Draft -- not approved for publication

Privacy Policy

This draft describes how Shanghai EUNO International Logistics Co., Ltd. ("ENUO Logistics," "we," "us," or "our") may collect, use, disclose, retain, and protect personal information when individuals visit our website, submit a logistics inquiry, communicate with us by email, or engage us regarding logistics services.

Publication warning

This policy must not be published until legal counsel has reviewed it and ENUO Logistics has confirmed the website's forms, cookies, analytics, hosting, email systems, retention periods, international-transfer safeguards, applicable law, and required statutory disclosures.

Proposed effective date: [CONFIRM BEFORE PUBLICATION]
Last updated: [CONFIRM BEFORE PUBLICATION]

1. Scope and controller

This policy applies to personal information handled through ENUO Logistics' website, logistics inquiry process, email communications, and related pre-contract and service communications. It does not automatically apply to websites or services operated by third parties.

The business identified in this draft is:

Shanghai EUNO International Logistics Co., Ltd.
Area A, Room 201, No. 2388 Hutai Road
Baoshan District, Shanghai, China
Email: alex@euno-logistics.com
Telephone: 021-xxxxxx [INCOMPLETE -- CONFIRM]

[LEGAL REVIEW] Confirm whether Shanghai EUNO International Logistics Co., Ltd. is the sole personal-information controller for all website and inquiry processing. Add any required company registration details, privacy representative, data protection officer, local representative, or other statutory contact information.

2. Information we collect

2.1 Logistics inquiries and quotation requests

When you request information, feasibility support, or a quotation, we may collect information that you choose to provide and information needed to assess the shipment. Depending on the inquiry, this may include:

Your name, employer or business name, job title, country, email address, telephone number, and preferred communication method.
Cargo description, quantity, weight, dimensions, volume, packaging, value, HS code, special attributes, and photographs or drawings.
Origin, destination, cargo-readiness status, requested dates, Incoterm, required service scope, budget, currency, and payment expectations.
Information about decision-makers, operational contacts, factories, suppliers, consignees, importers, agents, or other parties involved in the proposed shipment.
Questions, instructions, supporting files, and other information included in the inquiry.

Please provide only information that is relevant to the inquiry and that you are authorized to share. Do not submit government identification numbers, financial-account credentials, health information, or other sensitive personal information unless we specifically request it for a lawful and necessary purpose.

[TOOL CONFIRMATION] Confirm whether an inquiry form is currently active. Before publication, list its exact fields, required and optional fields, file-upload capability, validation method, spam-prevention technology, recipients, storage location, and form processor. Do not name a form provider until deployment is verified.

2.2 Email and business communications

If you contact us by email, we may process your email address, display name, signature details, message content, attachments, delivery metadata, and our replies. If an inquiry develops into a logistics project, we may also process communications about cargo readiness, pickup, consolidation, documents, customs coordination, transportation milestones, delivery, costs, payment, exceptions, claims, and proof of delivery.

[TOOL CONFIRMATION] Confirm the business email platform, email hosting location, security settings, archiving practices, access permissions, and whether messages are automatically copied into any customer-management or ticketing system. No provider is identified in this draft because none has been verified.

2.3 Technical and device information

A website and its infrastructure may generate technical information such as an IP address, browser type, device type, operating system, access time, requested page, referring page, language setting, diagnostic event, and security log. The exact technical data collected by this website has not yet been confirmed.

[TECHNICAL REVIEW] Complete a data-flow and server-log review. Confirm the hosting provider, content-delivery or security services, log contents, log location, access controls, and deletion schedule before publication.

2.4 Information from business partners

For an inquiry or shipment, we may receive business contact and operational information from customers, factories, exporters, importers, carriers, agents, customs-service providers, warehouses, inspectors, insurers, or other parties involved in the proposed or agreed service. A person providing information about another individual should ensure that the disclosure is lawful and that the individual receives any notice required by applicable law.

3. How we use personal information

We may use relevant personal information to:

Receive, review, qualify, and respond to inquiries.
Assess routes, cargo requirements, packaging, schedules, costs, compliance issues, and operational feasibility.
Prepare, discuss, and revise service options, quotations, contracts, and payment arrangements.
Coordinate factories, pickup, domestic transport, warehousing, consolidation, loading, export procedures, international transportation, destination handling, import coordination, and final-mile delivery.
Provide shipment milestones, operational updates, exception notices, and customer support.
Maintain transaction, accounting, payment, delivery, claim, and reconciliation records.
Protect the website, communications, personnel, customers, and business operations against misuse, fraud, security incidents, and unlawful activity.
Comply with legal, regulatory, customs, tax, accounting, sanctions, export-control, recordkeeping, and lawful authority requirements that apply to a particular transaction.
Establish, exercise, or defend legal claims and resolve complaints or disputes.

