Privacy policy

Controller

DCT Service is the public brand of a sole proprietorship registered under KVK 99740265 and VAT number NL005407408B47. Registered trade names include D.C. Service and DCT-Service. Business address: De Pionier 7, De Rips. Privacy contact: info@dct-service.nl or +31 6 84052790.

The exact statement of the owner's personal legal name has not been confirmed and remains LEGAL INPUT REQUIRED.

Data, purposes and legal bases

• Contact and quote requests: name, email, optional phone number, company, route, cargo and message content, to respond and take requested pre-contract steps.
• Accounts: name, contact details, language, hashed password and applicable company/KVK details or work experience, for account management, services and security.
• Services: customer, address, quote, order, shipment, invoice, tracking, communications and deliberately uploaded file data, for performance, support, administration and legal obligations.
• Security: IP address, user agent, session state, login, audit and technical events, for access security and abuse prevention based on legitimate interests.
• DCT Service serves businesses and consumers. A website, account or quote request does not automatically create a transport contract.
• The website currently uses no analytics or marketing tracking. Consent is used only when requested separately and freely.

Recipients and service providers

• Vercel for website hosting and delivery.
• Neon for the production database.
• Namecheap Email for email communications.
• WhatsApp/Meta for customer communications when a customer uses that channel. Phone numbers, profile/account data, message content, attachments and technical metadata may then be processed under that service's terms.
• Authorised people working for DCT Service, only as required for their work.

International transfers — legal review required

Vercel, Namecheap and Meta documentation describes possible processing outside the EEA and mechanisms such as standard contractual clauses. Neon provides privacy and transfer frameworks. The production account regions, agreements, roles and safeguards actually applicable have not been fully confirmed. DCT Service must review its production configuration, data-processing agreements and transfer assessment before making a definitive statement.

Retention

• Login sessions: no more than 8 hours; password-reset tokens: 1 hour; email-verification tokens: 24 hours.
• Account/profile data: intended deletion around one week after closure where no transactional, financial, security, claim or legal need requires longer retention. Final legal and technical adoption is still required.
• Unaccepted quote data: delete when no longer needed; no fixed period has been approved.
• Uploads: intended retention of about 6 months, subject to operational, claim and legal requirements; final legal and technical adoption is still required.
• Invoices and basic tax records: generally 7 years under Dutch tax retention rules; specific records may require longer retention.
• No approved periods exist yet for contact requests, orders/shipments, audit/security logs or tracking/location data. No automatic deletion is promised for these categories.

Security, rights and contact

The website uses access controls, session revocation, protected uploads and security logging. This does not claim any specific security certification.

Where applicable, you may request access, rectification, erasure, restriction, objection and portability. Consent may be withdrawn without affecting earlier lawful processing. Send requests to info@dct-service.nl; appropriate identity checks may be required. You may also complain to the Dutch Data Protection Authority.

The current facts are insufficient to determine conclusively whether a data protection officer is mandatory: DPO REQUIREMENT — LEGAL REVIEW REQUIRED.