Privacy Policy

Last updated: 17 November 2025

1. Who we are

This Privacy Policy explains how we collect and process personal data when you visit our website, contact us or use our services.

The data controller is:

Shipping Point EOOD (trading as Shipping Point Ltd)
Registered address: 131, Zelenika Parva Street, entr. 2, 4th floor, Office no. 15, 9000 Varna, Bulgaria
Company ID (UIC): 203835954
VAT number: BG203835954
Email: office@shippingpoint.bg
Landline: (+359 52) 803 603
Mobile: (+359 889) 670001 / (+359 889) 690003

In this document we refer to Shipping Point Ltd as “we”, “us” or “our”, and to the website visitor or client as “you”.

2. Scope of this Privacy Policy

This Policy applies to:

visitors of our website dev.shippingpoint.bg / shippingpoint.bg;
individuals who contact us by email, phone or through the contact and quote forms;
representatives and employees of our corporate clients, suppliers and partners.

It does not apply to services or websites of third parties that may be linked from our website. Those are governed by their own privacy policies.

3. Personal data we collect

We collect and process the following categories of personal data:

3.1 Information you provide directly to us

Identification and contact details: name, email address, phone number, company name, position.
Communication content: messages you send via contact or quote forms, by email or phone.
Business information: details about your cargo, type of shipment, ports of loading and discharge, Incoterms, preferred transport mode and any other information you choose to share in order to receive an offer or to perform a contract.

3.2 Data collected automatically when you use the website

Technical and log data: IP address, browser type, operating system, date and time of access, pages visited, device information.
Cookie-related data: information stored and read from cookies and similar technologies, in accordance with our Cookie Policy.

3.3 Data received from third parties

In some cases we may receive limited information about you from our partners (for example, shipping lines, agents, insurers, customs representatives) when this is necessary to perform a contract or comply with a legal obligation.

We do not intentionally collect or process special categories of data (such as health data, political opinions, etc.). Please do not include such information in your communication with us.

4. Purposes and legal bases for processing

We process personal data only when there is a valid legal basis under the General Data Protection Regulation (GDPR). Depending on the situation, we rely on one or more of the following grounds:

4.1 Performance of a contract or steps taken at your request before entering into a contract

Preparing and sending offers and quotes.
Communicating with you regarding shipments, port calls, customs clearance, insurance, cargo handling or other logistics services.
Managing our relationship with clients, suppliers, agents and other partners.

4.2 Compliance with a legal obligation

Keeping accounting and tax records.
Complying with applicable maritime, customs, port and transport regulations.
Responding to lawful requests from competent authorities.

4.3 Legitimate interest

We process certain data on the basis of our legitimate interests, as long as these interests are not overridden by your rights and interests. Our legitimate interests include in particular:

ensuring the security, availability and proper functioning of our website, IT and communication systems;
developing, improving and promoting our logistics, ship agency and related services;
protecting and exercising our legal rights and handling potential claims and disputes;
managing and optimising our internal operations and business relationships, including statistics, reporting and planning.

4.4 Consent

Using non-essential cookies and similar technologies for analytics and advertising, where required.
Sending marketing communication by email, where applicable.

When processing is based on consent, you can withdraw your consent at any time, without affecting the lawfulness of processing already carried out.

5. Cookies and similar technologies

We use cookies and similar technologies to operate the website, to remember your preferences, to analyse traffic and, where applicable, to personalise content and ads.

Details about the types of cookies we use, their purposes and how you can manage them are described in the Cookie Policy section below. You can change your cookie settings at any time through the cookie consent banner or your browser settings.

6. How we share personal data

We do not sell your personal data. We may share it only when necessary and on a need-to-know basis with:

Service providers and technical partners – companies providing hosting, IT support, email services, analytics, online forms, cookie consent tools and similar services, acting mainly as data processors under our instructions. We require all such processors to provide sufficient guarantees that they implement appropriate technical and organisational measures to protect personal data.
Business partners and subcontractors – shipping lines, port agents, surveyors, customs representatives, warehousing and trucking companies, insurers and other logistics providers involved in carrying out your shipment or service request.
Professional advisers – auditors, accountants, legal consultants, when this is necessary to protect our legitimate interests and comply with legal obligations.
Public authorities and regulators – customs, port authorities, law enforcement bodies, tax authorities and courts, when required by applicable law or when necessary to protect our rights or the rights of others.

