Privacy Policy.

1. Who We Are

ClearCargo AS (“ClearCargo”, “we”, “us”) is responsible for the processing of personal data described in this policy.

Privacy contact: our contact page.

2. Our Role

• Controller: We are the controller for personal data we process about website visitors, platform users, prospects and business contacts.
• Processor: When customers submit shipment data to the ClearCargo platform, we process any personal data it contains on behalf of the customer, under a data processing agreement. In these cases, the customer is the controller and should be contacted regarding that data.

3. Personal Data We Process

• Contact and account data: name, email address, company, job title, login credentials.
• Communication data: messages and support requests you send us.
• Technical and usage data: IP address, device and browser information, and platform usage logs.
• Shipment data (as processor): shipment data is primarily operational and does not typically contain personal data. Where it does, for example consignee details, we process it only to deliver the service and do not retain it longer than necessary for that purpose.

4. Purposes and Legal Basis

• Providing the platform and user accounts: performance of a contract (GDPR Art. 6(1)(b)).
• Responding to enquiries and access requests: legitimate interest (Art. 6(1)(f)) in communicating with prospects and customers.
• Security, operation and improvement of the website and platform: legitimate interest (Art. 6(1)(f)).
• Analytics cookies: consent (Art. 6(1)(a)).
• Compliance with legal obligations, such as accounting: legal obligation (Art. 6(1)(c)).

5. Sharing

We do not sell personal data. We share personal data only with:

• service providers who host and operate our systems on our behalf (a list of sub-processors is available on request);
• logistics partners, such as customs brokers and handlers, where the customer has instructed us to share data as part of the service;
• authorities, where required by law.

6. International Transfers

We primarily process data within the EU/EEA. Where data is transferred outside the EU/EEA, we ensure an adequate level of protection through an adequacy decision by the European Commission or the EU Standard Contractual Clauses.

7. Retention

• Account data: for the duration of the customer relationship and up to 12 months thereafter.
• Enquiries and communication: up to 24 months after last contact.
• Technical logs: up to 90 days.
• Accounting records: as required by the Norwegian Bookkeeping Act (bokføringsloven).

8. Security

We use appropriate technical and organisational measures to protect personal data, including access control, encryption and monitoring.

9. Your Rights

You have the right to request access to, correction of, or deletion of your personal data, and to request restriction of processing or data portability. You may object to processing based on legitimate interest, and withdraw consent at any time. Send your request through our contact page; we respond within one month.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet), www.datatilsynet.no.

10. Cookies

We use necessary cookies to operate the website and platform. Analytics cookies are only used with your consent. We do not currently set analytics cookies; if that changes, we will ask for your consent first and give you a way to withdraw it.

11. Changes

We may update this policy. The current version is always available on this page.

End of Privacy Policy // ClearCargo AS