Privacy Policy & Data Compliance

Last Updated: June 11, 2026

Jurisdiction: International

Version: 3.1

Haul Ship Sphere ("we," "our," or "the Company") is committed to protecting your privacy. This Privacy Policy describes the types of information we collect from you when you interact with our website, tracking portals, courier systems, and associated logistics services, and how that information is used, shared, and safeguarded.

Section 1

Information We Collect

We collect personal information to provide, maintain, and improve our logistics services. The categories of data we collect include:

Identity Information: Full name, date of birth, government-issued identification numbers for customs clearance purposes.
Contact Details: Email address, phone number, residential and business mailing addresses.
Shipment Data: Package dimensions, weight, declared value, origin and destination addresses, tracking manifests, and delivery preferences.
Account Credentials: Username, encrypted password hashes, security questions, and session tokens for our tracking portals.
Payment Information: Billing addresses, credit/debit card details (processed via PCI DSS-compliant payment gateways), and transaction histories.
Technical Data: IP addresses, browser type and version, device identifiers, operating system, access timestamps, and referring URLs.

Section 2

How We Use Your Data

Your personal information is used exclusively for the following legitimate operational purposes:

Shipment Processing: To process, route, track, and deliver your packages through our global hub-and-spoke transit network.
Customer Communication: To send shipment status updates, delivery confirmations, customs clearance notifications, and service alerts via email or SMS.
Account Management: To create and maintain your tracking portal account, authenticate sessions, and manage your service preferences.
Billing & Invoicing: To process payments, generate invoices, manage refunds, and maintain accurate financial records.
Service Improvement: To analyze usage patterns, diagnose technical issues, optimize routing algorithms, and improve customer experience.
Regulatory Compliance: To comply with international customs regulations, tax obligations, anti-money laundering laws, and legal requests from authorities.
Security Operations: To detect fraud, prevent unauthorized access, and protect the integrity of our logistics infrastructure.

Section 3

Tracking Technologies & Cookies

Our website and tracking portals utilize the following technologies to enhance functionality and monitor performance:

Essential Cookies: Required for core site functionality including session management, authentication, and security. These cannot be disabled.
Functional Cookies: Remember your preferences such as language, theme (light/dark mode), and recently tracked shipment numbers.
Analytics Cookies: Collect anonymized usage data to help us understand how visitors interact with our services. We use this data to improve navigation and optimize page load times.
Local Storage: Used to persist user interface preferences (e.g., dark mode settings) and cached tracking query results for faster retrieval.
Server Logs: Our web servers automatically record access logs including IP addresses, request timestamps, HTTP status codes, and user-agent strings for security monitoring.

You can manage or delete cookies through your browser settings. Please note that disabling essential cookies may impair tracking portal functionality.

Section 4

Third-Party Services

In the course of providing our logistics services, we may share limited personal information with the following categories of third parties:

Customs & Regulatory Bodies: Government agencies and customs authorities in origin, transit, and destination countries as required by law for international shipments.
Payment Processors: PCI DSS Level 1 certified payment gateways that process your credit card and billing information securely.
Logistics Partners: Vetted carrier networks, sorting facility operators, and last-mile delivery agents who handle physical package transport under strict data processing agreements.
Cloud Infrastructure: Secure, ISO 27001-certified hosting providers that store and process our systems data with encryption at rest and in transit.
Communication Platforms: Email and SMS service providers used to send transactional shipment notifications and account security alerts.

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

Section 5

Data Security Measures

We implement industry-standard security practices to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

Encryption: All data transmitted between your browser and our servers is protected with TLS 1.3 encryption. Sensitive data at rest is encrypted using AES-256 standards.
Access Controls: Role-based access control (RBAC) ensures only authorized personnel can access customer data, with all access events logged and audited.
Infrastructure Security: Firewalls, intrusion detection systems, and regular penetration testing protect our server infrastructure from external threats.
Data Backups: Encrypted backups are maintained across geographically distributed data centers with automated integrity verification.
Incident Response: A dedicated security team monitors for data breaches 24/7 and has a formal incident response plan to contain and notify affected users within 72 hours.
Employee Training: All staff with access to personal data undergo mandatory data protection training and are bound by confidentiality agreements.

Section 6

Your Rights & Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data under applicable data protection laws (including GDPR, CCPA, and similar regulations):

Right of Access: Request a copy of the personal data we hold about you and information about how it is processed.
Right to Rectification: Request correction of inaccurate or incomplete personal data associated with your account.
Right to Erasure: Request deletion of your personal data, subject to legal retention obligations (e.g., customs records, financial transactions).
Right to Restrict Processing: Request that we limit how we process your data under certain circumstances.
Right to Data Portability: Receive your personal data in a structured, machine-readable format and transfer it to another service provider.
Right to Object: Object to processing based on legitimate interests, including profiling for service optimization purposes.
Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please submit a formal request via our contact channels below. We will respond within 30 calendar days.

Section 7

Contact Information

If you have any questions, concerns, or requests related to this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer:

Haul Ship Sphere — Data Protection Office

privacy@haulshipsphere.com

+44 (0) 20 7946 0958

14 Canary Wharf Tower, London E14 5AB, United Kingdom

You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been infringed. In the UK, this is the Information Commissioner's Office (ICO).

Privacy Policy