Data Protection Policy

1. Objective

This Data Protection Policy describes how Paradise Container Services safeguards personal information, shipment data, API credentials, and operational records processed through our logistics website, admin systems, and enterprise tracking services.

2. Data Classification and Access Control

We classify information based on operational sensitivity and restrict access according to job responsibility, legitimate business need, and authorized client scope.

• Personal contact records are limited to teams who need them for shipment coordination, support, or account management.
• Consignment status, transport milestones, and delivery records are restricted to authorized operational and client-facing users.
• Admin and API access rights are granted using role-based principles and are reviewed when responsibilities change.

3. Encryption and Secure Transmission

We use security controls designed to protect data in transit and data stored within our systems. Sensitive credentials are handled with special care, and admin passwords are stored using password hashing mechanisms rather than plain text.

• Website and API traffic should be delivered over HTTPS in production environments.
• Credentials, API keys, and administrative access paths must be protected against interception or unauthorized disclosure.
• Backups and exported data should be handled using secure transfer and storage practices.

4. Storage, Retention, and Disposal

We store information only for operational, contractual, audit, support, and legal purposes. Data that is no longer needed is deleted, archived, or restricted according to business and compliance requirements.

• Shipment histories may be retained for client reporting, dispute handling, and compliance evidence.
• Access logs and security records may be retained to support incident review and system assurance.
• When disposal is appropriate, records are removed or rendered inaccessible using controlled processes.

5. Governance and Reporting

Employees, contractors, and system users are expected to handle information responsibly and report suspected data loss, unauthorized access, or policy deviations without delay. Data protection questions may be sent to paradisecontainerservice@gmail.com.