1. Introduction & Data Controller
Shiperfly Global Pte. Ltd. ("Shiperfly", "we", "us", or "our") provides a comprehensive B2B sourcing, multimodal freight forwarding, and escrow milestone platform. This Privacy Policy details how we collect, process, store, and safeguard organizational, transactional, and personal data across our marketplace and API integrations.
By accessing or registering on Shiperfly, you acknowledge the data handling practices outlined in this policy in accordance with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and applicable international commercial trade privacy laws.
2. Categories of Information We Collect
- Organization & User Credentials: Corporate legal name, business registration number, tax identification (EIN/VAT), business email addresses, telephone numbers, and authorized account user profiles.
- Supplier Due Diligence & Verification Data: Factory operating licenses, ISO/CE/RoHS quality certificates, export accreditation documents, on-site audit media, and photographic verification of production facilities.
- Trade & Logistics Documentation: Commercial invoices, bills of lading (B/L), packing lists, customs declaration HS codes, container seal numbers, and port of origin/destination metadata.
- Financial & Escrow Data: Institutional payment identifiers, bank account wire routing numbers, and Stripe tokenized transaction references. (Shiperfly does not store unencrypted raw credit card numbers).
3. Purpose and Legal Basis for Processing
We process collected data exclusively under the following legal bases:
Contractual Fulfillment
Processing binding RFQs, issuing purchase orders, clearing ocean/air freight slots, and executing milestone escrow releases.
Legal & Regulatory Compliance
Complying with Anti-Money Laundering (AML), Know Your Customer (KYC), trade sanctions lists, and customs authority mandates.
4. Cross-Border International Data Transfers
Because Shiperfly manages physical container shipments across 140+ countries, your organizational and shipment data may be securely transferred to customs brokers, maritime carriers, port terminal operators, and certified quality inspectors situated in the countries of cargo origin and arrival.
All cross-border transfers outside the European Economic Area (EEA) are governed by EU Standard Contractual Clauses (SCCs) to guarantee equivalent data protection standards.
5. Data Security & Retention
We implement defense-in-depth security including AES-256 encryption at rest, TLS 1.3 encryption in transit, strict RBAC (Role-Based Access Control) for enterprise team members, and continuous vulnerability monitoring.
Transactional and customs documentation is retained for a mandatory period of 7 years in compliance with international maritime and revenue audit statutes.
6. Your Data Rights
Under applicable data protection frameworks, you have the right to request access to your records, rectify inaccurate company records, request data portability, or restrict processing where legally permissible.
To exercise your data privacy rights, email our Data Protection Officer at privacy@shiperfly.com.