Privacy Policy
Updated: 19 October 2026 · V2.3.1
Scope and online intake
This notice covers the NexTrade business website and V2.3.1 business international logistics enquiries. Intake and attachment availability depend on the displayed status and actual server results. Acceptance is confirmed only after database storage; email delivery is tracked separately. Updating this notice does not enable submission while intake is closed.
Information we process
Submitted details may include cargo descriptions, packaging, quantities, actual and volumetric weights, volume, cargo value and insurance interest; origins, destinations, streets, cities, states or provinces, postcodes, warehouse codes, transport requirements, Incoterms, dates, budgets and notes; and pasted source text, extraction candidates and review records. Company, contact name, phone, email, WeChat (if supplied in contact details or notes) and existing representative details are optional. You may submit without contact details; keep your enquiry reference. Provide only necessary information, avoid unrelated identity or banking details, and ensure you are authorised to provide other people’s information.
Purposes and processing
We use information to assess shipping needs, prepare human-reviewed quotations, contact you, assign and follow up enquiries, prevent abuse and handle information requests. Server-side processing stores enquiry contents, a unique reference, submission time, form mode, consent time, notification status and necessary follow-up records in Cloudflare D1, with an internal lead profile. Professional and four-step guided modes share the same data. Extracted text is not verified cargo or compliance evidence. This version has no customer accounts or public record lookup by reference.
Browser drafts and attachments
Quick-paste extraction uses local browser rules without external AI. Saving a draft stores text in this tab’s sessionStorage; staff-assisted forms autosave session text. Drafts exclude file contents. Clear this enquiry or clear browser site data to remove local drafts; this does not erase submitted information. Selecting a file alone keeps it in the current page. When uploads are enabled, files are uploaded during submission to private Cloudflare R2. File names, types, sizes, hashes and safety status may also be stored. Files are quarantined; staff cannot download them before configured safety checks pass. PDF, Excel and image cargo contents are not automatically parsed, and uploading does not verify them.
Service providers and notifications
Cloudflare supplies website and server hosting, D1 storage, private R2 storage when enabled, Turnstile bot protection and Access staff authentication. Turnstile processes device, browser and network signals for verification. Our server sends the verification token and available source IP to its verification endpoint. Rate limiting uses a salted IP digest rather than storing a raw IP in the enquiry table. Access authenticates staff email identities; the backend also checks roles and record permissions.
When notifications are enabled, Resend processes sender and recipient addresses, the enquiry reference and customer-provided contact, cargo and route details for delivery to [email protected], from [email protected]. Assigned staff receive only a reference and protected workspace link. Templates exclude raw pasted text, internal procurement costs, supplier records and attachment download links. Email failure does not cancel a saved enquiry; provider acceptance does not establish delivery or reading. These services may involve processing outside your country. NexTrade must confirm processing regions, provider terms and applicable cross-border arrangements before opening collection.
Retention and deletion scope
Enquiry records are retained for 90 days from successful submission; attachments for 30 days from upload. Necessary legal or dispute-related holds may extend retention. Expiry cleanup and administrator deletion code exist, but production scheduling and actual operation still require acceptance testing. Automatic deletion on expiry is not confirmed; cleanup must be configured and verified before intake opens.
Expiry cleanup removes enquiries, associated history, attachment contents and references, and contact profiles no longer referenced by another enquiry or its valid history. Shared profiles needed for other valid enquiries or legal holds remain until the last necessary association is removed. Related audits remove customer and staff identities, contact details, free text and enquiry, file or other associated identifiers, retaining only non-personal operation types and times. Personal information in audit entries without an enquiry association is retained for at most 90 days from the operation. Failed deletions retain retry state for subsequent cleanup; failure is not reported as completed deletion. Deleting an enquiry early also removes its attachments. Database deletion does not erase every copy: company mailboxes, Resend records and Cloudflare service logs and backups require separate management and are not automatically erased by this system.
Security measures
The system uses HTTPS, server validation, Turnstile, rate limiting, idempotent submission and database transactions. Staff use Cloudflare Access, followed by backend identity, D1 role and record-permission checks. Attachments use private storage and authorised downloads; secrets are read only on the server. Unconfigured functions remain closed and files without confirmed safety remain quarantined. These measures cannot eliminate every risk. Avoid leaving information on shared devices.
Access, correction, withdrawal and deletion requests
Email [email protected] with “Privacy request”, your enquiry reference and the information you want to access, correct or delete. We may request proportionate evidence to prevent unauthorised disclosure; do not send unnecessary identity documents. Customers without contact details may also contact us with their reference, but the reference alone does not permit public lookup. You can stop filling in the form or uncheck consent before submission. After submission, request withdrawal or deletion through this mailbox for manual verification and handling. Legal holds and copies such as emails need separate treatment. This version has no self-service deletion or one-click erasure of all copies.
Choices and updates
The privacy consent box is unchecked by default and submission requires consent. Restoring a draft requires renewed consent. Optional mode-switch records have separate consent; declining does not block submission and those events are then omitted from the enquiry. This notice does not replace provider terms or legally required disclosures. Changes to processing should be reflected here and communicated as applicable.