IYO CargoPrivacy policy
DRAFT — not legally validated. Text in brackets is [TO BE COMPLETED BY A LAWYER]. The French version prevails. Reference texts to check: Guinean law L/2016/037/AN on cybersecurity and personal data protection [TO BE CHECKED], and the GDPR (hosting in the European Union) [TO BE CHECKED].
1. Who processes your data?
- Client company accounts (administrators, agents) and prospects (“Contact us” form): IYO Concept is the controller.
- Customers of freight companies (senders, recipients): the freight company is the controller; IYO Concept is its processor and only uses this data to provide the service.
Contact: contact@iyoconcept.com · [data protection contact TO BE COMPLETED BY A LAWYER]
2. Data processed
| People | Data | Purpose |
|---|---|---|
| Users (admins, agents) | name, e-mail, phone, office, language, password (hash), two-factor authentication, log of sign-ins and sensitive actions | secure access, security, support |
| Customers of freight companies | name, phone, country, parcels (description, weight, photo), payments, status history | shipment management, parcel tracking, receipts, prepared WhatsApp messages |
| Prospects | name, company, e-mail, phone, country, city, message | answer the request, offer a demo |
| Public tracking visitors | tracking code entered, IP address (abuse limitation) | show a parcel's status, security |
No data is sold or used for advertising.
3. Retention periods
[TO BE COMPLETED BY A LAWYER — proposals to validate:]
- data of companies and their customers: during the contract, then [X months] after its end (export available);
- invoices: [legal period TO BE CHECKED];
- platform log: [X months];
- prospects without follow-up: [X months] after the last exchange;
- encrypted backups: 7 days (daily), 4 weeks (weekly), 6 months (monthly).
4. Recipients and processors
Data is only accessible to the authorised users of each company (isolation between companies) and, for support and security, to the IYO Concept team. Technical processors: see the legal notice (hosting in France, e-mail sending, encrypted backup storage, error tracking without personal data). [Transfers outside Guinea / the EU and safeguards: TO BE COMPLETED BY A LAWYER]
5. Security
Encrypted connection (HTTPS), passwords stored as hashes, two-factor authentication, sign-in attempt limits, data isolation between companies, encrypted daily backups off the server, log of sensitive actions.
6. Cookies
IYO Cargo only uses technical cookies, required for the service to work: sign-in session, “stay signed in”, form protection, trusted device (two-factor authentication). No analytics or advertising cookies: no consent is therefore requested. [TO BE CHECKED BY A LAWYER]
7. Your rights
You may request access to your data, its rectification, erasure, restriction of processing or object to it, [portability TO BE CHECKED]. Customers of a freight company: contact that company first; IYO Concept will help it answer. Contact: contact@iyoconcept.com. [Competent supervisory authority and complaint procedure: TO BE COMPLETED BY A LAWYER]
8. Changes
This policy may change; the version and update date are shown at the top of this page.