This Privacy Policy explains how LogistiCore Technologies Ltd (“LogistiCore”, “we”, “us”) collects, uses, stores and shares personal data when you visit our websites, enquire about our services, use LogistiCore SaaS, or interact with us on LinkedIn and other channels.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
LogistiCore Technologies Ltd is a UK company providing:
- LogistiCore SaaS — freight forwarding, customs, warehouse, documents, billing and related logistics software;
- Complementary IT support, managed services and website services;
- Marketing websites and tools at logisticoreapp.com and related domains (including app.logisticoreapp.com).
For most website, sales and account-administration data, we act as a controller. Where a customer uses LogistiCore SaaS to process their own operational data (for example shipper/consignee details on jobs or customs filings), we typically act as a processor under a customer contract / Data Processing Addendum. This policy describes controller processing; processor terms are set out in the customer agreement and DPA.
2. Scope
This policy covers personal data relating to:
- Website visitors and enquirers;
- Prospects, customers, partners and suppliers (business contacts);
- Users of LogistiCore SaaS (login accounts, support tickets, billing contacts);
- People who connect third-party accounts (for example LinkedIn) to publish content for LogistiCore;
- Applicants and other individuals who contact us.
3. Data we collect
3.1 Information you provide
- Identity and contact details (name, job title, company, email, phone, postal address);
- Enquiry and form content, demo requests, partner applications;
- Account credentials and profile settings for SaaS users;
- Billing and payment-related details (processed via payment providers where used);
- Support correspondence and call notes;
- Marketing preferences (opt-in / opt-out).
3.2 Information from customers’ freight operations (processor role)
When customers use the platform, they may upload or generate shipment, party, document, customs, warehouse and financial records. That content may include personal data about their staff, customers or trading partners. We process it on their instructions to deliver the service.
3.3 Information collected automatically
- Device and browser type, IP address, approximate location derived from IP, referring URLs;
- Pages viewed, timestamps and basic usage logs needed for security and reliability;
- Authentication and audit logs inside the SaaS (who accessed or changed what, and when).
3.4 Information from third parties
- Public business directories and LinkedIn company/member profile information you choose to share when connecting an account;
- Government systems where you instruct us to integrate (for example HMRC CDS / Making Tax Digital APIs), limited to what those APIs return for authorised requests;
- Payment and banking providers confirming payment status.
4. How we use data
- Respond to enquiries, book demos and provide quotes;
- Create and administer SaaS accounts, tenancies and user access;
- Deliver freight, customs, warehouse, document, billing and related platform features;
- Provide IT support, websites and professional services where contracted;
- Send service notices (security, downtime, product changes) and, where permitted, marketing communications;
- Improve products, fix bugs, monitor abuse and protect our systems;
- Meet legal, regulatory, tax and accounting obligations;
- Publish approved content to LinkedIn (personal and/or company Page) when you connect publishing access;
- Establish, exercise or defend legal claims.
5. Lawful bases
| Purpose | Typical lawful basis |
|---|---|
| Responding to enquiries and providing contracted services | Contract (Art 6(1)(b)) or steps prior to contract |
| Operating SaaS accounts and security | Contract; legitimate interests (secure service) |
| Customer freight/customs data inside SaaS | Processed as processor on customer instructions; customer determines the basis |
| Direct marketing to business contacts | Legitimate interests and/or consent where required; always with unsubscribe |
| LinkedIn OAuth / publishing | Consent / contract (you authorise the connection) |
| Legal, tax, HMRC filings you instruct | Legal obligation and/or contract |
| Fraud prevention and network security | Legitimate interests |
Where we rely on legitimate interests, we balance those interests against your rights. You may object to processing based on legitimate interests (see section 12).
6. Sharing and processors
We do not sell personal data. We share it only with:
- Service providers who host or support our systems under contract;
- Professional advisers (legal, accounting) under confidentiality;
- Regulators or authorities where required by law or where you instruct an integration (for example HMRC);
- Business successors in a merger, acquisition or restructuring, subject to appropriate safeguards.
