Our framework
ShipVerge processes personal data under the Saudi Personal Data Protection Law, enforced since 14 September 2023 and supervised by the Saudi Data and AI Authority (SDAIA). Where we handle personal data of individuals in the European Union, for example consignees of EU-bound shipments, we apply equivalent GDPR safeguards.
Principles we follow
- Purpose limitation: we use shipment data only to deliver, clear and invoice shipments
- Data minimisation: we collect only what carriers and authorities require
- Accuracy: customers can correct shipment and contact data at any time
- Storage limitation: records are kept only as long as laws require
- Security: access controls, encryption in transit and confidentiality obligations
Cross-border transfers
International shipping requires data transfers to carriers and authorities abroad. Transfers are limited to what each shipment needs and made under the PDPL transfer regulations and, for the EU, appropriate GDPR safeguards.
Processors and partners
Carriers, customs brokers, insurers and IT providers that process data for us are bound by contractual confidentiality and data protection obligations.
Data subject requests
Requests for access, correction, destruction or a copy of personal data can be sent to quotes@shipverge.com. We verify the requester’s identity and respond within the regulatory timeframe.
Breach response
We maintain an incident response process and notify the competent authority and affected individuals of personal data breaches as required by law.
Contact
Data protection contact: quotes@shipverge.com.
ShipVerge Company · CR 4030546151 · Unified No. 7038444134 · TGA 42/00011356