Privacy policy

The data controller is [To complete: company name and legal form], [To complete: registered office address]. Registration: [To complete: RC and NIF numbers].

Contact for any question or request about personal data: [To complete: contact e-mail].

Depending on how you use the service, we process:

• Account: name, e-mail address, company name, account creation date and e-mail verification date.
• Company profile: activities, location and business contact details you choose to provide.
• Content: freight offers, available vehicles and saved searches.
• Sign-in and security: sign-in code (kept only in hashed form), session token, IP address and device name used at sign-in.
• Consent: date and version of the terms and policy accepted at registration.
• Correspondence: the content of messages you send us by e-mail.

We process your data in order to:

• create and manage your account, and authenticate you with an e-mail code;
• run the freight exchange: publish your offers and vehicles and let users contact each other;
• keep the service secure and prevent abuse (attempt limits, fraud detection);
• keep proof of your consent to the terms;
• answer your requests and comply with our legal obligations.

This processing is based on your consent, given at registration and, in the cases provided by law, on performing the service you requested, complying with legal obligations and the legitimate interest in keeping the service secure. We do not use your data for advertising and we do not sell it.

Other registered users see the information in your company profile and your offers, because that is the purpose of the service. Your sign-in and security data are never visible to them.

We use service providers, who act only on our instructions:

• Resend (United States): sending transactional e-mails, in particular sign-in codes. Your e-mail address and the message content pass through this provider.
• [To complete: hosting provider name] ([To complete: hosting provider address]): hosting of the application, the API and the database.

Data may be disclosed to the competent authorities upon lawful request.

Sending e-mails through Resend involves a transfer of data to a foreign country. We limit this transfer to what is strictly necessary (e-mail address and message content) and carry it out in compliance with the conditions that Law No. 18-07 sets for transfers of data abroad.

We keep data only as long as necessary:

• Account, company profile, offers, vehicles and searches: for the lifetime of the account, then deleted or anonymised within 30 days after the account is closed.
• Sign-in codes: valid for 10 minutes and single-use; only their hash is kept, then purged with technical data.
• Technical and security logs (including IP address): 12 months at most.
• Proof of consent: kept with the account, then for 5 years after it is closed in order to establish our rights.
• Messages sent to our contact address: 3 years from the last exchange.

Communications are encrypted (HTTPS). There is no password to steal: sign-in codes are single-use, expire quickly, are stored hashed and the number of attempts is limited. Access to the database is restricted to authorised people. As no system is infallible, we will notify you and the competent authority in case of a data breach, as the law requires.

You have the following rights over your data:

• access: find out whether we process your data and obtain a copy;
• rectification: have inaccurate or incomplete data corrected or updated;
• deletion: ask for your data to be erased where the legal conditions are met;
• objection: object, on legitimate grounds, to a processing;
• withdrawal of consent: at any time, which results in the closure of the account.

To exercise them, write to [To complete: contact e-mail] from your account address. We reply within one month at most. If you believe your rights are not respected, you may refer the matter to the National Authority for the Protection of Personal Data (ANPDP).

Naqlia only uses cookies that are essential to operation (session, language, menu state). Details are in the cookie policy.

The service is aimed at adult professionals. It is not intended for minors and we do not knowingly collect their data.

This policy may change. The date of the current version is shown at the top of the page; in case of a significant change, we will inform you.