Typical infrastructure and support processors include (subject to change; customer DPAs list current sub-processors where we act as processor):
| Provider | Role | Region (typical) |
|---|---|---|
| Fly.io | Application hosting and managed database | UK / EU |
| Cloudflare | CDN, DNS, security, object storage (R2) | UK / EU / global edge |
| Email delivery providers (e.g. transactional email) | Service and marketing email | UK / EU |
| Payment providers (e.g. Stripe), where used | Card / payment processing | UK / EU |
| LinkedIn Ireland / LinkedIn Corporation | OAuth and content publishing when connected | EEA / US with safeguards |
| HMRC | Customs / tax APIs when you authorise filings | UK |
7. LinkedIn and social publishing
If you connect a LinkedIn account or company Page to LogistiCore (or a related developer application we operate) so we can schedule or publish posts:
- We receive tokens and profile/organisation identifiers needed to publish content you approve;
- We use that access only to create, schedule, list or delete posts you request, and to maintain the connection;
- We do not use LinkedIn credentials to scrape networks, send connection requests, or send unsolicited InMails;
- You can disconnect access at any time in LinkedIn (Settings → Data privacy → Other applications) and by asking us to revoke stored tokens;
- LinkedIn’s own processing is governed by LinkedIn’s privacy policy.
8. Cookies and analytics
Our marketing site is primarily static. We may use:
- Strictly necessary cookies or local storage for security, load balancing or remembering basic preferences;
- Analytics tools (if enabled) to understand aggregate traffic — where required we will seek consent before non-essential cookies.
You can control cookies through your browser settings. Blocking some cookies may affect site features.
9. Retention
- Sales enquiries: typically up to 24 months after last meaningful contact, unless a longer relationship continues;
- Customer contracts and billing records: for the life of the contract plus up to 7 years for legal/tax retention;
- SaaS operational data: for the subscription term and a short wind-down / export period set in the customer agreement (commonly deletion or return within 30 days of termination unless law requires longer);
- Security and audit logs: typically 12–24 months unless needed for an investigation;
- LinkedIn tokens: until you disconnect or the connection expires;
- Marketing suppressions: kept as needed to honour opt-outs.
10. Security
We apply technical and organisational measures appropriate to the risk, including TLS encryption in transit, encryption at rest for stored objects where provided by our infrastructure, role-based access control, multi-factor authentication for privileged access, logging, backups and least-privilege administration. No method of transmission or storage is perfectly secure; please use strong unique passwords and protect your account credentials.
11. International transfers
Primary production processing is intended to stay in the UK/EEA where practicable. Where a provider processes data outside the UK, we use appropriate safeguards such as UK adequacy regulations, the UK International Data Transfer Agreement / Addendum, or Standard Contractual Clauses, together with provider security commitments.
12. Your rights
Under UK GDPR you may have the right to:
- Access your personal data;
- Rectify inaccurate data;
- Erase data in certain circumstances;
- Restrict or object to certain processing (including direct marketing and some legitimate-interest processing);
- Data portability where processing is based on consent or contract and is automated;
- Withdraw consent where processing is consent-based, without affecting prior lawful processing;
- Not be subject to solely automated decisions with legal or similarly significant effects (we do not use such decision-making for website visitors).
To exercise these rights, email support@logisticoreapp.com. We may need to verify your identity. We aim to respond within one month.
If you are a data subject of a LogistiCore customer (for example named on a shipment), please contact that customer first — they are usually the controller for that data.
13. Children
Our services are aimed at businesses and professionals. We do not knowingly collect personal data from children under 16. If you believe a child has provided data, contact us and we will delete it.
14. Changes
We may update this policy from time to time. The “Effective date” above will change when we do. Material changes will be highlighted on this page or notified to account contacts where appropriate.
15. Contact and complaints
LogistiCore Technologies Ltd
31 Red Oaks Drive, Park Gate, Hampshire, SO31 1DQ, United Kingdom
Email: support@logisticoreapp.com
Sales: sales@logisticoreapp.com
Phone: +44 (0) 20 4511 4156
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO): ico.org.uk. We would appreciate the chance to resolve concerns first.