At ORLG Logistics, we protect your data with the same rigor we apply to managing your supply chain: with transparency, security, and traceability. Every logistics operation —and every shared data point— is handled under strict ethical and technical standards.

1. Introduction

This Privacy Policy explains how ORLG Logistics collects, uses, shares, and protects the personal information of customers, partners, suppliers, employees, and visitors to our digital portals, logistics platforms, tracking systems, and services related to international freight, warehouse management, customs brokerage, last-mile delivery, and supply chain digitization.

Does not apply to external websites, third-party platforms, or systems not directly managed by ORLG Logistics.

2. Data Controller

ORLG Logistics is the data controller for your personal information under applicable regulations.

To exercise your rights, resolve questions, or submit inquiries, contact our Data Protection Officer (DPO) at:

olantigua@orlglogistics.com

3. What Personal Data Do We Collect?

• Identification data: name, email, phone, company, job title, tax ID (RFC/NIT), and fiscal details for invoicing.
• Contact and logistics data: origin and destination addresses, loading and unloading instructions, customs requirements, and shipping documents.
• Technical data: IP address, device type, cookies, and interaction events on our portals.
• Operational data: information shared during quotations, logistics briefings, or audits.
• Special category data (only with explicit consent and technical justification): verified identity documents for AML/KYC compliance in high-value international shipments.

4. Why Do We Use Your Data?

We process your data under the following legal bases:

• Contract performance: to provide logistics services such as shipment management, tracking, and customs clearance.
• Legitimate interest: to optimize routes, prevent fraud, ensure cargo integrity, and enhance customer experience.
• Legal obligation: to comply with customs, tax, and transportation regulations.
• Consent: when you explicitly authorize us, such as for newsletter subscriptions or case study participation.

5. With Whom Do We Share Your Data?

We do not sell or commercialize your information. We only share it in the following cases:

• Logistics and technology providers: airlines, shipping lines, customs brokers, and tracking platforms, under confidentiality agreements and security standards.
• Strategic partners: only with your explicit authorization and for the duration of the contracted service.
• Competent authorities: if required by a valid court order or binding legal obligation.
• Corporate transactions: in the event of a merger, acquisition, or restructuring, with prior notification if it affects data processing.

6. Use of Cookies and Similar Technologies

We use cookies and similar technologies to:

• Ensure functionality and security of our platforms.
• Measure operational performance such as transit times and delivery rates.
• Personalize the experience based on language, units, and user preferences.

You can manage your preferences at any time via your browser settings. Some features may be limited if you disable non-essential cookies.

7. Your Rights as a Data Subject

You have the right to:

• Access, rectify, or update your data.
• Request deletion of your data, unless a legal retention obligation applies.
• Withdraw your consent at any time.
• Request data portability in a structured, common, and machine-readable format.
• Lodge a complaint with the relevant data protection authority.

To exercise these rights, send a request to olantigua@orlglogistics.com. We commit to responding within 15 business days.

8. Security Measures

We implement robust technical and organizational controls:

• TLS/SSL encryption in transit and at rest.
• Continuous monitoring, firewalls, and periodic audits.
• Access policies based on the principle of least privilege.
• Infrastructure on certified providers, compliant with ISO 27001, SOC 2, and GDPR.

9. Data Retention Period

We retain your data only as long as necessary to fulfill the stated purposes, or as required by law (up to 10 years for tax and customs documentation). Afterwards, data is anonymized or securely deleted.

10. Children’s Data

Our services are intended exclusively for legal entities and individuals aged 18 or older. We do not knowingly collect information from minors.

11. Policy Updates

This policy may be updated periodically to reflect changes in our practices or applicable regulations. Changes take effect upon publication on this page.

If you are subscribed to our communications, we will notify you by email of material changes.