Privacy policy

A2TL, [[ADRESSE_SIEGE]]. Contact: contact@carrier-bridge.com.

Account data: email address, password in encrypted form, company name, and where you provide them your name, role and telephone number.

Service usage data: rate sheets, simulated shipments, indexation settings, imported documents. This content relates to your professional activity rather than your private life, but may contain personal data (the name of a contact at a carrier, for example).

Contact data: information submitted through the contact form.

Audience measurement: aggregated page-view statistics, with no cookie and no identifier allowing you to be recognised from one visit to the next.

Delivering the service and managing the account: performance of the contract.

Billing and accounting obligations: legal obligation.

Responding to contact enquiries: pre-contractual step or legitimate interest.

Improving the service and measuring audience: legitimate interest, using a cookieless solution with no profiling.

Informing our clients about changes to the service: legitimate interest, with the option to opt out at any time.

Your data is not sold, rented or disclosed to third parties for commercial purposes. It is never passed to carriers. It is accessible only to authorised staff at the publisher, and to the technical providers strictly necessary to run the service, acting as processors and bound by contract.

Processors: Netlify (website hosting), [[HEBERGEUR_APPLICATION]] (application hosting, European region), Resend (transactional email), Plausible (cookieless audience measurement), [[PRESTATAIRE_PAIEMENT]] (subscription payments).

Two things need separating.

The carrier-bridge.com website is hosted by Netlify, Inc., a company established in the United States, and delivered through a global network. It processes only contact form submissions and aggregated, cookieless audience measurement.

Service data — your rate sheets, volumes, negotiated prices and account — is hosted within the European Union, in a European region of [[HEBERGEUR_APPLICATION]].

Both providers are established in the United States. Access from a third country therefore cannot be excluded, solely for operational and technical support purposes. Those transfers are covered by the standard contractual clauses adopted by the European Commission, together with the technical measures described in the Security section.

Account data and imported content: for the duration of the contract, then [[DUREE_APRES_RESILIATION]] after termination, so that data can be recovered or exported.

Accounting records and invoices: ten years, in line with legal obligations.

Contact enquiries with no follow-up: three years from the last exchange.

Audience statistics: aggregated, with no individual data retained.

Data is encrypted in transit and at rest. Access to production environments is restricted and logged. Passwords are stored as hashes and are never accessible in clear text.

You have rights of access, rectification, erasure, restriction, objection and portability over data concerning you. You can exercise them by writing to contact@carrier-bridge.com. We respond within one month. If, having contacted us, you consider your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris.