Legal information
Privacy Policy
This Privacy Policy explains how personal data may be handled through the BulkBL Tracker public website, account, ocean B/L tracking application, and support communications.
1. Service operator and contact
The operator responsible for the service's own data processing activities is:
- Operator
- Zeeeun,Kang
- Address
- Weserstraße 9A,63225 Langen
- support@bulkbltracker.com
Customers may have their own data-protection responsibilities for shipment information they submit or use through the service.
2. Data we may process
Depending on how the service is used, the following categories of information may be processed:
- Account and identity data: name, business email address, authentication-provider identifier, and basic information supplied through the selected sign-in method.
- Company and workspace data: workspace membership, user role, permissions, and related administration information.
- Shipment data: B/L numbers, carrier details, and other shipment references entered or uploaded by users.
- Tracking and report data: shipment statuses, dates, locations, events, tracking results, changes, history, and generated Shipment Reports.
- Operational account records: account registration, usage credits, service usage, and related account records.
- Support communications: information provided when a customer requests help or makes another service-related request.
- Technical and security data: IP address, timestamps, browser or device information, authentication and session data, security logs, and similar information reasonably generated when the service is used.
B/L and shipment data concerns business operations but may include personal data in some circumstances. Customers should submit only information they are authorized to use and that is necessary for the requested tracking workflow.
3. Where data comes from
Information may come from users, their company or workspace administrator, the Microsoft or Google sign-in method they select, external ocean-shipment tracking infrastructure, and technical systems used to operate and secure the service.
4. Why we process data
We may process information for the following purposes:
- authenticating users and protecting accounts;
- administering company workspaces, memberships, roles, and permissions;
- registering or uploading B/L numbers and requesting tracking refreshes;
- displaying Active Shipments, changes, and attention items;
- generating downloadable Shipment Reports in Excel;
- maintaining tracking, refresh, and change history;
- administering operational credits and account usage;
- preventing misuse and investigating security events;
- responding to support communications; and
- meeting legal and recordkeeping obligations where applicable.
5. Legal bases where the GDPR applies
Where the General Data Protection Regulation applies, processing may be based on:
- Contract or pre-contract steps: where processing is needed to provide a requested account, tracking workflow, Shipment Report, or support.
- Legitimate interests: where appropriate for operating and securing the B2B service, supporting customers, preventing misuse, or handling legal claims, taking affected individuals' rights into account.
- Legal obligations: where applicable law requires processing or records.
- Consent: only where consent is specifically requested. Consent can be withdrawn for the future.
Not every legal basis applies to every activity. Selecting Microsoft or Google is a choice of sign-in method, not consent to unrelated processing. Customers remain responsible for the legal basis for personal data they submit.
6. Providers and other recipients
Depending on the feature used, BulkBL Tracker may rely on:
- Supabase for authentication and database infrastructure;
- Streamlit Community Cloud for application hosting;
- Microsoft or Google when a user selects the corresponding sign-in method;
- Cloudflare for public website, domain, web-delivery, and related security infrastructure;
- Brevo for transactional authentication-email delivery; and
- external ocean-shipment tracking or data-provider infrastructure to retrieve tracking information requested by customers.
The information handled by each provider depends on the selected feature and current configuration. Listing a provider does not mean that every provider receives every category of data. Authorized users and administrators may also see workspace information according to their permissions. Information may be disclosed when required by law or reasonably necessary to protect the service, users, or others.
7. International data transfers
Provider infrastructure may involve processing outside the user's country or the European Economic Area. Where the GDPR applies, transfers are handled as required by applicable law.
8. Retention
Information is retained only as reasonably necessary to provide the service, administer customer accounts and the business relationship, maintain requested tracking history, protect the service, keep legitimate records, meet legal obligations, or handle disputes. The period depends on the type of information and why it is held.
9. Cookies, local storage, and advertising
These static public information pages do not include marketing cookies, advertising trackers, or analytics scripts. Web-delivery and security infrastructure may still process basic request information needed to deliver and protect the pages.
The authenticated application and its authentication or hosting infrastructure may use technically necessary browser or session mechanisms for sign-in and application operation. Personal data is not sold, and customer shipment data is not used for advertising.
10. Security
Reasonable technical and organizational measures are used to protect information in light of the nature of the service and the risks involved. No internet transmission, hosting environment, or storage method can be guaranteed completely secure.
11. Data-protection rights
Where the GDPR applies and subject to its conditions and limitations, individuals may have rights to:
- request access to and a copy of their personal data;
- request correction of inaccurate data;
- request erasure or restriction of processing;
- receive certain data in a portable format;
- object to processing based on legitimate interests;
- withdraw consent for the future where processing is based on consent; and
- lodge a complaint with a competent data-protection supervisory authority.
These rights are subject to GDPR conditions and are not absolute. The Operator may need to verify the requester's identity or keep information where continued processing is permitted or required by law. Requests can be sent to support@bulkbltracker.com.
12. Changes to this policy
This policy may be updated when the service, provider arrangements, or legal requirements change. The current version will be posted here with its updated date. Additional notice may be provided where required by law.
13. Contact
Questions and privacy requests may be sent to support@bulkbltracker.com. See the Imprint for operator details and the Terms of Service for service conditions.