Cargaris legal
Privacy Policy
Plain-language summary
Plain-language summary: Cargaris provides B2B freight marketplace and coordination software; the complete legal text below governs.
This version is prepared for owner and external counsel review and becomes effective when the Cargaris pilot service is launched.
English is the authoritative language unless a signed agreement states otherwise.
No previous public version is in force for the pilot launch baseline.
1. Controller identity#
, trading as Cargaris, is the controller for the processing described where Cargaris decides why and how personal data is processed. Privacy contact: .
2. Contact and DPO#
No data protection officer has been appointed at this stage. Privacy enquiries may be sent to .
3. Data categories#
Cargaris processes the following categories where relevant to account, company, marketplace and support activity.
- Account identity
- Business contact details
- Authentication
- Company information
- Membership and roles
- Verification documents
- Load data
- Capacity data
- Bids and proposals
- Transport assignments
- Tracking events
- CMR and attachments
- Messages
- Subscription and billing profile
- Contact enquiries
- Invitation data
- Onboarding
- Consent records
- Support records
- Device/browser
- IP and security logs
- Audit events
- Notification preferences
- Locale
- Uploaded-file metadata
4. Sources#
Data may come from users, administrators, counterparties, registers where lawfully used and technical systems.
- Users
- Company administrators
- Counterparties
- Public/business registers where lawfully used
- Technical systems
- Invitations
- Support and contact submissions
5. Purposes and lawful bases#
The table maps core purposes to data, lawful bases and retention categories.
| Purpose | Data | Lawful basis | Retention |
|---|---|---|---|
| Contract/account provision | Account, company, membership, authentication | Contract / pre-contract steps | Account lifetime plus legally required limitation periods, pending approval |
| Marketplace functionality | Loads, capacity, bids, proposals, assignments | Contract and legitimate interests | Operational records retained for contract, dispute and audit needs, pending approval |
| Document handling | CMR, attachments, verification documents | Contract, legal compliance, legitimate interests | Delivery and verification documents retained for operational/legal duties, pending approval |
| Security and fraud prevention | IP, audit, security events | Legitimate interests and legal obligations | Security logs retained for incident detection and investigation, pending approval |
| Support and communications | Contact, support, notification preferences | Legitimate interests / consent where required | Contact enquiries retained while the enquiry is active and for follow-up records, pending approval |
| Legal claims | Audit, contract and dispute records | Legal claims and compliance | Audit events retained for security, accountability and legal claims, pending approval |
6. Legitimate interests#
Legitimate interests include securing the service, preventing abuse, preserving audit evidence, supporting business communications and improving B2B workflows.
7. Recipients#
Recipients are limited to those who need data for service provision, legal duties, security or approved business operations.
- Involved shipper/carrier counterparties
- Company administrators and members
- Service providers
- Hosting and storage
- Monitoring
- Professional advisers
- Authorities
- Acquirers/restructuring parties where applicable
8. Subprocessors#
The subprocessor page records the approved production provider register. Development does not publish a production provider list.
9. International transfers#
Cargaris intends EEA-oriented processing where practical. If transfers occur, appropriate safeguards such as adequacy decisions or SCCs must be used.
10. Retention#
Retention periods are configurable and require owner/legal approval before public launch.
- account: Account lifetime plus legally required limitation periods, pending approval
- company: Company lifetime plus legal and audit requirements, pending approval
- operational: Operational records retained for contract, dispute and audit needs, pending approval
- documents: Delivery and verification documents retained for operational/legal duties, pending approval
- messages: Messages retained for the configured company retention period and dispute evidence, pending approval
- audit: Audit events retained for security, accountability and legal claims, pending approval
- securityLogs: Security logs retained for incident detection and investigation, pending approval
- contact: Contact enquiries retained while the enquiry is active and for follow-up records, pending approval
- marketing: Marketing preferences retained until withdrawn or no longer needed, pending approval
- backups: Backups retained on an approved operational schedule, pending approval
11. Data-subject rights#
Individuals may exercise GDPR rights subject to legal conditions and identity verification.
- Access
- Rectification
- Erasure
- Restriction
- Portability
- Objection
- Withdrawal of consent
- Complaint
- Human review where applicable
12. Requests#
Use the privacy request form. Cargaris will provide a reference and may request identity verification through a secure process.
13. Security#
Cargaris applies reasonable technical and organisational controls but cannot guarantee absolute security.
14. Automated decision-making#
Matching, ranking and analytics are decision-support tools. Final award decisions are made by company users where the current workflow applies.
15. Children#
The service is B2B and is not intentionally offered to children.
16. Complaints and contact#
Supervisory authority: .
17. Policy changes#
Privacy notice changes are versioned and communicated where appropriate.
Contact
- Responsible entity
- Registered address
- Legal
- Privacy
- Security
- Supervisory authority