Privacy Policy

• Account information: your email address, and the sign-in codes we send to it.
• Profile and addresses: name, phone number, company (optional), country, delivery addresses, tax ID (optional — some countries require it for customs), language preference and how you heard about us.
• Parcel information: domestic tracking numbers, courier, store or platform, item descriptions, quantities and declared values, order screenshots you upload, photos we take of your parcels and packed shipments, weights and sizes.
• Shipment information: recipient details, customs declarations, chosen route, value-added services and international tracking numbers.
• Payment information: invoice amounts, payment status, transaction references and processing fees. Card and other payment details are entered on our payment provider's page — we never see or store your full card number.
• Communications: messages you send us by email or WhatsApp, and our notes about your requests.
• Technical information: IP address, browser type and the pages you request, used for security, rate limiting and troubleshooting; and the marketing source of your visit (for example a link from a social media post).

• to create and secure your account and sign you in (performance of our contract with you);
• to receive, match, photograph, store, pack and ship your parcels, prepare customs declarations and handle claims (performance of contract);
• to send invoices, process payments and keep accounting and tax records (contract and legal obligation);
• to answer your questions and send service messages such as storage and payment reminders (contract and legitimate interests);
• to prevent fraud, abuse and prohibited shipments, and to keep our systems secure (legitimate interests and legal obligation);
• to understand which channels bring us new customers, in aggregate (legitimate interests).

We do not use your information for automated decisions that have legal effects on you, and we do not send marketing emails. The only emails our system sends are sign-in codes; other notices appear in your dashboard or are sent by us personally.

We share personal information only with the service providers and parties needed to run the service:

• Cloudflare — hosts our website, database and photo storage, and protects the site from attacks;
• Resend — delivers sign-in code emails;
• Airwallex — processes payments and payment links;
• international carriers, their agents and customs authorities — receive the recipient's name, address, phone number, tax ID (if provided) and the customs declaration so the shipment can be delivered and cleared;
• authorities or professional advisers — when required by law, to enforce our Terms, or to protect our rights and the safety of others.

Our service providers may only use your information to provide services to us. We do not sell your personal information or share it for cross-context behavioral advertising.

Because we forward parcels from China to other countries, your information is processed in several countries, including the United States (where we and our main service providers are based), China (where our warehouse handles your parcels) and the countries your shipments pass through. Where data protection law requires it — for example for information from the European Economic Area or the United Kingdom — we rely on appropriate safeguards such as the standard contractual clauses offered by our service providers, or on the transfer being necessary to perform our contract with you.

• Sign-in codes expire after 10 minutes. Sign-in sessions end when you log out or after a period of inactivity.
• Temporary marketing-source records for visitors from the EEA and the UK are deleted after 2 hours, or earlier when you sign up.
• Account and profile information is kept while your account is active and deleted or anonymized after you ask us to close it, except as described below.
• Order, invoice and payment records are kept for as long as tax and accounting laws require, generally up to 7 years.
• Photos of parcels and packed shipments are kept for 1 year after the shipment is sent, or after the parcel is returned or disposed of, and then deleted.
• Information needed for an open claim or dispute is kept until it is resolved.

We use a small number of first-party cookies and no third-party advertising cookies:

• Sign-in cookies — keep you signed in securely. Required for the dashboard to work.
• Language cookie (NEXT_LOCALE) — remembers the language you chose, for 1 year.
• Source cookie (lf_src) — remembers which link brought you to our site (for example a social media post), for 30 days, so we can record how you found us when you sign up. It contains no personal details. We do not set this cookie for visitors in the European Economic Area (EEA) or the United Kingdom — see below.

Visitors from the EEA and the UK: we use the country provided by our hosting provider Cloudflare (based on your IP address) to decide how the marketing source is recorded. For visitors in the EEA or the UK we store nothing on your device for this purpose. Instead, when you arrive through a marketing link, we keep the source on our server together with a one-way encrypted fingerprint of your IP address (we do not keep the IP address itself) for 2 hours. If you sign up within that visit, the source is saved to your account; the temporary record is deleted when it is used or when the 2 hours end. Our legal basis is our legitimate interest in knowing which marketing channels work.

You can delete cookies in your browser settings at any time. If you block sign-in cookies, you will not be able to use your account.

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy;
• correct it — you can update most of your profile and addresses yourself in your dashboard;
• ask us to delete it, subject to the records we must keep by law;
• object to or restrict certain processing, and receive your information in a portable format;
• lodge a complaint with your local data protection authority (for example in the EU or the UK).

To make a request, email info@landfallfreight.com from the email address on your account. We will respond within 30 days. Residents of California and other US states have the same rights described here, and we will not treat you differently for exercising them.

We use encrypted connections (HTTPS), password-free one-time-code sign-in, rate limiting, and private storage for parcel photos that can only be viewed by you and by our staff after signing in. Access to the admin system is limited to authorized staff. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the authorities of a data breach where the law requires.

Our services are only for people aged 18 or over. We do not knowingly collect information from children. If you believe a child has given us personal information, please contact us and we will delete it.

To exercise your rights under the GDPR or the UK GDPR, please contact info@landfallfreight.com.

We may update this Privacy Policy from time to time. The date at the top of this page shows the latest version. If we make a significant change, we will show a notice on our website or in your dashboard. This policy is available in English and Chinese; if the two versions differ, the English version prevails.

LANDFALLFREIGHT LLC Operating address: Building 38, Dongbu Xiandaicheng, Sanhe Subdistrict, Huiyang District, Huizhou, Guangdong, China Phone / WeChat: +86 180 7334 3166 Email: info@landfallfreight.com