each, a "User" or "you").

By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described herein, please do not access or use the Services.

1. About Fortus

Fortus Group Inc. is a corporation incorporated under the laws of the Province of Québec, Canada, headquartered in Brossard, Québec, providing third-party logistics, freight brokerage, dispatching, and related transportation services across Canada, the United States, and Mexico, including through its U.S. affiliate Fortus Group USA.

For the purposes of applicable data protection laws, including the Act respecting the protection of personal information in the private sector (Québec, "Law 25"), the Personal Information Protection and Electronic Documents Act (Canada, "PIPEDA"), the General Data Protection Regulation ("GDPR") where applicable, and U.S. state privacy laws including the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), Fortus acts as the controller (or equivalent role) of the Personal Information processed under this Policy, except where this Policy expressly states otherwise.

2. Definitions

For purposes of this Policy:

• "Personal Information" means any information relating to an identified or identifiable natural person, as defined under applicable law.
• "Processing" means any operation performed on Personal Information, whether automated or not, including collection, recording, organization, structuring, storage, use, disclosure, transmission, and erasure.
• "Service Providers" means third parties that process Personal Information on our behalf pursuant to written agreements imposing confidentiality and security obligations consistent with this Policy and applicable law.
• "SMS" means short message service, multimedia message service (MMS), and any other text-based mobile messaging communications transmitted to or from a mobile telephone number.

3. Categories of Personal Information We Collect

We collect the following categories of Personal Information:

3.1 Information You Provide Directly

• Identifiers and Contact Data: full name, business name, job title, postal address, email address, telephone number, and mobile telephone number.
• Commercial and Transactional Data: shipment origin and destination, commodity description, weight and dimensions, equipment requirements, reference numbers, bills of lading, rate confirmations, purchase orders, and invoicing records.
• Account and Authentication Data: usernames, passwords (stored in hashed form), security questions, and multi-factor authentication identifiers.
• Financial and Payment Data: billing address, payment method information, banking details for carrier settlement, factoring assignments, and tax identifiers (including W-9, W-8BEN-E, GST/HST, and QST numbers).
• Carrier Qualification Data: U.S. DOT and MC numbers, FMCSA operating authority status, certificates of insurance, safety ratings, signed carrier packets, and beneficial ownership information collected for know-your-customer ("KYC") and anti-money-laundering ("AML") purposes.
• Communications Data: the content of emails, support tickets, chat messages, SMS exchanges, and recordings or transcripts of voice calls (where recording is permitted by applicable law and disclosed at the time of the call).

3.2 Information Collected Automatically

• Device and Connection Data: Internet Protocol (IP) address, device identifiers, browser type and version, operating system, language preferences, referring URLs, and timestamps.
• Usage Data: pages viewed, features accessed, links clicked, session duration, and interaction telemetry.
• Cookies and Similar Technologies: as further described in Section 9.
• Approximate Location Data: derived from IP address. Precise geolocation is collected only with your explicit consent.

4. Purposes and Legal Bases for Processing

We process Personal Information for the following purposes:

• Performing the Services and executing contracts (quoting, booking, dispatching, settlement, invoicing)
• Carrier vetting, fraud prevention, KYC/AML, and sanctions screening
• Compliance with FMCSA, U.S. DOT, CBSA, U.S. CBP, IRS, CRA, Revenu Québec, and other regulatory requirements
• Account administration, security, and authentication
• Customer support and operational communications
• Marketing communications, including SMS and email outreach (with consent where required)
• Analytics, product improvement, and Service development
• Defense of legal claims, dispute resolution, and enforcement of agreements

We do not sell Personal Information, and we do not "share" Personal Information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.

5. SMS and Text Messaging

In compliance with the FCC's one-to-one consent rule, the TCPA, CTIA Messaging Principles, and CASL, your consent to receive SMS messages from Fortus is specific to Fortus Group Inc. only and does not extend to any third party, affiliate, parent, subsidiary, or marketing partner. SMS opt-in information, including your mobile telephone number and consent records, is not shared with third parties or affiliates for marketing purposes under any circumstances.

To opt out, reply "STOP" to any message. You will receive a single confirmation message acknowledging your opt-out, after which no further SMS messages will be sent. For assistance, reply "HELP" or contact us at privacy@shipfortus.com.

6. SMS Terms of Service

By opting into SMS communications from Fortus, you agree to receive conversational and transactional SMS messages from Fortus Group Inc. Message frequency may vary. Message and data rates may apply. Reply HELP for assistance. Reply STOP to any message to opt out. Your consent is specific to Fortus Group Inc. and is not shared with third parties or affiliates.

7. Disclosure of Personal Information

We disclose Personal Information only to Service Providers, business counterparties (motor carriers, shippers, customs brokers), legal and regulatory authorities, and in connection with corporate transactions. Fortus does not sell Personal Information, and Fortus does not share Personal Information for cross-context behavioral advertising. In no event do we transfer SMS opt-in data, mobile telephone numbers, or SMS consent records to any third party for that party's independent marketing purposes.

8. International Data Transfers

Fortus operates in Canada and the United States, and we may transfer, store, and process Personal Information in either jurisdiction. Where Personal Information is transferred outside the jurisdiction in which it was collected, we implement appropriate safeguards as required by applicable law, which may include standard contractual clauses or other lawful transfer mechanisms.

9. Cookies and Similar Technologies

We use strictly necessary cookies, preference cookies, analytics cookies (including Google Analytics with IP anonymization), and security cookies. Fortus does not deploy advertising or behavioral retargeting cookies on the Website.

10. Data Retention

We retain Personal Information only as long as necessary to fulfill the purposes for which it was collected. Shipment and brokerage records are retained for a minimum of three (3) years per FMCSA requirements. SMS consent and opt-out records are retained for a minimum of four (4) years.

11. Your Rights

Depending on your jurisdiction, you may have rights to access, rectify, erase, restrict, object to, or port your Personal Information, as well as withdraw consent and lodge a complaint. To exercise these rights, contact our Privacy Officer at privacy@shipfortus.com.

12. Information Security

We maintain administrative, technical, and physical safeguards including encryption (TLS), multi-factor authentication, role-based access controls, security monitoring, and employee training. However, no method of transmission over the Internet is 100% secure.

13. Canadian Anti-Spam Legislation (CASL)

For commercial electronic messages sent to recipients in Canada, Fortus relies on express or implied consent as defined under CASL. Each commercial electronic message includes an unsubscribe mechanism.

14. Children's Privacy

The Services are intended for business users and are not directed to individuals under eighteen (18). We do not knowingly collect Personal Information from minors.

15. Third-Party Websites and Services

The Services may contain links to third-party websites. This Policy does not apply to such third-party properties, and we are not responsible for their privacy practices.

16. Changes to This Policy

We may amend this Policy from time to time. Material changes will be posted on the Website or communicated directly prior to the changes becoming effective.

17. Contact Us