Privacy Policy & Telemetry Protection

1. Data Controller Information

This Privacy Policy explains how VELORA Shipping LLC ("VELORA", "we", "us", or "our"), headquartered in Middletown, Delaware, acts as the Data Controller responsible for personal data processed through our websites, freight booking portals, mobile applications, and IoT shipment telemetry infrastructure.

We adhere to the highest standards of confidentiality and data minimization, ensuring trade secrets, manifest contents, and commercial values are safeguarded against unauthorized disclosure.

2. Categories of Information We Collect

In operating a global multimodal logistics network, we process the following data categories:

• Shipper & Receiver Information: Full names, corporate entities, physical delivery addresses, billing coordinates, email addresses, and direct dispatch telephone numbers.
• Customs & Regulatory Documentation: Commercial invoices, packing lists, harmonized system (HS) codes, tax identification numbers (EIN, VAT, EORI), and export declarations.
• Media & Verification Artifacts: Photographs and video inspection recordings uploaded during quote requests or intake surveys to verify dimensions, packaging condition, and hazardous marks.
• Transaction & Billing Records: Wire transfer identifiers, encrypted credit tokens, customs duty disbursements, and commercial credit rating documentation.

3. IoT Sensor & Telemetry Data Governance

VELORA equips high-value, pharmaceutical cold chain, and aerospace cargo with integrated IoT sensory monitors. These smart telemetry units record:

• Real-time satellite GPS coordinates and transit velocity.
• Environmental metrics (cryogenic/refrigerated temperature, ambient humidity, atmospheric pressure).
• Physical event telematics (tilt angle, shock g-force thresholds, light exposure indicating unauthorized container breach).

4. Lawful Basis & Purposes of Processing

We process personal and commercial data under the following legal bases:

• Performance of Contract (Art. 6(1)(b) GDPR): To book air cargo, charter ocean vessels, clear customs, dispatch ground drayage, and provide real-time milestone notifications.
• Compliance with Legal Obligations (Art. 6(1)(c) GDPR): Mandatory reporting to US Customs & Border Protection (AMS / ACE manifests), European Import Control System (ICS2), and maritime safety declarations.
• Legitimate Interests (Art. 6(1)(f) GDPR): Fraud detection, cargo security, continuous platform improvement, and responsive customer service through our live support desk and AI concierge.

5. Third-Party Sharing & International Transfers

VELORA does not sell, rent, or trade customer information. We disclose operational data strictly to vetted logistics partners essential for freight movement:

• Contracted Carriers: Commercial airlines, container ocean shipping lines, railway freight operators, and licensed ground hauliers.
• Customs & Port Authorities: Border security agencies, port terminal operators, and bonded warehouse custodians in origin and destination nations.
• Underwriters & Surveyors: Marine cargo insurance adjusters in the event of filed claims.

Cross-border data transfers outside the EEA/UK are governed by standard contractual clauses (SCCs) ensuring equivalence of protection under EU Court of Justice benchmarks.

6. Security Standards, Encryption & Data Retention

VELORA implements defense-in-depth cybersecurity infrastructure to safeguard your operational data:

• Data in Transit: Transport Layer Security (TLS 1.3) encryption across all public web forms, APIs, and client dashboards.
• Data at Rest: AES-256 bit encryption for all database records, quote documents, uploaded cargo imagery, and waybills.
• Access Controls: Role-Based Access Control (RBAC), multi-factor authentication for dispatch staff, and immutable audit logs.
• Retention Schedule: Customs trade records are preserved for the statutory minimum of 5 years (US CBP) or 7 years (EU/HMRC), after which records are cryptographically scrubbed.

7. GDPR, CCPA/CPRA & Global Privacy Rights

Depending on your geographic residency, you possess enforceable data rights:

• Right of Access & Portability: Obtain a structured, machine-readable export of all data associated with your shipments.
• Right to Rectification: Request correction of inaccurate consignee contact or business records.
• Right to Erasure ("Right to be Forgotten"): Request deletion of non-statutory personal data, subject to mandatory customs retention laws.
• Non-Discrimination: California residents will never face altered freight pricing or degraded service for exercising privacy rights.

8. Cookies & Data Protection Officer Contact

Our platform utilizes strictly necessary session cookies for portal authentication and CSRF token protection, along with anonymous performance cookies to monitor site load latency. We do not engage in third-party behavioral advertising or cross-site tracking trackers.

To exercise your privacy rights, file a formal data subject access request (DSAR), or inquire regarding our data processing policies, contact our Data Protection Officer: