Privacy Policy

Introduction

At TMS, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Transport Management System. This policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and India's Personal Data Protection Bill requirements.

Information We Collect

Legal Basis for Processing

We process your personal data on the following legal bases:

• Performance of a contract with you
• Compliance with legal obligations
• Our legitimate interests
• Your consent

How We Use Your Information

We use the information we collect to:

• Provide and maintain our services
• Process your transactions
• Send you technical notices and support messages
• Respond to your comments and questions
• Improve our services
• Send you marketing communications (with your consent)
• Comply with legal obligations
• Prevent fraud and abuse

Data Retention

We retain your personal information for as long as necessary to:

• Provide our services
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

We will delete your personal information when it is no longer needed for these purposes or when you request deletion, subject to legal requirements.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Staff training on data protection
• Regular backups and disaster recovery procedures

Data Breach Notification

In the event of a data breach that affects your personal information, we will:

• Notify you without undue delay
• Provide information about the nature of the breach
• Describe the likely consequences
• Outline the measures taken to address the breach
• Recommend steps you can take to protect yourself

Your Rights

Under applicable data protection laws, you have the following rights:

• Right to access your personal information
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

International Data Transfers

We may transfer your personal information to countries outside your country of residence. When we do so, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses
• Binding corporate rules
• Approved certification mechanisms
• Adequacy decisions by relevant authorities

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Third-Party Services

We may use third-party services that collect, monitor, and analyze data. These third parties have their own privacy policies and may collect information about you. We encourage you to review their privacy policies.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact our Data Protection Officer at:

Updates to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last Updated" date. For significant changes, we will provide additional notice through email or other means.

Last Updated: July 17, 2025