PRIVACY POLICY

Statement

UPOSTAL/UES is committed to protecting the personal data of its clients, collaborators, suppliers, and all users of its website (through the domains http://www.upostal.com.uy/ and https://www.ues.com.uy), and will make every effort to ensure diligent processing, in accordance with the policy detailed in this document.

First. LEGAL FRAMEWORK

This Privacy Policy complies with Law No. 18.331 of August 11, 2008, and Decree No. 414/009 of August 21, 2009, on Personal Data Protection and Habeas Data, as well as other supplementary, modifying, and related regulations.

Second. DATA CONTROLLER

UPOSTAL/UES is a national company that began operations in 2003 in Uruguay, specializing in the provision of postal, mail, courier, and special services to both companies and individuals.

UPOSTAL/UES is managed by experienced professionals, whose synergy drives the services offered by the company.

Since its foundation, the company has continuously improved its service offering, convinced that customer satisfaction is a key pillar for its growth.

With highly digitized management, UPOSTAL/UES ensures access to information about the services provided and guarantees traceability.

UPOSTAL/UES continuously studies technological and regulatory developments in Information Security, aiming to maintain leadership within the sector and to keep its services updated.

UPOSTAL/UES is the data controller for the personal data collected during the development of its activities with clients and users who use its website. Its databases are duly registered with the Personal Data Registry of the URCDP, as created by Article 1 of Decree No. 664/008, in accordance with Law 18.331 and its Regulatory Decree No. 414/009.

UPOSTAL/UES is located at Av. Burgues 2825, Montevideo, Uruguay.

Contact can be made in person at the company’s offices, or remotely via the website, email datospersonales@upostal.com.uy, or phone number 2201 0101.

Third. PURPOSE AND LEGAL BASIS OF PROCESSING

The processing of clients' personal data by UPOSTAL/UES aims to ensure an appropriate contractual relationship, provide services, and deliver product and promotion information as applicable.

The processing of user data collected automatically through UPOSTAL/UES's digital platforms aims to record the number and frequency of visits, personalize social media campaigns, and analyze the performance of such campaigns, to improve services and facilitate the use of digital tools. To this end, UPOSTAL/UES uses cookies and similar technologies. See our Cookie Policy for more information.

The automatic data collection does not involve associating the data with any identified or identifiable user. UPOSTAL/UES will not use information from networks or analytics providers for purposes beyond those explicitly stated.

The processing of personal data provided through forms, digital contracts, or any other medium, is intended to deliver the postal, mail, courier, and special services requested, and to collect statistics.

Contact details provided may also be used to send commercial offers related to UPOSTAL/UES or affiliated third parties, marketing actions (campaigns, events, contests), satisfaction surveys, and newsletters (including electronically).

The legal basis for sending such communications is the user's informed consent, which can be withdrawn at any time using the contact methods provided in this policy, without affecting access to services.

Fourth. DATA DISCLOSURE AND INTERNATIONAL TRANSFER

UPOSTAL/UES will not disclose personal data to third parties except where legally required under Law No. 18.331 or with the user’s consent, or where required to fulfill the intended service.

To personalize social media campaigns, UPOSTAL/UES uses Facebook Ads and Instagram Ads and may share contact information (e.g., email, phone) with Meta Platforms Inc. to create custom audiences. Meta operates under its own service terms and privacy measures. Users can configure their preferences via https://www.facebook.com/settings?tab=ads and refer to our Cookie Policy.

Consent for such international transfers will be obtained when collecting data. Users may revoke consent at any time; this will stop personalized ads or email communications, as applicable.

Fifth. USE OF INSTANT MESSAGING APPLICATIONS

UPOSTAL/UES may offer communication channels via WhatsApp or Telegram for faster request handling, follow-ups, or marketing messages related to UPOSTAL/UES services.

Data for these channels will only be shared within UPOSTAL/UES-managed groups. The designated data controller ensures appropriate technical and organizational safeguards.

Users should be aware that these platforms operate under their own privacy terms and may use foreign servers, including in countries not considered adequate by Uruguayan law. Users are encouraged to review those terms and manage their data settings accordingly.

Using these messaging apps is optional. Alternative communication channels will always be available.

By using such apps, users explicitly accept the terms described, including consent for potential international data transfers.

Sixth. SECURITY MEASURES

UPOSTAL/UES has adopted technical and organizational measures to ensure the integrity, availability, and confidentiality of stored personal data, continually reviewing and improving them to comply with national regulations and best practices.

Seventh. DATA SUBJECT RIGHTS

Data subjects may exercise their rights of access, rectification, update, inclusion, and deletion in accordance with Law No. 18.331 and its related regulations, by contacting UPOSTAL/UES at datospersonales@upostal.com.uy or in person at Av. Burgues 2825, Montevideo, Uruguay.

All marketing emails will include an unsubscribe link that results in immediate removal from the relevant mailing list.

Eighth. LINKS AND SOCIAL MEDIA

This Privacy Policy applies only to data processed by UPOSTAL/UES. It does not apply to links to external websites or social media platforms.

Users may join UPOSTAL/UES's pages or groups on social media. However, any data shared there will be subject to the social platform’s policies. UPOSTAL/UES is not responsible for any processing of personal data on those platforms. Users should review those privacy policies and configure their preferences accordingly.

Ninth. DATA RETENTION PERIOD

Data will be retained for as long as necessary for the purposes for which it was collected, or until the user requests deletion, or as required by legal obligations.

Tenth. PRIVACY POLICY UPDATES

UPOSTAL/UES may update or revise this Privacy Policy at any time. Changes will be announced via the website, where applicable.

Continued use of the site after changes implies acceptance of the updated Privacy Policy.

Eleventh. GOVERNING LAW AND JURISDICTION

This Privacy Policy is governed exclusively by the laws of the Oriental Republic of Uruguay.

Any dispute concerning its existence, validity, interpretation, or enforcement shall be subject to the courts of Montevideo, Uruguay.

Access to systems, networks, services, and information is prohibited unless expressly authorized for specific users or groups.

Access to physical areas is permitted, except where privileged access is required and granted by authorized personnel.

This Policy defines access rules for systems, services, and facilities, while the Information Classification Policy sets access rules for individual documents and records.

Ready to take the first step toward a more efficient, flexible, and customer-centric logistics model?