Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your personal data.

Last Updated: January 15, 2025 | Effective Date: January 1, 2025

GlobalShip Logistics Ltd ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services. This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

1. Data Controller Information

Data Controller:

GlobalShip Logistics Ltd

123 Logistics Avenue, London, EC1A 1BB, United Kingdom

Company Registration Number: GB-12345678

VAT Number: GB987654321

Data Protection Officer (DPO):

Email: dpo@globalship.com

Phone: +44 20 7123 4567

Postal Address: Data Protection Officer, GlobalShip Logistics Ltd, 123 Logistics Avenue, London, EC1A 1BB, UK

2. Types of Data We Collect

2.1 Personal Identification Information

  • Full name, email address, phone number
  • Postal address (billing and shipping addresses)
  • Date of birth (for age verification and customs purposes)
  • Government-issued ID numbers (passport, national ID for customs clearance)
  • Company name and business registration details (for business accounts)

2.2 Financial Information

  • Payment card details (processed securely through third-party payment processors)
  • Bank account information (for refunds and business accounts)
  • Billing history and transaction records
  • Tax identification numbers (for invoicing purposes)

2.3 Shipment Information

  • Sender and recipient details (names, addresses, contact information)
  • Package contents, weight, dimensions, and declared value
  • Customs declarations and documentation
  • Tracking numbers and shipment status updates
  • Delivery instructions and special handling requirements

2.4 Technical and Usage Data

  • IP address, browser type, and operating system
  • Device information (device type, unique device identifiers)
  • Pages visited, time spent on pages, and navigation paths
  • Referral sources and search terms used to find our website
  • Cookies and similar tracking technologies (see Section 7)

2.5 Communication Data

  • Email correspondence and customer support interactions
  • Phone call recordings (with prior notice and consent)
  • Live chat transcripts and feedback submissions
  • Survey responses and testimonials

3. Purpose of Data Processing

We collect and process your personal data for the following purposes:

Service Delivery

To process and fulfill your shipping orders, arrange pickups and deliveries, provide tracking information, and handle customs clearance procedures.

Account Management

To create and manage your account, authenticate your identity, provide access to partner areas, and maintain your shipping history and preferences.

Payment Processing

To process payments, issue invoices, handle refunds, detect and prevent fraud, and maintain financial records for accounting and tax purposes.

Customer Support

To respond to your inquiries, resolve complaints, provide technical assistance, and improve our customer service quality.

Legal Compliance

To comply with customs regulations, tax laws, anti-money laundering requirements, sanctions screening, and other legal obligations.

Marketing and Communications

To send promotional offers, newsletters, service updates, and personalized recommendations (only with your consent, which you can withdraw at any time).

Service Improvement

To analyze usage patterns, conduct research, develop new features, optimize routes, and enhance overall service quality.

Security and Fraud Prevention

To protect against unauthorized access, detect suspicious activities, prevent fraud, and ensure the security of our systems and your data.

4. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

Contractual Necessity:

Processing is necessary to fulfill our contract with you (e.g., delivering your shipments, processing payments).

Legal Obligation:

Processing is required to comply with legal requirements (e.g., customs declarations, tax reporting, anti-money laundering checks).

Legitimate Interest:

Processing is necessary for our legitimate business interests (e.g., fraud prevention, service improvement, network security) while respecting your rights.

Consent:

For marketing communications and non-essential cookies, we process data only with your explicit consent, which you can withdraw at any time.

5. Data Retention Periods

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

Data TypeRetention PeriodReason
Account InformationDuration of account + 2 yearsLegal claims, customer service
Shipment Records7 years after deliveryLegal compliance, claims
Financial Records7 yearsTax and accounting laws
Marketing ConsentUntil consent withdrawnOngoing marketing activities
Customer Support3 years after last contactService improvement, disputes
Website Analytics26 monthsUsage analysis, optimization
CCTV Footage30 daysSecurity, incident investigation

After the retention period expires, we securely delete or anonymize your personal data. In some cases, we may retain data for longer periods if required by law or to defend legal claims.

6. Sharing Your Personal Data

We may share your personal data with the following categories of recipients:

Service Partners and Carriers

We share shipment information with airlines, shipping lines, trucking companies, and local delivery partners to facilitate the transportation and delivery of your packages.

Examples: DHL, FedEx, UPS, Maersk, local courier services

Customs and Government Authorities

We are legally required to share shipment details, customs declarations, and sender/recipient information with customs authorities and other government agencies for clearance and compliance purposes.

Examples: HM Revenue & Customs (UK), US Customs and Border Protection, EU customs authorities

Payment Processors

We use secure third-party payment processors to handle credit card transactions and other payment methods. These processors are PCI-DSS compliant and do not store your full payment card details on our servers.

Examples: Stripe, PayPal, bank payment gateways

Technology Service Providers

We work with technology companies that provide hosting, cloud storage, analytics, customer support tools, and other technical services necessary to operate our website and services.

Examples: Amazon Web Services (AWS), Google Analytics, customer support platforms

Professional Advisors

We may share data with lawyers, accountants, auditors, and other professional advisors when necessary for legal, financial, or business purposes.

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections.