[LEGAL REVIEW -- LAWFUL BASES] Identify the lawful basis for each purpose in every relevant jurisdiction. Potential bases may include taking steps at a person's request before a contract, performing a contract, complying with legal obligations, legitimate interests, and consent, but these must not be stated as final until counsel confirms their availability and any required balancing tests or consent language.

4. Cookies and analytics

Cookies are small files stored on a browser or device. Similar technologies may include local storage, tags, pixels, or software identifiers. They can support website operation, security, preferences, audience measurement, or other functions.

Cookie and analytics confirmation status
Category	Current draft status	Required before publication
Essential cookies	Not confirmed	List names, providers, purposes, durations, and whether each is first-party or third-party.
Preferences	Not confirmed	Confirm whether language, display, or user-preference storage is used.
Analytics	No analytics tool verified	Identify the actual tool, collected events, identifiers, settings, provider location, retention, and opt-out method.
Advertising or tracking	Not confirmed	Confirm whether any advertising pixels, profiling, remarketing, or cross-site tracking exists.
Consent management	No consent tool verified	Confirm whether a consent banner is required, how choices are recorded, and how consent can be withdrawn.

This draft does not claim that ENUO Logistics uses any particular analytics, advertising, cookie-consent, or tracking provider. If non-essential technologies are deployed, the published policy and any required consent interface must identify them accurately before they operate where prior consent is required.

Browser controls may allow users to delete or block cookies. Blocking essential storage may affect website functionality. Tool-specific controls and opt-out links must be added only after the relevant tools are confirmed.

[LEGAL AND TECHNICAL REVIEW] Perform a cookie scan on the production website, including before and after any consent choice. Confirm regional consent requirements, cookie duration, default settings, withdrawal controls, and whether "Do Not Track" or legally recognized preference signals must be honored or disclosed.

5. When information may be disclosed

We may disclose relevant information only as reasonably necessary for the inquiry, proposed service, agreed logistics work, business administration, or legal compliance. Recipients may include:

Factories, suppliers, exporters, importers, consignees, and customer-authorized contacts.
Freight forwarders, carriers, airlines, shipping lines, railway or road operators, local agents, warehouses, ports, terminals, packing providers, surveyors, inspectors, insurers, and final-mile providers.
Customs brokers, customs authorities, port authorities, regulators, courts, law-enforcement bodies, and other competent authorities where required or permitted by law.
Professional advisers, auditors, banks, payment-service providers, and claims or dispute advisers where relevant.
Website, hosting, security, communications, and information-technology providers, but only after the actual providers and their roles are verified.

We may also disclose information in connection with a merger, restructuring, financing, sale, or transfer of all or part of the business, subject to applicable confidentiality and legal requirements.

We do not state in this draft that personal information is sold or shared for targeted advertising. The website and commercial practices must be reviewed before making a final statutory statement on sale, sharing, targeted advertising, or profiling.

6. Cross-border processing and international transfers

ENUO Logistics is located in Shanghai, China and provides international logistics involving China and overseas destinations. Information relevant to an inquiry or shipment may therefore be accessed, processed, or disclosed in China and in the origin, transit, or destination countries associated with the requested service.

Depending on the route and service scope, overseas recipients may include customers, importers, consignees, agents, carriers, customs-service providers, warehouses, and final-mile providers. Privacy and data-protection rules in those locations may differ from the rules in the individual's home jurisdiction.

[LEGAL REVIEW -- TRANSFER SAFEGUARDS] Map all actual transfer routes, remote-access arrangements, storage locations, and recipient countries. Confirm whether consent, contractual clauses, certification, security assessment, impact assessment, regulator filing, localization, or another transfer mechanism is required. Insert the safeguards actually used and explain how individuals may request a copy where the law requires this.

7. Data retention

We intend to keep personal information only for as long as necessary for the relevant inquiry, quotation, contract, shipment, settlement, legal obligation, dispute, security purpose, or other disclosed purpose. Final retention periods have not yet been approved.

Retention periods requiring confirmation
Record category	Retention period	Required review
Unsuccessful or inactive inquiries	[CONFIRM]	Set a deletion or anonymization period based on follow-up needs and applicable law.
Quotation and negotiation records	[CONFIRM]	Align with contract limitation periods and dispute requirements.
Customer, shipment, customs, and delivery records	[CONFIRM]	Align with transport, customs, export-control, tax, accounting, insurance, and claims obligations.
Invoices, payments, and reconciliation	[CONFIRM]	Confirm statutory accounting and tax periods.
Email and attachments	[CONFIRM]	Confirm mailbox, archive, backup, and deletion rules.
Website, security, and server logs	[CONFIRM]	Confirm actual log rotation, backup retention, and incident requirements.
Cookie and analytics data	[CONFIRM IF USED]	Add tool-specific expiration and account-level retention settings.

