Privacy Policy
How we collect, use, and protect your data under GDPR, CCPA, and applicable laws.
support@coliveloshipping.comJump to a section
Data Controller#
Colivelo Shipping is the data controller for personal data collected through this website and in the course of providing shipping and logistics services. Colivelo Shipping is registered in the United States and operates in compliance with the EU General Data Protection Regulation (GDPR) (Regulation 2016/679), the California Consumer Privacy Act (CCPA) as amended by the CPRA, and other applicable data protection laws.
For GDPR-related inquiries, contact our Data Protection Officer at support@coliveloshipping.com.
Personal Data We Collect#
We collect the following categories of personal data:
- Identification data: Full name, job title, company name, business address, phone number, and email address provided when you request a quote, create an account, or contact us.
- Shipment data: Origin and destination addresses, commodity descriptions, customs documentation, and Consignee contact details necessary to arrange transportation.
- Payment data: Billing address, credit card last four digits, and payment confirmation status. We do not store full credit card numbers — payments are processed by PCI-DSS compliant payment processors.
- Usage data: IP address, browser type, pages visited, and interaction data collected through cookies and analytics tools. See our Cookie Policy for details.
- Communications: Email and chat correspondence between you and Colivelo for the purpose of providing customer support and handling claims.
Legal Basis for Processing (GDPR)#
Under Article 6 of the GDPR, we process personal data on the following legal bases:
- Contractual necessity (Art. 6(1)(b)): Processing your identification and shipment data to provide the transportation services you have requested.
- Legal obligation (Art. 6(1)(c)): Retaining shipment records, customs documentation, and transaction data as required by customs authorities, tax laws, and FMC regulations.
- Legitimate interests (Art. 6(1)(f)): Analyzing usage data to improve our website, detecting fraud, and maintaining network security.
- Consent (Art. 6(1)(a)): Processing personal data for marketing communications and non-essential cookies. You may withdraw consent at any time.
Purposes of Processing#
We use your personal data to:
- Provide and manage shipping services, including quoting, booking, tracking, and delivery.
- Process payments and issue invoices.
- File customs entries and comply with regulatory requirements.
- Communicate with you about your shipments, account, and service updates.
- Detect and prevent fraud, misuse, and security incidents.
- Improve our website, services, and customer experience through analytics.
- Comply with legal, tax, and regulatory obligations.
Data Retention#
We retain personal data only for as long as necessary to fulfill the purposes described above:
| Data category | Retention period |
|---|---|
| Shipment and customs records: | 7 years, as required by customs regulations and tax law. |
| Account data: | For the duration of the customer relationship, plus 3 years after the last transaction. |
| Marketing data (with consent): | Until consent is withdrawn. |
| Usage data: | 26 months for analytics purposes. |
| Claim records: | 7 years after claim closure. |
Data Sharing and Recipients#
We share personal data with the following categories of recipients, only to the extent necessary to provide the Services:
- Carriers: Ocean carriers, motor carriers, airlines, and rail carriers for the purpose of transporting your shipment.
- Customs authorities: U.S. Customs and Border Protection (CBP), EU customs authorities, and other regulatory bodies for entry filing and compliance.
- Warehousing partners: Third-party warehouse operators handling your cargo.
- Insurance providers: Cargo insurance underwriters for the purpose of issuing certificates and processing claims.
- Payment processors: PCI-DSS compliant processors for handling credit card and bank transactions.
- IT service providers: Cloud hosting, analytics, and email service providers operating under data processing agreements (DPAs) compliant with GDPR Article 28.
We do not sell your data. Under the CCPA, "sale" does not include sharing data with service providers who are bound by contractual obligations to use the data only for the purposes we specify.
International Data Transfers#
Colivelo Shipping is a U.S.-based company and may transfer personal data to recipients outside the EU/EEA and the UK. Such transfers are made in reliance on:
- Standard Contractual Clauses (SCCs) as adopted by the European Commission, incorporated into data processing agreements with third-party recipients.
- The EU-U.S. Data Privacy Framework (DPF), where the recipient is self-certified under the DPF.
- Adequacy decisions, where the recipient is located in a country recognized by the European Commission as providing an adequate level of data protection.
Your Rights Under GDPR#
If you are located in the EU or EEA, you have the following rights regarding your personal data:
Right of access (Art. 15):Request a copy of your personal data.
Right to rectification (Art. 16):Request correction of inaccurate or incomplete data.
Right to erasure (Art. 17):Request deletion of your personal data, subject to legal retention obligations.
Right to restrict processing (Art. 18):Request that we limit the processing of your data.
Right to data portability (Art. 20):Receive your data in a structured, machine-readable format and transmit it to another controller.
Right to object (Art. 21):Object to processing based on legitimate interests or for direct marketing.
Right to withdraw consent (Art. 7(3)):Withdraw consent for processing that relies on consent at any time.
Right to lodge a complaint:With your local data protection authority or the supervisory authority in the EU member state where you reside.
To exercise these rights, contact us at support@coliveloshipping.com. We will respond within 30 days as required by Article 12(3) of the GDPR.
Your Rights Under CCPA/CPRA#
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
- Right to know: Request disclosure of the categories and specific pieces of personal data we have collected about you.
- Right to delete: Request deletion of your personal data, subject to exceptions for legal retention.
- Right to correct: Request correction of inaccurate personal data.
- Right to opt out of sale or sharing: We do not sell personal data. You may opt out of "sharing" (targeted advertising) by disabling cookies.
- Right to limit use of sensitive personal information: We do not collect sensitive personal information as defined by CPRA beyond what is necessary for shipping services.
- Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise these rights, submit a request to support@coliveloshipping.com. We will verify your identity before responding and will comply within 45 days as required by CCPA.
Children's Data#
Our Services are intended for business use. We do not knowingly collect personal data from children under 16 years of age. If you believe we have collected data from a child under 16, contact us at support@coliveloshipping.com and we will delete it promptly.
Data Security#
We implement appropriate technical and organizational measures to protect personal data from unauthorized access, disclosure, alteration, or destruction. These measures include: TLS encryption for data in transit, encryption at rest for stored data, access controls and role-based permissions, regular security audits, employee training on data protection, and incident response procedures.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33, and will notify affected individuals without undue delay under GDPR Article 34.
Cookies#
We use cookies and similar technologies to operate our website, analyze traffic, and improve user experience. For details on the types of cookies we use and how to manage your preferences, see our Cookie Policy.
Changes to This Policy#
We may update this Privacy Policy from time to time. Material changes will be communicated by email to active Shippers and by posting a notice on our website at least 30 days before the changes take effect.
Data protection inquiries:
Data protection inquiries:
Email support@coliveloshipping.com (GDPR) or support@coliveloshipping.com (CCPA) or call +1 463-282-7139.