All recipients are bound by confidentiality obligations, and where required by GDPR we conclude data processing agreements with them.

7. International transfers

As part of our logistics and shipping activities, some of our partners and service providers may be located outside the European Economic Area (EEA). This can include, for example, shipping lines, port agents or IT service providers.

When personal data is transferred outside the EEA, we ensure that one of the following safeguards is in place:

an adequacy decision by the European Commission for the respective country; or
standard contractual clauses approved by the European Commission; or
other appropriate safeguards as allowed by GDPR.

You can contact us for more information about the specific safeguards applied to your data.

8. Data retention

We retain personal data only for as long as necessary for the purposes described above or as required by law. Typical retention periods are:

Website server logs: normally up to 12 months, unless a longer period is needed for security or incident investigation.
General enquiries and quote requests (email or forms): up to 2 years from the last communication, unless a contractual relationship is established.
Client files and documentation related to shipments, port calls, customs clearance, insurance and accounting: usually up to 5–10 years, in line with applicable commercial and tax legislation.
Data processed for marketing communication (for example, newsletters or campaigns) based on consent or legitimate interest: usually up to 3 years from your last interaction with us (such as opening an email or clicking a link), unless you withdraw consent earlier or object to processing.
Data processed based on your consent for other purposes: until you withdraw your consent or until the purpose is fulfilled, whichever occurs first, unless a different legal basis applies.

After the retention period expires, data will be securely deleted or anonymised.

9. How we protect your data

We apply appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include, among others:

use of secure servers and encrypted connections where appropriate;
restricted access to personal data based on roles and responsibilities;
internal policies and staff training on data protection and confidentiality;
procedures for incident detection and response.

While we strive to protect your data, no system can be completely secure. If we become aware of a personal data breach that may pose a high risk to your rights and freedoms, we will notify you and the competent authority in accordance with GDPR.

10. Your rights under GDPR

Subject to certain conditions and limitations, you have the following rights in relation to your personal data:

Right of access – to obtain confirmation whether we process your personal data and to receive a copy of it.
Right to rectification – to request correction of inaccurate or incomplete data.
Right to erasure – to ask us to delete your personal data when it is no longer needed, when you withdraw consent (where applicable), or when processing is unlawful.
Right to restriction of processing – to request temporary restriction in certain cases, for example while we verify the accuracy of data.
Right to data portability – to receive personal data you provided in a structured, commonly used and machine-readable format and to transmit it to another controller, where processing is based on consent or contract and carried out by automated means.
Right to object – to object, on grounds relating to your particular situation, to processing based on our legitimate interests, including profiling. You also have the right to object at any time to processing for direct marketing purposes.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

To exercise your rights, please contact us at office@shippingpoint.bg. We may ask you to provide additional information to verify your identity.

If you believe that your data protection rights have been violated, you also have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP) in Bulgaria or with your local supervisory authority in the EU.

Commission for Personal Data Protection (CPDP)
Address: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria
Website: CPDP website

If you are located in the United Kingdom, you may also contact the Information Commissioner’s Office (ICO) via the ICO website.

11. Profiling and automated decision-making

We may use certain data, in particular cookie and analytics data, to create aggregated or pseudonymised profiles for statistical analysis, performance measurement and, where applicable, for tailoring advertising and marketing messages to broad audience segments. This type of profiling does not produce legal effects concerning you and does not similarly significantly affect you as an individual.

We do not carry out automated decision-making within the meaning of Article 22 GDPR that is based solely on automated processing and produces legal or similarly significant effects for you.

12. Children’s data

Our website and services are intended for business users in the logistics and shipping sector and are not directed at children. We do not knowingly collect personal data from individuals under 18 years of age. If you believe a child has provided personal data to us, please contact us so we can delete it.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes in legislation, our services or our internal practices. The latest version will always be available on our website and will indicate the date of the last update.

If the changes are substantial, we may provide additional notice (for example by email or a banner on the website).

Cookie Policy

Last updated: 17 November 2025

1. What are cookies?

Cookies are small text files that are stored on your device (computer, tablet, smartphone) when you visit a website. They are widely used to make websites work, to improve performance, and to provide information to the site owners.

