GDPR Compliance

Last updated: 12.03.2026

This page outlines how Freiority aligns with the General Data Protection Regulation (GDPR) and explains the rights available to users located in the European Economic Area (EEA). Freiority operates as a technology platform and intermediary. Logistics services are provided by independent third-party service providers.

1. Data Controller

The data controller for the Platform is Freiority Private Limited, Karnataka, India.

2. Scope

These rights and practices apply to individuals in the EEA. Users outside the EEA may have different rights under local laws. Freiority does not claim formal certification under GDPR; the Platform follows GDPR-aligned practices and works with certified third-party providers where applicable.

3. Lawful Bases for Processing

• Consent (e.g., marketing communications where applicable)
• Contract (e.g., account creation, enquiry and quotation workflows)
• Legitimate interests (e.g., platform security, fraud prevention, product improvement)
• Legal obligations (e.g., compliance, KYC where applicable)

4. Conditional Disclosure of Contact Details

To protect user privacy, customer contact details are disclosed to freight forwarders only after a quotation is approved by the customer. Prior to approval, service providers may access only anonymised enquiry information necessary to submit quotations.

5. Your GDPR Rights

• Access — request a copy of your personal data
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion where applicable
• Restriction — limit processing under certain circumstances
• Portability — receive data in a structured format
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent

6. How to Make a Request

Submit a data request to security@freiority.com. Please include sufficient information to identify your account and the nature of your request. We may ask for reasonable identity verification. We aim to respond within 30 days, subject to extensions permitted by law.

7. International Transfers

Data may be processed in India or other countries where our service providers operate. Appropriate safeguards are used where required, and contractual obligations apply to processors handling personal data.

8. Processors & Payments

Payments are handled by PCI‑compliant providers such as Razorpay. Third‑party processors involved in infrastructure and storage (e.g., Supabase), communication (e.g., Twilio for SMS, Resend for email), AI services (e.g., Google Gemini for content analysis), mapping (e.g., Google Maps), and analytics operate under contractual terms to protect personal data.

9. Security Measures

Freiority follows security‑aligned practices designed to be consistent with ISO 27001 and SOC 2 principles. Technical and organisational measures include encryption in transit and at rest, access controls, audit logging, and rate limiting.

10. Retention

Personal data is retained only as long as necessary for the purposes outlined above and to comply with legal, accounting, or regulatory requirements.

11. Updates

We may update this page from time to time to reflect changes in practices or legal requirements.