Privacy Policy

This policy explains what ColdLane collects and why.

What we collect

• Account data: your email address, a salted hash of your password, your time zone and display preferences.
• Shipment data: origins and destinations, product type, ship dates, packaging, tracking numbers and tracking events, optional order references, and optional customer names and email addresses you enter.
• Technical data: a keyed hash of your IP address for rate limiting and abuse prevention (we do not store the raw address in our rate-limit records), and standard server logs.
• Billing data: handled by our payment provider. We keep customer and subscription identifiers, not card numbers.

How we use it

To produce risk estimates, watch tracking, send alerts to you and (if enabled) your customer, generate evidence packs, bill you, secure the service and improve transit estimates. Completed delivery durations on a carrier and country-to-country lane are pooled into anonymous aggregates that help estimate transit times for other sellers; the aggregates never include names, addresses, order references or tracking numbers.

Service providers

We rely on trusted providers for hosting and database, maps and weather data, carrier tracking, email delivery, payment processing and text summarisation. They receive only what is needed to perform their function (for example, place names for forecasting, tracking numbers for tracking, and numeric risk figures for summaries). We do not sell personal data.

Cookies

We use one essential, HTTP-only cookie to keep you signed in. We do not use advertising cookies.

Retention and your rights

We keep account and shipment data while your account is active. You can ask us to export or delete your data at any time from the Account page (self-service deletion removes your account, shipments and evidence packs immediately), or by contacting us for an export, subject to legal retention duties. You may also object to or restrict processing where the law gives you that right.

Security

Traffic is encrypted, passwords are hashed, sessions are server-side and revocable, and data is separated per account. No system is perfectly secure; tell us promptly if you suspect a problem.

Customers who receive a warning email

If a seller enabled customer warnings, you may receive a one-time delay notice about your parcel. Contact the seller to stop further messages.