Cookies can be:

First-party cookies – set by the website you are visiting.
Third-party cookies – set by another domain (for example, analytics or advertising providers).

Cookies may be stored only for the duration of your visit (session cookies) or for a longer period (persistent cookies).

2. Who is responsible for cookies on this website?

Cookies used on this website are controlled by:

Shipping Point EOOD (Shipping Point Ltd)
131, Zelenika Parva Street, entr. 2, 4th floor, Office no. 15, 9000 Varna, Bulgaria
Email: office@shippingpoint.bg

We may also allow certain third parties (for example, analytics and advertising partners) to place cookies via our website, as explained below.

3. How and why we use cookies

We use cookies and similar technologies for the following purposes:

Strictly necessary cookies
These cookies are essential for the operation of the website and cannot be switched off through our systems. They are usually set in response to actions you take, such as setting your privacy preferences, logging in, filling in forms or navigating between pages. Without these cookies, the website may not function properly.
Functional (preference) cookies
These cookies allow the website to remember your choices and preferences, such as language settings, and provide enhanced features and a more personalised experience.
Analytics and performance cookies
These cookies help us understand how visitors use our website, which pages are most frequently visited, how users move around the site and if they experience errors. We use this information in aggregated or pseudonymised form to improve the performance and content of the website. We may use tools such as Google Analytics or similar services for this purpose.
Advertising and personalisation cookies
These cookies may be used to deliver more relevant ads to you, both on our website and on other sites, and to limit how often you see a particular advertisement. They may also help measure the effectiveness of advertising campaigns. In connection with Google tags, our cookie banner allows you to control preferences such as “ad_storage”, “ad_user_data”, “ad_personalization” and “analytics_storage” under the consent mode.

We only use non-essential cookies (analytics, advertising and some functional cookies) when you give us your consent via the cookie banner.

4. Third-party cookies and providers

Some cookies on our website are set by third parties. These may include, for example:

Google LLC and its affiliates – for analytics (Google Analytics) and online advertising and measurement (Google Ads, Google Tag Manager).
Providers of embedded content such as maps or videos, if such content is integrated into the website.

The exact third parties and the cookies they set may change over time as we update our website and tools. Information about the current cookies and vendors is available in the cookie banner or consent management tool, where you can also review and change your preferences.

Third-party providers process data in accordance with their own privacy and cookie policies, in addition to this Cookie Policy.

5. Cookie consent and management

When you first visit our website, you will see a cookie banner that allows you to:

accept all cookies;
reject all non-essential cookies; or
customise your preferences by category (for example, enabling only analytics cookies).

You can change your preferences at any time by reopening the cookie settings (for example, via the banner or a dedicated link in the website footer, if available).

In addition, most browsers allow you to:

see which cookies are stored on your device and delete them;
block third-party cookies;
block cookies from specific sites;
block all cookies or delete all cookies when closing the browser.

Please note that blocking or deleting cookies may affect the functioning of some parts of the website and your user experience.

For more information on how to manage cookies in popular browsers, you can consult their help pages, such as:

6. Data collected through cookies

Depending on the type of cookie, the information collected may include:

IP address (abridged or anonymised where possible);
device and browser type, operating system;
date and time of visit, pages viewed and time spent on them;
referrer URL (the site from which you arrived on our website);
basic interaction data (clicks, scrolls, navigation).

We do not use cookies to intentionally collect sensitive personal data. For analytics and advertising cookies, the data is typically processed in aggregated or pseudonymised form.

7. Relationship with the Privacy Policy

Information collected via cookies can constitute personal data when it relates to an identifiable individual. In such cases, our Privacy Policy applies in addition to this Cookie Policy, including regarding your rights, international transfers, data security and contact details.

8. Changes to this Cookie Policy

We may update this Cookie Policy from time to time, for example when we introduce new cookies or change the tools we use. The latest version will always be available on our website and will indicate the date of the last update.

If the changes are significant, we may show an additional notice or request you to renew your cookie preferences.

9. Contact

If you have any questions about how we use cookies or how your personal data is processed, you can contact us at:

Email: office@shippingpoint.bg
Address: 131, Zelenika Parva Street, entr. 2, 4th floor, Office no. 15, 9000 Varna, Bulgaria