PRIVACY POLICY

Last updated: 24 May 2025

1. Scope

   This Privacy Policy explains how DUMA TRANSPORTATION INC. (“Duma Shipping”) collects, uses, stores and discloses personal information when you visit dumashipping.com, create an account, request a quote or use our Services.

2. Information We Collect

   Category	Examples	Legal basis (GDPR)
   Identity & contact	Name, postal address, phone, email, government-issued ID (for customs)	Contract performance
   Shipment details	Contents, weight, dimensions, declared value, pickup/delivery addresses	Contract performance
   Payment data	Last four digits of card, Stripe transaction ID (processed by Stripe)	Legitimate interest / contract performance
   Usage data	IP address, browser, device ID, pages visited, referring URLs, timestamps	Legitimate interest (analytics, security)
   Cookies	See “Cookie Policy”	Consent / legitimate interest

   We do not knowingly collect data from children under 13.

3. How We Use Your Information

   • Process and manage shipments, pickups and customs documentation
   • Provide status updates, invoices and service messages
   • Verify identity to prevent fraud
   • Improve website performance and customer experience
   • Comply with legal obligations (tax, sanctions screening)

4. Sharing & Disclosure

   • Carriers and logistics partners to fulfil your shipment
   • Stripe and other payment processors for secure payment handling
   • IT vendors providing infrastructure, email or analytics services
   • Authorities when legally required (e.g., customs, law enforcement)

   We never sell your personal information.

5. Storage & Security

   Data is stored on servers located in the United States. We use industry-standard safeguards (encryption in transit, restricted access, regular backups). No method of transmission or storage is entirely secure; you acknowledge this risk.

6. Retention

   We keep shipment records and associated personal data for 7 years to meet accounting and regulatory requirements, then securely delete or anonymize them.

7. Your Rights (GDPR / CCPA)

   Depending on your jurisdiction, you may:

   • Access, correct or delete personal data
   • Object to or restrict processing
   • Receive a portable copy of data
   • Withdraw consent at any time
   • Lodge a complaint with a supervisory authority

   Send requests to privacy@dumashipping.com. We will respond within 30 days.

8. International Transfers

   If you reside outside the United States, your data will be transferred to and processed in the U.S. We rely on contractual clauses and other recognized safeguards.

9. Changes

   Material changes will be posted on our site and, if we have your email, notified directly.

10. Contact

    privacy@dumashipping.com (Full postal address above)