Privacy policy

This policy explains how personal data is handled on this website, in line with the UK GDPR and Data Protection Act 2018, the EU GDPR (for users in France), and the Hong Kong Personal Data (Privacy) Ordinance.

Who we are

Logiboard, 35 rue Faidherbe. Data protection contact: erez.yeho@gmail.com.

Our role

For the booking data uploaded by freight forwarders, each forwarder is the controller and we act as its processor under a Data Processing Agreement. For user accounts, security logs and this website, we are the controller.

What we collect

• Account data: name, work email, role, organisation, language, time zone, password (stored only as an Argon2id hash).
• Security data: sign-in times, IP address, browser type, trusted devices, and an activity log of uploads, downloads and account changes.
• Business data in uploaded files: shipments, factories, consignees and carriers. These files are about companies, but may contain names of individuals in comment fields.

Why, and on what legal basis

• To provide the service to forwarders and their clients (performance of a contract, and the forwarder's instructions).
• To secure accounts and detect misuse (legitimate interest in keeping the service and the data safe).
• To meet legal obligations, such as responding to authorities.

How long we keep it

• Previous daily files: 30 days. The current file: as long as the client is active, and at most 3 years after its last upload.
• Accounts: until deleted by an administrator; then erased within 30 days, including from backups as they expire.
• Activity log: 12 months. Backups: 30 days.

Who can see it

Clients see only their own data; forwarders see only their own clients; administrators of the service see everything to run it. Our service providers are the hosting provider (Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany) and the email provider used to send sign-in codes and invitations. We do not sell data or use it for advertising.

International transfers

The service is hosted in the European Union. Where data is accessed from or transferred to Hong Kong or another country without an adequacy decision, we use the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.

Security

Encrypted connections (HTTPS), two-step sign-in with an emailed code, hashed passwords, strict separation of each client's data, rate limiting, an activity log, and encrypted backups.

Your rights

You can ask to access, correct, erase or export your personal data, to restrict or object to its processing, by writing to erez.yeho@gmail.com. We answer within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk), the French CNIL (cnil.fr), or the Hong Kong PCPD (pcpd.org.hk).

Data breaches

If a breach affects personal data, we inform the affected forwarders without undue delay so that they can meet their own 72-hour notification duty, and we notify the regulators ourselves where we are the controller.