Privacy Policy

Suply Ltd. ("Suply", "we", "us", or "our") operates the CargoPilot platform. We are registered in England and Wales and our registered office is at 20 Wenlock Road, London, United Kingdom.

We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For privacy enquiries, contact our Data Protection lead at service@suply.ai.

We collect the following categories of personal data:

• Account data: Name, email address, job title, organisation name, and password (hashed).
• Usage data: Pages visited, features used, browser type, IP address, and timestamps.
• Shipment data: Container numbers, tracking identifiers, and logistics data associated with your shipments.
• Communication data: Messages sent through the in-app chat feature and support correspondence.
• Profile data: Profile pictures and preferences you set within the platform.

We process your personal data for the following purposes and legal bases:

• Providing the Service (contract performance): creating and managing your account, delivering shipment tracking and alerts, processing your data as instructed.
• Improving the Service (legitimate interests): analysing usage patterns, diagnosing errors, and developing new features.
• Communications (legitimate interests / consent): sending transactional emails (alerts, daily briefings), product updates, and marketing communications where you have opted in.
• Legal compliance (legal obligation): retaining records as required by law, responding to lawful requests from authorities.

We do not sell your personal data. We may share data with:

• Service providers acting as processors on our behalf, including cloud hosting, email delivery (Brevo), and customer support platforms (Crisp), each bound by data processing agreements.
• Within your organisation — other users in your organisation's account may see your name, email, and profile picture.
• Legal authorities where required by applicable law.

We retain your personal data for as long as your account is active or as needed to provide the Service. After account termination, we retain data for up to 90 days before deletion, except where longer retention is required by law.

Shipment records and associated telemetry data are retained for the duration of your subscription and up to 12 months thereafter to support any disputes or queries.

If we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy decisions or standard contractual clauses approved by the Information Commissioner's Office (ICO).

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten") in certain circumstances.
• Restrict processing of your data.
• Portability — receive your data in a structured, machine-readable format.
• Object to processing based on legitimate interests.
• Withdraw consent at any time for processing based on consent.

To exercise any of these rights, email service@suply.ai. We will respond within 30 days. You also have the right to lodge a complaint with the ICO (ico.org.uk).

We use essential cookies to maintain your login session and preferences. We do not use third-party advertising cookies. You can control cookie settings through your browser, though disabling essential cookies will prevent you from using the Service.

We implement appropriate technical and organisational measures to protect your personal data. For details, see our Security page.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or in-app notification at least 14 days before the changes take effect.