Privacy policy

Who controls your data

The controller of personal data of visitors to uniship.io and people contacting us is LUMEN LOG SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, Cyprysowa 15, Pietrzykowice, 55-080 Kąty Wrocławskie, Poland, KRS 0001185691, NIP 8961655114. Contact privacy@uniship.io or write to our registered office about personal data.

Data, purposes and legal bases

Enquiries: your email address and message, and optionally your name and company. We use these to respond and correspond with you. The legal basis is Article 6(1)(b) GDPR when taking steps at your request before entering a contract, or Article 6(1)(f) GDPR — our legitimate interest in handling enquiries, including correspondence with company representatives.

Website delivery and security: the server receives information such as your IP address, request time, page address, browser and server response. We use it to deliver the website, detect abuse and diagnose errors under Article 6(1)(f) GDPR. Form protection retains a hash of the IP address in server memory for up to 15 minutes.

Relevant correspondence may also be retained to establish, exercise or defend claims under Article 6(1)(f) GDPR. Where the law requires specific records, the legal basis is Article 6(1)(c) GDPR.

Analytics and marketing are optional

If optional tools are enabled, we start them only after your consent: Google Analytics for website analytics, Meta Pixel for advertising measurement and audience building, or the relevant tags delivered through Google Tag Manager. The cookie policy shows the current tool status. Refusal does not restrict access to content or the contact form.

Data may include cookie identifiers, IP address, device and browser information, page URLs and page-view events. Meta may link this information to your account in its services and use it for advertising personalisation. The basis is consent under Article 6(1)(a) GDPR and Article 399 of the Polish Electronic Communications Law. We do not pass form contents to tags.

Recipients and service providers

We use OVHcloud to host the website on servers in Warsaw and France, dpoczta.pl (dhosting.pl sp. z o.o.) for our mailbox, and SMTP2GO (Sand Dune Mail Ltd, New Zealand) to relay contact-form messages. Our application connects to SMTP2GO inbound servers in the European Union.

Authorised colleagues, IT support providers and advisers may access data as needed for their tasks, as may authorities entitled by law. Following consent to relevant tools, recipients also include Google Ireland Limited and Meta Platforms Ireland Limited and entities involved in delivering their services.

Transfers outside the European Economic Area

Hosting in Poland and France does not mean that all operations of every provider take place only in the EEA. SMTP2GO is based in New Zealand; Google and Meta may use infrastructure and support outside the EEA, including in the USA.

Transfers require an appropriate Chapter V GDPR basis: an adequacy decision (covering New Zealand and, for the USA, only eligible participants in the EU–US Data Privacy Framework), or standard contractual clauses and supplementary safeguards where necessary. For information about safeguards and a copy, contact privacy@uniship.io.

Retention

We retain correspondence for as long as needed to handle the matter and agreed follow-up. Where records are needed to evidence arrangements, meet legal obligations or defend claims, retention follows that obligation or the applicable limitation period, with use restricted to that purpose.

Security logs are retained for as long as needed to investigate errors or abuse and protect the system; incident records may be kept until the incident is resolved. Log and backup retention also depends on hosting and email service settings. The application does not keep a separate contact-message database.

Your cookie choice expires after no more than 180 days. The cookie policy describes optional identifier lifetimes and analytics retention criteria.

Your rights

You may request access, rectification, erasure or restriction. Portability applies to data processed automatically on the basis of consent or contract. For processing based on legitimate interests, you may object on grounds relating to your particular situation; for direct marketing, no such grounds are required.

Withdraw consent using Cookie settings in the footer at any time. Withdrawal does not affect the lawfulness of earlier processing. You may also contact privacy@uniship.io. We respond within GDPR time limits and may request proportionate identity verification where there are reasonable doubts.

You may complain to the President of the Polish Personal Data Protection Office (uodo.gov.pl) or another competent supervisory authority.

Voluntary information and automated decisions

The form requires an email address and message because we cannot handle your enquiry through it without them. Other fields are optional. We do not make decisions about visitors based solely on automated processing that produce legal or similarly significant effects. Optional advertising tools may build interest profiles, which is distinct from such decisions.

The website and Uniship services

This policy concerns the information website and enquiries. Processing shipment sender and recipient data in Uniship requires separate definition of roles and service terms and, where we act as a processor, a data processing agreement. Do not send shipment data through the sales form.

Links to documentation, carriers and other external sites lead to services with their own privacy rules. We update this policy when processes or laws change; new optional tracking purposes require reconsidering consent.