Privacy Policy

Last updated: 15 May 2026

CargoTrak ("we", "us") operates the cargo management platform at https://cargotrak.co.uk. This policy explains what personal data we collect, why we collect it, how we share it with third parties, and the rights you have over your data.

1. Data we collect

• Account data: name, phone number, email address, role and tenant (organisation) association.
• Authentication data: WhatsApp one-time codes, password hashes, login timestamps, IP address and user agent.
• Operational data: shipments, manifests, HBLs, tracking events, scan records and notification logs you create while using CargoTrak.
• Billing data: handled by Stripe — we store only your Stripe customer ID and subscription status. No card numbers reach our servers.

2. How we use your data

• Provide and operate the cargo management service you signed up for.
• Send transactional WhatsApp messages: login OTPs, account invites, shipment status updates, security alerts.
• Process subscriptions and respond to support requests.
• Detect abuse, fraud and security incidents.

3. WhatsApp & Meta

Account messages (login OTPs, invites, alerts) are delivered through Meta's WhatsApp Business Platform. By using CargoTrak you consent to your phone number being shared with Meta solely for delivery of these transactional messages. Meta's own data policies apply to the message-routing layer.

4. Third-party sub-processors

• Stripe — payment processing.
• Meta (WhatsApp Business Platform) — transactional messaging.
• Railway / cloud hosting — application + database hosting.
• Google (OAuth, optional) — sign-in for tenants who choose it.

5. Data retention

Operational records (shipments, HBLs, manifests) are retained for the life of your subscription plus 30 days after cancellation, after which they are permanently deleted. Authentication logs are retained for 90 days for security audit purposes.

6. Your rights

Under UK GDPR you can request access to, correction of, or deletion of your personal data, and you can object to or restrict processing. Contact us at [email protected] and we'll respond within 30 days.

7. Cookies

We use a single first-party session cookie to maintain sign-in. No third-party advertising or analytics cookies are set on marketing pages.

8. Changes

We may update this policy from time to time. Material changes will be announced via in-app notice. The "Last updated" date at the top reflects the most recent revision.

9. Contact

CargoTrak · United Kingdom · Email: [email protected]