At Einship, protecting your privacy is a priority. We process your personal data in compliance with the General Data Protection Law (Law No. 13,709/2018 – LGPD) in a transparent, secure, and responsible manner. This Privacy Notice explains, clearly and objectively, how we collect, use, store, and protect your personal information.

1. WHO WE ARE

Einship is the controller responsible for processing your personal data. This data is used securely to provide solutions that optimize international logistics and foreign trade, as well as to help streamline your import and export operations.

2. DATA COLLECTED

Data collected on the Einship website:

• Registration Data: Full Name, Company, Email.

• Browsing Data: IP address, location, pages accessed, duration of visit, device type, and browser.

3. PURPOSES OF PROCESSING

We use your personal data for:

• Performance of contracts: Registration, service delivery, and customer support.

• Compliance with legal and regulatory obligations: Your data is used to meet legal requirements when necessary.

• Security: Fraud prevention and protection of our environments.

4. DATA SHARING

Einship may share your Personal Data with:

• Service providers and business partners: Such as logistics, marketing, and IT platforms.

• Public authorities: When required by legal, judicial, or regulatory obligation.

• Companies within the same economic group: When applicable, for administrative or security purposes.

All third parties are contractually obligated to respect data confidentiality and security.

5. INTERNATIONAL DATA TRANSFER

As we operate with international logistics solutions, Einship may transfer your data outside of Brazil, especially when using cloud services hosted abroad or international partner platforms. In these cases, we ensure that all necessary measures are adopted to guarantee adequate protection of information, in compliance with the LGPD.

To reinforce this protection, Einship will utilize agreements and standard contractual clauses, as recommended by competent authorities. Our Privacy Policy is reviewed periodically to ensure continuous compliance with the LGPD and other applicable legislation, and any changes will be communicated clearly and appropriately to the parties involved.

6. DATA RETENTION AND DISPOSAL

We store your Personal Data for as long as necessary to fulfill the purposes described in this Privacy Policy, respecting legal and regulatory timeframes. After this period, data is securely discarded or anonymized, as applicable.

7. DATA SUBJECT RIGHTS

As a data subject, you may exercise the following rights in accordance with the LGPD:

• Confirmation of the existence of processing;

• Access to your data;

• Correction of incomplete, inaccurate, or outdated data;

• Anonymization, blocking, or deletion of unnecessary, excessive, or non-compliant data;

• Data portability;

• Deletion of data processed based on consent;

• Information about data sharing;

• Revocation of consent;

• Opposition to processing.

We will respond to requests from data subjects in a simplified format within 48 business hours or in a complete format within 15 days.

8. INFORMATION SECURITY

Einship implements appropriate technical and organizational measures to protect personal data against unauthorized access, misuse, loss, alteration, or destruction. Appropriate safeguards are adopted to ensure the confidentiality, integrity, and availability of personal data.

9. DATA PROTECTION OFFICER (DPO)

In compliance with the General Data Protection Law, Einship has appointed a Data Protection Officer (DPO): [NAME] – [Email]. If you have questions, wish to make requests, or exercise your rights as a data subject, please contact our Officer.

10. CHANGES TO THE PRIVACY POLICY AND COOKIE NOTICE

Einship may, at any time, make changes to this Privacy Policy to ensure the continuous improvement of personal data protection processes and necessary alignment with relevant laws and regulations.

We recommend accessing this policy frequently, or whenever you have questions, to review any updates or changes.

Last updated: January/2026

Data Protection and Processing Policy