01
Who is responsible
Portmund Logistics is responsible for the personal data described
on this page. Our legal and registered details are
Portmund Logistics Ltd, a company registered in England and Wales, company number 17201469, registered office 20 Wenlock Road, London N1 7GU.
Anything about privacy reaches a person at
[email protected].
02
What this site collects
The public pages of this website are static HTML and CSS. They
run no JavaScript of their own, have no forms and no shopping
basket. They set no cookies, so there is no banner to dismiss,
and they carry no analytics, advertising or tracking pixels of
any kind.
You can read every public page without telling us who you are.
The only ways we learn anything about you are if you choose to
email us, or if you are an existing client signing in to the
client area, which is described in section 12.
03
Server logs
The web server keeps an ordinary access log. Each line holds:
- The IP address the request came from
- The date and time
- The page or file requested, and the response code
- The referring page, if your browser sent one
- The browser user agent string
We use it to keep the site up and to find out what broke when
something breaks. It is never used to build a profile of a
visitor and it is not combined with anything else. Logs rotate
daily and are deleted after fourteen days.
04
Cloudflare
Traffic to this site passes through Cloudflare, which delivers
the pages and filters malicious requests. Cloudflare sees the
same request data described above, under its own privacy terms.
We do not run any Cloudflare analytics product on this domain.
Cloudflare may set a strictly necessary security cookie when it
needs to tell a person from a bot. We do not read it and we
cannot use it to identify you.
05
Google Fonts
The two typefaces on this site are served by Google Fonts, so
your browser fetches them from fonts.googleapis.com and
fonts.gstatic.com. Google receives your IP address and user agent
as part of that request. This is the one third party request the
site makes, and we would rather name it than bury it.
Blocking those two hosts leaves the site perfectly readable in a
fallback typeface. Nothing on the site depends on them.
06
When you email us
If you send us a brief or a question, we hold your message, your
address and anything you attached, for as long as it takes to
answer you and to keep a record of what was agreed. We use it to
reply and to do the work. We do not add you to a mailing list and
we do not sell or rent contact details to anybody.
07
Data inside a system we build
While building or maintaining a system for a client, we may see
personal data that belongs to their customers or staff. In that
situation the client decides what happens to that data and we act
on their instructions, for their project and nothing else.
Access is limited to the people working on that project. We do
not copy live data into a test system or onto a laptop without
agreeing it first, and we remove what we no longer need at the
end of the work. If you are a customer of one of our clients,
your request belongs with them, and we will pass it on and tell
you we have.
08
Who else handles it
Three kinds of supplier touch this, each under a contract and
none of them free to use anything for their own purposes:
- A hosting provider, which runs the server the site sits on
- Cloudflare, which delivers and protects the site
- An email provider, which runs our mailboxes
Where a project needs another supplier, such as a payment
provider or an error reporting service, that is named in the
specification before it is built.
10
Your rights
Depending on where you live, you can ask us for a copy of what we
hold about you, ask us to correct it, ask us to delete it, ask us
to restrict what we do with it, or object to a particular use.
You can also ask for it in a portable form.
Email us and a person will answer. We will not charge you for
asking, and we will not make it difficult.
11
Complaints
If you think we have handled your data badly, tell us first and
give us the chance to put it right. You also have the right to
complain to the data protection authority for the country you
live in, and nothing on this page takes that away.
12
The client area
Existing clients can sign in at
logisticsoffice.net/portal to read their
project record and download the documents they have signed. It is
the one part of this site that is not static, and the one part
that sets a cookie.
- One cookie, named pl_portal, which holds a signed reference to your session and nothing else. It is strictly necessary for signing in, so it needs no consent banner.
- It is marked HttpOnly, Secure and SameSite, expires after eight hours, and is deleted when you sign out.
- Your password is stored only as a scrypt hash. Nobody here can read it, including us.
- We record sign-ins, failed sign-in attempts, password changes and document downloads, so that an account holder can be told what happened on their account.
- The client area runs no JavaScript, no analytics and no third party scripts.
What you see there is limited to your own projects. The content is
your project record, your signed documents and your payment
history, which exist because of the work rather than because of
the website.
13
Changes to this policy
If the site starts doing something new, this page changes before
it does, not after. The date at the top is the version in force.