Security Policy

Universal Shipping Inc. (USI Ship) Last Updated: June 2026

1. Our Commitment to Security

At Universal Shipping Inc. (“USI Ship,” “we,” “our,” or “us”), we understand that our customers trust us with sensitive shipment, business, and personal information as part of our freight forwarding, FBA prep, LCL/FCL, LTL/FTL, and 3PL logistics services. As an NVOCC-licensed freight forwarder, we are committed to maintaining the confidentiality, integrity, and availability of all data entrusted to us. This Security Policy outlines the measures we take to protect your information and the practices we expect from anyone interacting with our systems.

This policy applies to our website (usiship.com), customer portals, internal systems, employees, contractors, and any third-party vendors who process data on our behalf.

2. Data We Protect

In the course of providing freight forwarding and logistics services, we may collect and process:

• Customer contact and account information
• Shipment details, bills of lading, and customs documentation
• Billing and payment information
• Business correspondence and shipping instructions
• Website usage and analytics data

We limit data collection to what is necessary to provide our services and do not sell customer data to third parties.

3. Data Protection Measures

• Encryption: Data transmitted between your browser and our website is encrypted using industry-standard TLS/SSL protocols. Sensitive data stored in our systems is protected using encryption at rest where applicable.
• Access Controls: Access to customer and shipment data is restricted to authorized personnel on a need-to-know basis, governed by role-based access controls.
• Password & Authentication Policies: Internal systems require strong password policies, and multi-factor authentication is enforced for access to critical systems.
• Regular Backups: Critical business and customer data is backed up regularly to prevent data loss and support business continuity.

4. Infrastructure & Application Security

• Our website and systems are protected by firewalls and monitored for unauthorized access attempts.
• Servers and software are kept up to date with security patches to address known vulnerabilities.
• We employ measures to mitigate Distributed Denial of Service (DDoS) attacks and other common web threats.
• Our website undergoes periodic security reviews to identify and remediate potential vulnerabilities.

5. Incident Response

In the event of a suspected or confirmed security incident affecting customer data, USI Ship will:

1. Promptly investigate and contain the incident.
2. Assess the scope and impact of any data exposure.
3. Notify affected customers and relevant authorities in accordance with applicable laws, without undue delay.
4. Take corrective action to prevent recurrence.

6. Third-Party & Vendor Security

USI Ship works with select third-party service providers (such as payment processors, customs brokers, and hosting providers) to deliver our logistics services. We evaluate these partners for appropriate security practices and require contractual commitments to protect any data shared with them. We do not share more data with vendors than necessary for them to perform their function.

7. Vulnerability Disclosure

We welcome reports from security researchers and customers who identify potential vulnerabilities in our systems. If you believe you have discovered a security issue, please contact us at:

Email: security@usiship.com

Please provide as much detail as possible, including steps to reproduce the issue. We ask that you do not publicly disclose any vulnerability until we have had a reasonable opportunity to investigate and address it. We are committed to acknowledging reports promptly and working in good faith with reporters.

8. Your Responsibilities

To help keep your account and shipment information secure, we recommend that customers:

• Use a strong, unique password for your USI Ship account and avoid reusing it across other sites.
• Keep your login credentials confidential and never share them with unauthorized parties.
• Log out of shared or public devices after accessing your account.
• Report any suspicious activity related to your account immediately to our support team.

9. Compliance

USI Ship operates in accordance with applicable U.S. federal regulations governing freight forwarding and NVOCC operations, and we strive to align our data handling practices with recognized data protection principles. Where applicable, we comply with relevant data privacy regulations governing the collection and processing of customer information.

This policy does not constitute legal advice or a guarantee of specific compliance certifications; customers with specific regulatory requirements should consult their own legal or compliance advisors regarding their use of our services.

10. Policy Updates

We may update this Security Policy from time to time to reflect changes in our practices, technology, or legal requirements. The “Last Updated” date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.

11. Contact Us

If you have questions or concerns about this Security Policy or our data security practices, please contact us:

Universal Shipping Inc. Email: sales.usi@usiship.com Website: https://usiship.com