Law Enforcement and Legal Compliance

We may disclose your data to law enforcement, regulatory authorities, or courts when required by law, to protect our rights, or to prevent fraud and illegal activities.

International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA). When we transfer your data internationally, we ensure appropriate safeguards are in place:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions recognizing equivalent data protection standards
  • Binding Corporate Rules for intra-group transfers
  • Privacy Shield certification (where applicable)

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. A cookie is a small text file stored on your device that helps us recognize you and remember your preferences.

Types of Cookies We Use:

Essential Cookies (Always Active)

Required for the website to function properly. These enable core functionality such as security, network management, and accessibility. You cannot opt out of these cookies.

Examples: Session cookies, authentication tokens, load balancing

Functional Cookies

Enable enhanced functionality and personalization, such as remembering your language preference, login details, and shipment tracking history.

Examples: Language settings, user preferences, recently viewed items

Analytics Cookies

Help us understand how visitors interact with our website by collecting and reporting information anonymously. This helps us improve our services.

Examples: Google Analytics, page view tracking, bounce rate analysis

Marketing Cookies

Used to track visitors across websites to display relevant advertisements and measure campaign effectiveness. These cookies are set by third-party advertising networks.

Examples: Google Ads, Facebook Pixel, retargeting cookies

Managing Your Cookie Preferences:

You can control and manage cookies in several ways:

  • Use our cookie consent banner to accept or reject non-essential cookies
  • Adjust your browser settings to block or delete cookies (note: this may affect website functionality)
  • Opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on
  • Use privacy-focused browsers or browser extensions that block tracking cookies

Third-Party Cookies

Some cookies are placed by third-party services that appear on our pages. We do not control these cookies. Please refer to the privacy policies of these third parties for more information about their cookies and how to opt out.

8. Your Data Protection Rights

Under GDPR and other data protection laws, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of your request.

Right to Rectification

You can request that we correct any inaccurate or incomplete personal data. You can update most information directly through your account settings or by contacting our support team.

Right to Erasure (Right to be Forgotten)

You can request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes it was collected, or if you withdraw your consent. Note that we may need to retain some data for legal compliance.

Right to Restriction of Processing

You can request that we limit the processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller without hindrance.

Right to Object

You can object to the processing of your personal data based on legitimate interests or for direct marketing purposes. We will stop processing unless we have compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your habitual residence, place of work, or place of the alleged infringement if you believe we have violated your data protection rights.

UK Supervisory Authority: Information Commissioner's Office (ICO) - ico.org.uk

How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Officer:

  • Email: dpo@globalship.com
  • Phone: +44 20 7123 4567
  • Online Form: Available in your account settings under "Privacy Requests"

We will respond to your request within 30 days. In some cases, we may need to verify your identity before processing your request to ensure the security of your personal data.

9. Data Security Measures

We implement comprehensive technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

Encryption

  • • SSL/TLS encryption for data in transit
  • • AES-256 encryption for data at rest
  • • End-to-end encryption for sensitive communications

Access Controls

  • • Multi-factor authentication (MFA)
  • • Role-based access control (RBAC)
  • • Regular access reviews and audits

Infrastructure Security

  • • Secure data centers with 24/7 monitoring
  • • Firewalls and intrusion detection systems
  • • Regular security patches and updates

Monitoring & Response

  • • 24/7 security monitoring and logging
  • • Incident response procedures
  • • Regular security assessments and penetration testing

Staff Training

  • • Regular security awareness training
  • • Confidentiality agreements
  • • Background checks for employees

Compliance & Audits

  • • ISO 27001 certified information security
  • • PCI-DSS compliance for payment processing
  • • Regular third-party security audits

Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR. We will provide information about the nature of the breach, the likely consequences, and the measures taken to address it.

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to improve our security practices and protect your data.

10. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16 without parental consent.

If you are a parent or guardian and believe that your child has provided us with personal data without your consent, please contact us immediately at dpo@globalship.com. We will take steps to delete such information from our systems promptly.

For business accounts where minors may be involved in shipments (e.g., school trips, youth organizations), we require that an adult with parental responsibility or legal authority provides consent and manages the account.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this policy
  • Notify you via email if you have an account with us
  • Display a prominent notice on our website for 30 days
  • For significant changes affecting your rights, we may request your renewed consent

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

Previous versions of this Privacy Policy are available upon request by contacting our Data Protection Officer.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

Data Protection Officer

Email

dpo@globalship.com

Phone

+44 20 7123 4567

Postal Address

Data Protection Officer

GlobalShip Logistics Ltd

123 Logistics Avenue

London, EC1A 1BB

United Kingdom

General Inquiries

Customer Support

support@globalship.com

24/7 Support Line

+44 800 123 4567

Business Hours

Monday - Friday: 9:00 AM - 6:00 PM GMT

Saturday: 10:00 AM - 4:00 PM GMT

Sunday: Closed

Response Time

We aim to respond to all privacy-related inquiries within 5 business days. For formal data subject requests (access, deletion, etc.), we will respond within 30 days as required by GDPR.

Acknowledgment

By using our services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your personal data as described herein. If you do not agree with this policy, please discontinue use of our services.

Talk with Us
原文
この翻訳を評価してください
いただいたフィードバックは Google 翻訳の改善に役立てさせていただきます