Records may need to be retained longer where required by law, where a dispute or investigation is pending, or where necessary to establish, exercise, or defend legal claims. When information is no longer required, it should be deleted, anonymized, or securely isolated in accordance with an approved retention schedule.

8. Your privacy rights

Depending on the law that applies to you and the processing, you may have rights to:

Ask whether we process your personal information and request access to it.
Request correction or completion of inaccurate or incomplete information.
Request deletion of information in circumstances recognized by applicable law.
Request restriction of, or object to, certain processing.
Withdraw consent where processing depends on consent, without affecting earlier lawful processing.
Request portability of eligible information where applicable.
Ask for information about recipients or international transfers where required by law.
Object to certain direct-marketing communications.
Request review of a decision based solely on automated processing where applicable.
Lodge a complaint with a competent privacy or data-protection authority.

We may need to verify your identity and authority before fulfilling a request. Legal exceptions may permit or require us to retain information or decline part of a request. If a request concerns information controlled by one of our customers or partners, we may direct the request to that organization.

[LEGAL REVIEW -- RIGHTS AND COMPLAINTS] Confirm which rights apply under the laws governing ENUO Logistics and its website visitors, including whether the Personal Information Protection Law of the People's Republic of China or laws in other jurisdictions apply. Add statutory response periods, appeal procedures, authorized-agent rules, identity-verification standards, and the correct supervisory-authority details.

9. Information security

ENUO Logistics should use reasonable organizational and technical measures appropriate to the nature of the information and the relevant risks. No transmission, storage system, or security measure can guarantee absolute security.

[SECURITY REVIEW] Verify the measures actually implemented before describing them. Review access control, authentication, encryption, backups, vulnerability management, staff access, confidentiality duties, provider oversight, incident response, breach notification, secure deletion, and the handling of inquiry attachments. Do not add unverified security claims.

10. Marketing communications

This draft does not state that ENUO Logistics operates an email-marketing platform, newsletter, automated marketing program, or behavioral advertising system because no such tool or process has been confirmed.

If ENUO Logistics begins sending promotional communications, the policy and collection notices must be updated to explain the information used, lawful basis, provider, tracking functions, retention period, and unsubscribe method before the activity begins.

11. Automated decision-making

No solely automated decision-making or profiling process with legal or similarly significant effects has been confirmed for this website or inquiry process.

[TOOL CONFIRMATION] Confirm whether any website, lead-scoring, fraud-prevention, screening, compliance, quotation, or customer-management tool makes or supports automated decisions. Add an accurate explanation if such processing exists.

12. Children's information

ENUO Logistics' services are directed to businesses and professional contacts, not children. Individuals should not submit information about children unless it is necessary, lawful, and specifically requested for a legitimate service purpose.

[LEGAL REVIEW] Confirm the applicable age thresholds, required parental-consent rules, and whether a more specific children's privacy statement is required.

13. Third-party websites and services

The website may contain links to third-party websites or communication services. Their operators are responsible for their own privacy practices. Review the privacy information provided by a third party before submitting personal information through its service. ENUO Logistics should verify all external links and embedded content before publication.

14. Changes to this policy

We may update this policy when our practices, website tools, service providers, or legal obligations change. The published version should display an effective date and last-updated date. Where required, we will provide additional notice or obtain consent for material changes.

15. Contact us

Questions or requests concerning this policy may be directed to:

[CONFIRM BEFORE PUBLICATION] Confirm that the listed email accepts privacy requests, provide the complete telephone number, identify any dedicated privacy contact, and add the applicable complaint authority and statutory contact details required by law.

Mandatory pre-publication checklist

Obtain legal review and confirm applicable-law and jurisdiction statements.
Confirm the controller, privacy contact, company details, and complete telephone number.
Inventory the production website's inquiry form, fields, uploads, recipients, and storage.
Inventory all cookies, analytics, hosting, security, consent, email, and customer-management tools.
Add tool-specific purposes, providers, data categories, locations, durations, and user controls.
Approve category-specific retention periods and deletion procedures.
Map cross-border data flows and document the applicable transfer safeguards.
Confirm lawful bases, consent requirements, individual-rights procedures, and response periods.
Confirm security and incident-response statements against actual implemented controls.
Replace every bracketed confirmation item and remove this checklist before publication.