BNSF is firmly committed to protecting your privacy and data while visiting our Internet site and using our services. The statement below provides details on the information we collect, our use of that information and our data security practices. Information collected by BNSF is used only for internal business purposes. BNSF does not, nor do we plan to, sell any information collected through our website. Further, BNSF does not plan to divulge information to any party other than BNSF affiliates, service providers and other third parties we use to help run our business.
This privacy statement explains what Personal Information we collect, what sources we used to collect it, how we use it, and how we disclose the information.
BNSF collects information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“Personal Information”). Personal Information does not include publicly available information or information that is deidentified or aggregate consumer information.
BNSF may have collected the following categories of Personal Information within the last twelve months:
Use of Personal Information
In general, you can visit BNSF on the World Wide Web without telling us who you are or revealing any information about yourself. Our Web servers collect visitor domain names, not e-mail addresses or other personally identifying information. This information is compiled to measure the number of visits, average time spent on the site, pages viewed, and similar information. We use this information to measure the use of our site and to improve the user experience.
BNSF may also collect your location information, including your current latitude and longitude, when you access our website. We collect this information to personalize the content and functionality of the site and to help us understand how and where visitors are using our content and applications.
If you register for an account with the BNSF Customer Portal or enter into a separate agreement with us, BNSF may also collect, store, and use your biometric data to verify your identity and to keep an accurate record of your interactions with BNSF. The types of biometric data we may collect include, but are not limited to, a retina or iris scan, fingerprint, voiceprint, or scan of hand or face geometry. Any biometric data collected, stored, or used by BNSF shall be retained for a period of up to one year of your last interaction with the particular product or service with which you registered your information, at which point BNSF shall permanently destroy the biometric data in accordance with BNSF guidelines.
Additional information may be requested and collected to the extent you use our website, online tools, or otherwise interact with us as a part of your business relationship with BNSF. This information is necessary for BNSF to provide the services that you request and is used to respond to your inquiry, process your request, or validate authorization to grant access to specific account information. The amount of personal information you disclose to BNSF is at your discretion. The types of information we may collect is described below.
BNSF will only use your Personal Information as the law allows. BNSF may use or disclose the Personal Information we collect for one or more of the following purposes:
BNSF will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice.
To prevent unauthorized access, maintain data accuracy, and ensure the correct use of Personal Information, we have put in place appropriate physical, electronic and managerial procedures to safeguard and secure the information we collect on our website, online tools, or other methods as a part of your business relationship with BNSF.
Selling or Sharing Personal Information
BNSF does not sell or share Personal Information for monetary value or for cross-context behavioral advertising. In order to perform a business purpose, BNSF may provide Personal Information collected to our affiliates, services providers, and other third parties we use to help run our business—such as vendors or website hosts.
When BNSF discloses Personal Information to an affiliate, service provider or other third party for a business purpose, we enter into a contract that describes the purpose and requires the recipient to both keep that Personal Information confidential and not use it for any purpose except for performing the contract. The service providers do not further collect, sell, or use the Personal Information except as necessary to perform the business purpose.
Retention of Personal Information
BNSF retains your Personal Information for as long as is necessary for the purposes described in this privacy statement, in accordance with applicable laws.
You may have rights under certain privacy and data protection laws such as the California Privacy Rights Act of 2020 (CPRA). BNSF is committed to protecting your data privacy and has provided the following information about your rights and how to exercise your rights:
Right to Know
You have the right to know:
Please note that we are not required to:
In connection with any Personal Information we may sell or disclose to a third party for a business purpose, you have the right to know:
Right to Delete
Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:
Please note that we may not delete your Personal Information if it is necessary to:
Right to Correct
You have the right to request that inaccurate Personal Information collected by BNSF be corrected.
Right to Limit
Subject to certain exceptions, you have the right to request that BNSF limit the use of your Sensitive Personal Information. BNSF does not collect Sensitive Personal Information for the purpose of inferring characteristics about you.
Right to Non-Discrimination
You have the right to not be discriminated against by us because you exercised any of your rights under the CPRA or other laws. This means we cannot, based solely upon your elections regarding Personal Information:
Please note that Personal Information may be required as necessary to provide a rate and perform transportation or other services.
How to Contact Us
If you would like to exercise any of your rights as described in this Privacy Statement, please:
Please note that you may only make a data access or data portability disclosure request twice within a 12-month period.
When you make a request exercising your CPRA rights, BNSF will confirm receipt of your request within 10 business days and respond to a verifiable request within 45 or 90 days.
Verifying Your Identity
If you choose to contact us directly by email or phone, you will need to provide us with:
We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on such person’s behalf.
Any Personal Information we collect from you to verify your identity in connection with you request will be used solely for the purposes of verification.
Changes to this Privacy Statement
We may update this Privacy Statement from time to time as our business (including privacy and security practices) changes, or as required by law.
The effective date of this Privacy Statement is provided below, and we encourage you to visit our site periodically to stay informed about our privacy and security practices.
We will post the most current version of our Privacy Statement on our site and ask for your consent to the changes if legally required.
Third Party Links
We also link to a number of third-party external sites. The inclusion of any link does not imply our endorsement of the external site company, its website, or the products and services it promotes or sells. We are not responsible or liable for the independent privacy policies of these third-party sites. You should consult the privacy policies at these sites to determine how your information may be used.
Effective Date: December 20, 2019
Last Revised: January 1, 2023