Privacy Policy
This policy explains what personal data KHGM LOGISTICS LTD collects, on what legal basis, how it is stored, and the rights available to individuals whose data we process.
Effective date: 1 January 2025. This policy applies to all personal data processed through KHGM's platform, website, and operational systems.
KHGM collects personal data in three categories: (1) Contact and identity data — names, email addresses, phone numbers, and company affiliations provided when you submit an inquiry or enter a contractual relationship with us.
(2) Operational data — shipment references, consignee details, cargo descriptions, and route information required to execute freight, warehousing, or supply chain services under your contract.
What We Collect and Why
(3) Technical data — IP addresses, browser type, and session identifiers collected automatically when you access our website or platform, used solely for security monitoring and service performance.
Legal basis: contractual necessity (Art. 6(1)(b) GDPR) for operational data; legitimate interests (Art. 6(1)(f)) for technical data; consent (Art. 6(1)(a)) where explicitly obtained. KHGM does not sell, rent, or share personal data with third-party marketers under any circumstances.
All personal data processed by KHGM is stored on encrypted, access-controlled infrastructure. Encryption is applied at rest (AES-256) and in transit (TLS 1.3). Access is restricted by role and authenticated via multi-factor controls.
Retention schedules by category: contact and inquiry data is retained for 24 months from last interaction; contractual operational records are retained for 7 years in compliance with applicable commercial and tax law; technical log data is purged after 90 days.
Infrastructure, Encryption, and Retention
Data may be transferred to sub-processors (customs brokers, port agents, freight partners) only under binding data processing agreements that impose equivalent security and purpose-limitation obligations.
International transfers outside the EEA are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent transfer mechanisms applicable in the recipient jurisdiction.
Access, Correction, and Deletion
Under GDPR and applicable international frameworks, individuals have the right to access their data, request corrections, withdraw consent, restrict processing, and request erasure where no overriding legal obligation applies.
To exercise any of these rights, submit a written request to support@khgmlogistics.com with sufficient detail to identify the data concerned. KHGM will respond within 30 calendar days. Complex or high-volume requests may be extended by a further 60 days with notice.
You retain the right to lodge a complaint with the supervisory authority in your country of residence. KHGM's nominated DPA contact is reachable via the same support address.