Privacy Policy

Redcliff Logistics is a US business providing botanical sourcing, freight forwarding, warehousing, final-mile delivery, customs and compliance support to manufacturers, distributors, and end-buyers of botanical and natural-product materials. Our principal place of business is in Utah, United States.

For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, Redcliff is the data controller of personal information collected via the Site. For the purposes of the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), we are the business that determines the purposes and means of processing.

We collect the following categories of information from Site visitors:

Information you provide

When you submit a contact form, request a quote, request a sample, or request a shipment-tracking update, we collect the information you enter, which typically includes:

• Name and business contact details (work email, work phone, company name)
• The subject and content of your inquiry (e.g. materials, origin, destination, quantities, sample addresses, tracking references, or free-form notes)
• Where relevant, shipping or sample delivery addresses you have provided

Information collected automatically

When you visit the Site, certain information is collected automatically by our servers, our content delivery network, and the technologies described in our Cookie Policy. This includes:

• Internet Protocol (IP) address
• Browser type, language preference, and operating system
• Pages requested, referring URL, and timestamp of access
• Session and security tokens (including CSRF protection tokens)

Information from third parties

When you submit a form on the Site, we use Google reCAPTCHA v3 to help prevent automated abuse. reCAPTCHA may collect technical information and behavioural signals from your device for the purpose of producing a risk score, in accordance with Google's own privacy practices. We do not control what Google collects through this service; please refer to Google's Privacy Policy for details.

We use the information described above for the following purposes:

• To respond to your inquiries, quotes, sample requests, and tracking-status requests, including by email and phone
• To provide, operate, secure, and improve the Site, including by preventing fraudulent submissions, abuse, and security incidents
• To maintain records of business communications consistent with our legitimate business interests and applicable law
• To comply with legal obligations, including obligations under customs, trade, and product-traceability regulations applicable to our logistics services
• To enforce our terms of use and protect our rights, property, and the safety of others

We do not use the information collected via the Site for automated decision-making with legal or similarly significant effects.

Where the GDPR or UK GDPR applies, we rely on the following legal bases for processing personal information:

• Article 6(1)(b) — performance of a contract or pre-contractual steps at your request, when you submit an inquiry or quote request as a prospective customer
• Article 6(1)(f) — our legitimate interests in operating, securing, and improving the Site, responding to business inquiries, and maintaining records of communications, where those interests are not overridden by your rights
• Article 6(1)(c) — compliance with legal obligations applicable to our logistics activities
• Article 6(1)(a) — your consent, where you have given it (for example, by opting into a marketing newsletter)

We do not sell personal information. We do not share personal information with third parties for cross-context behavioural advertising. We share information only as follows:

• Service providers (data processors) who act on our behalf, including SendGrid (transactional email delivery), Google (reCAPTCHA abuse prevention), and our hosting infrastructure provider. These processors are contractually required to handle information only on our instructions and to protect it.
• Our operations team and account managers within Redcliff, where access is necessary to respond to your inquiry or provide a service.
• Regulatory authorities, customs brokers, carriers, and supply-chain partners, but only to the extent necessary for shipments or services you have specifically requested or contracted us to perform.
• Successors in interest (for example, in connection with a merger, acquisition, or sale of business assets), subject to confidentiality and equivalent protection.
• Where required by law, court order, or to protect legal rights, life, property, or safety.

Redcliff is based in the United States. If you are located outside the US, information you submit will be transferred to and processed in the US. Where personal information is transferred from the EEA, UK, or Switzerland to the US or another country that does not have an equivalent data protection regime, we rely on appropriate safeguards including the European Commission's Standard Contractual Clauses or equivalent mechanisms.

We retain personal information for as long as necessary to fulfil the purposes described in this policy, to maintain records of business communications, and to comply with our legal, tax, and regulatory obligations. Specifically:

• Contact inquiries that do not lead to an ongoing engagement: typically retained for up to 24 months after last contact, then archived or deleted.
• Inquiries and communications related to active or recent customer engagements: retained for the duration of the engagement and for at least 7 years thereafter, to meet record-keeping obligations in our industry.
• Technical logs (web server, security): typically retained for 90 days unless retained longer for security investigation.

Depending on where you live, you may have the following rights regarding personal information we hold about you. To exercise any of these, contact us using the details in Section 12.

EU, UK, and Swiss residents (GDPR / UK GDPR)

• Right to access the personal information we hold about you
• Right to request correction of inaccurate information
• Right to request erasure in certain circumstances
• Right to restrict or object to certain processing
• Right to data portability for information you provided to us
• Right to withdraw consent at any time, where processing is based on consent
• Right to lodge a complaint with your local supervisory authority

California residents (CCPA/CPRA)

• Right to know what categories of personal information we collect, the sources, the purposes, and the categories of third parties with whom we share it
• Right to request a copy of specific pieces of personal information we have collected about you
• Right to request deletion of personal information, subject to legal exceptions
• Right to correct inaccurate personal information
• Right to opt out of any sale or sharing of personal information (we do not sell or share personal information for cross-context behavioural advertising)
• Right to non-discrimination for exercising your privacy rights

We will verify your identity before responding to a rights request and will respond within the timeframes required by applicable law. There is no charge for exercising your rights unless requests are manifestly unfounded or excessive.

The Site uses essential cookies and similar technologies for security and core functionality. We do not currently use analytics or marketing cookies. Full details — including how to manage cookies through your browser — are set out in our Cookie Policy.

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorised access, use, alteration, and disclosure. These include encryption in transit (TLS) for all Site traffic, CSRF protection on form submissions, secure credential management for service providers, and access controls within our operations team. No system can be guaranteed perfectly secure; if we become aware of a personal data breach affecting your information, we will notify you and any required regulators in accordance with applicable law.

The Site is directed to businesses, not children. We do not knowingly collect personal information from individuals under 16 years of age. If you believe a child has provided personal information through the Site, please contact us and we will delete the information promptly.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be highlighted in a prominent notice on the Site for at least 30 days following the change. Your continued use of the Site after the effective date of any change indicates your acceptance of the revised policy.

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Redcliff Logistics
1219 W 2285 S
Woods Cross, UT 84087, United States
support@redcliff-logistics.com
+1 (801) 740-3226