Do Not Share My Personal Information

Suply Ltd. does not sell your personal information to third parties. We do not and will not sell, rent, or trade your personal data with advertisers, data brokers, or any other commercial third parties.

This page explains the limited circumstances in which we may share your personal information and how you can exercise your rights to restrict or opt out of certain uses of your data.

We share personal information only in the following limited circumstances:

• Service delivery: We share data with trusted service providers ("sub-processors") who help us operate CargoPilot, such as cloud infrastructure providers, email delivery services, and customer support tools. These providers process data only as we instruct and are contractually prohibited from using your data for their own purposes.
• Within your organisation: Members of your organisation on the CargoPilot platform may see your name, email address, and profile picture as part of collaboration features.
• Legal requirements: We may disclose personal information where required to do so by law or in response to valid legal process from competent authorities.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your data may be transferred as part of that transaction. We will notify you before your personal data becomes subject to a different privacy policy.

If you are located in the United Kingdom or the European Economic Area, you have the following rights regarding your personal data:

• Right to access: You may request a copy of the personal data we hold about you.
• Right to erasure: You may request that we delete your personal data where we no longer have a lawful basis to retain it.
• Right to restrict processing: You may ask us to limit how we use your data.
• Right to data portability: You may request your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to our processing of your data where we rely on legitimate interests as the legal basis.

If you are a California resident, you have the right under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) to:

• Know what personal information we collect, use, disclose, or share.
• Delete personal information we have collected from you, subject to certain exceptions.
• Opt out of the "sale" or "sharing" of your personal information (as those terms are defined under CCPA/CPRA).
• Correct inaccurate personal information.
• Limit the use and disclosure of sensitive personal information.
• Non-discrimination for exercising any of the above rights.

As stated above, Suply Ltd. does not sell or share your personal information for cross-context behavioural advertising. However, you may still submit a request using the contact details below to confirm this or to exercise any of the rights listed.

If you have opted in to receive marketing communications from us, you can unsubscribe at any time by clicking the unsubscribe link in any marketing email we send you, or by contacting us directly.

Opting out of marketing communications will not affect transactional messages such as shipment alerts, daily briefings, or account notifications which are required to provide the Service.

To submit a request to access, delete, restrict, or opt out of the sharing of your personal information, please contact us using any of the following methods:

• Email: service@suply.ai
• Post: Suply Ltd., 20 Wenlock Road, London, United Kingdom

We will verify your identity before processing any request and will respond within 30 days (or within the timeframe required by applicable law). You may designate an authorised agent to submit requests on your behalf; the agent must provide written proof of authorisation.