Privacy Policy

Last updated: September 2026

CargoSurge ("we," "our," or "us") is committed to protecting the privacy and security of our users. This Privacy Policy explains how we collect, use, store, and share your personal information when you use the CargoSurge platform, website (cargosurge.co), and related services.

1. Information We Collect

1.1 Information You Provide

  • Account Information: Name, email address, phone number, company name, job title, and billing details when you register for an account or subscribe to our services.
  • Business Data: Shipment details, financial records, customer information, and other operational data you enter into the platform.
  • Communications: Messages, feedback, and support requests you send to us.
  • Contact Form Submissions: Name, email, company, phone number, and message content submitted through our website.
  • Certification Enrolment: If you enrol for CargoSurge Certified we store your name and email address, your examination attempts and results, and the credential we issue. You may also add a job title, employer, country and LinkedIn address; those four are optional, and each is published only if you say so (see section 5).
  • Newsletter Subscriptions: If you subscribe to our newsletter, we store your email address (and name, if given) together with the date and time you consented, the page you subscribed from, the campaign that referred you, and the IP address used — the latter two solely as evidence that consent was given.

1.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, actions taken, session duration, and interaction patterns.
  • Device Information: Browser type, operating system, device type, IP address, and language preferences.
  • Log Data: Server logs including access times, referring URLs, and error reports.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the CargoSurge platform and services.
  • Process transactions and manage your subscription.
  • Send transactional communications (e.g., account confirmations, invoices, security alerts).
  • Provide customer support and respond to your inquiries.
  • Analyze usage patterns to improve product features and user experience.
  • Ensure the security and integrity of our platform.
  • Comply with legal obligations and enforce our Terms of Service.
  • Publish and verify certification credentials, so that an employer or customer can check a credential you hold (see section 5).
  • Send marketing emails (product updates and logistics insights) only if you subscribed to our newsletter. We rely on your consent for these, we never sell or rent your email address, and every marketing email carries a one-click unsubscribe link. Unsubscribing is immediate and does not affect transactional messages about an account you hold.

3. Data Storage and Security

Your data is stored on secure, cloud-hosted infrastructure with industry-standard protections:

  • Encryption at rest: All stored data is encrypted using AES-256 encryption.
  • Encryption in transit: All data transmitted between your browser and our servers is protected with TLS 1.2+.
  • Multi-tenant isolation: Each organization's data is logically isolated to prevent unauthorized cross-tenant access.
  • Automated backups: Regular encrypted backups ensure data durability and disaster recovery.
  • Access controls: Role-based access controls and audit logging restrict and monitor internal access.

4. Data Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

  • Service Providers: Trusted third-party vendors who assist us in operating the platform (e.g., hosting, payment processing, email delivery). These providers are contractually obligated to protect your data.
  • Legal Requirements: When required by law, regulation, legal process, or governmental request.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice.
  • With Your Consent: When you explicitly authorize us to share information with third parties.
  • Advertising Partners: We may run advertising on Meta platforms (Facebook and Instagram). To show our ads to people who have already contacted us or subscribed, we may share a one-way cryptographic hash of your email address (SHA-256) with Meta so it can be matched against its own records. We do not share your email address itself, your name, your company, or any record of the pages you viewed on this website. Meta is instructed to use the hashed data only to match audiences for our advertising and to delete it after matching. If you have unsubscribed or asked us to stop contacting you, you are excluded from these audiences.

We do not run advertising trackers on this website. There is no Meta Pixel and no advertising tag on these pages, so browsing cargosurge.co.com does not send your activity to any advertising network.

5. The Public Certification Directory

If you earn a CargoSurge Certified credential, your name is published on this website by default, in a public directory of certified professionals and on a verification page that anyone holding your credential number can open. This is how a credential is checked by an employer or a customer, so it is part of what the certification is for rather than an optional extra.

We publish only the following:

  • Your name, as you gave it when you enrolled
  • Your credential number
  • Your certification tier, how many modules you hold, and the names of those modules
  • The date the credential was issued and the date it remains valid until

We do not publish your email address, your examination scores, or your attempt history. Your job title, employer, country and LinkedIn address are published only if you turn each one on yourself, one at a time, and only once you have confirmed your email address. Leaving a permission off means the detail is absent from the page altogether.

You can remove yourself at any time, from the Your public listingsection of your certification dashboard, or by writing to [email protected]. Removing yourself does not affect the credential itself — it remains valid and remains verifiable by anyone you give the number to.

Two kinds of credential are never listed: one that has been revoked, and one whose modules were all granted by an administrator rather than earned by examination. In the second case you still hold the credential and it is still verifiable; it simply does not appear on a page that says its holders passed the examinations.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Essential Cookies: Maintain session state, authentication, and security.
  • Analytics Cookies: Understand how users interact with our platform to improve features and performance.
  • Preference Cookies: Remember your settings and preferences.
  • Advertising Signals: Choosing Accept all in our cookie banner also permits advertising-related measurement signals (Google Consent Mode's ad storage, ad user data and ad personalisation). These are denied by default and remain denied unless you accept. We do not currently operate an advertising pixel on this site.

You can change your choice at any time using the cookie banner, or by clearing this site's data in your browser, which makes the banner appear again. Your choice is stored on your own device and is not linked to your identity. Disabling certain cookies may affect platform functionality.

Cookie choices control what happens on this website. They do not govern the hashed-email advertising audiences described in section 4, because those are built from contact details you gave us rather than from your browsing. To be excluded from those, see section 7.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data, subject to legal retention obligations.
  • Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to certain types of data processing.
  • Withdrawal of Consent: Withdraw previously granted consent at any time.
  • Opt Out of Marketing: Unsubscribe from our newsletter at any time using the one-click link in any marketing email, or by emailing us — no account or login required.
  • Remove Yourself from the Certification Directory: If you hold a CargoSurge Certified credential, you can remove your listing yourself from the Your public listing section of your certification dashboard, at any time and without asking us. You may also email [email protected]. Your credential stays valid and stays verifiable either way (see section 5).
  • Opt Out of Advertising Audiences: To be excluded from the hashed-email audiences described in section 4, email [email protected] — no account or login required. Unsubscribing from our emails already excludes you: the same suppression list governs both, so you never have to ask twice. Removal applies to every audience we build from then on; audiences already uploaded are refreshed or deleted at least every 90 days.

To exercise any of these rights, contact us at [email protected].

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Upon account termination, Customer Data will be available for export for 30 days. After 30 days, all Customer Data will be permanently and irreversibly deleted from our systems, unless a longer retention period is required by applicable law or regulation. Aggregated, anonymized data that cannot identify any individual or organization may be retained indefinitely for analytics and product improvement purposes.

We are not responsible for maintaining, recovering, or providing Customer Data after the 30-day post-termination period. The Customer is solely responsible for exporting and backing up its data prior to account termination.

Newsletter subscriptions are kept until you unsubscribe. After you unsubscribe we retain a minimal record of the email address and the unsubscribe date so that we can honour your request and avoid contacting you again; you may ask us to erase that record entirely at any time.

9. International Data Transfers

Your data may be processed in countries outside your country of residence. We ensure that all international transfers comply with applicable data protection laws and are protected by appropriate safeguards, including standard contractual clauses.

10. Children's Privacy

CargoSurge is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of the platform after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: