Privacy & LGPD

Privacy Policy

Your privacy is our responsibility. Here you'll find everything about how we handle your data with full transparency and in compliance with Brazil's LGPD.

Last updated: January 2025

Who We Are

EncoreLinx is a SaaS company that operates an ocean freight quotation platform. We connect importers and exporters directly to the APIs of the world's largest carriers, giving you real prices without intermediary markup.

Our platform connects importers and exporters directly to the APIs of MSC, Maersk, CMA CGM, ZIM, COSCO, PIL, and Evergreen — delivering real-time ocean freight quotes with full price transparency and no middlemen.

This Privacy Policy describes how we collect, use, store, share, and protect the personal data of our customers, users, and visitors, in compliance with Brazil's General Data Protection Law (LGPD — Law nº 13.709/2018) and other applicable regulations.

By using our platform or visiting our website, you acknowledge that you have read, understood, and agree to the terms of this Policy. If you disagree, please do not use our services and reach out to us for clarification.

Data We Collect

Personal Identification

Full name
Corporate email address
Phone number
Job title and department

Company Data

Legal company name
Tax ID (CNPJ)
Full address (headquarters and branches)
Industry and company size

Platform Usage Data

Access logs (date, time, feature accessed)
Quote history
Routes, origin and destination ports searched
Cargo types (FCL/LCL) and containers queried
Account preferences and settings

Technical Data

IP address
Browser type and version
Operating system and device
Session and preference cookies
Application performance and error data

Sensitive Data: EncoreLinx does not collect sensitive data as defined in Art. 5, II of the LGPD (such as health, biometric, political, or religious data). Should any such data reach us inadvertently, it will be immediately deleted.

How We Collect Data

Registration Forms

Data you provide directly when creating an account, filling out contact forms, or requesting a demo.

Platform Usage

Data generated automatically as you navigate and use the quoting features.

Cookies and Technologies

Session cookies, localStorage, and similar technologies to maintain preferences and analyze usage.

Carrier Integrations

Response data from carrier APIs tied to your quotes (routes, tariffs, dates).

How We Use Your Data

We only process your data for legitimate, specific, and disclosed purposes. Below is each purpose alongside its legal basis under the LGPD:

Purpose	Legal Basis (LGPD)
Providing ocean freight quotation services	Contract performance (Art. 7, V)
User account management and authentication	Contract performance (Art. 7, V)
Account, quote, and freight alert communications	Contract performance (Art. 7, V)
Continuous platform improvement and usage analysis	Legitimate interest (Art. 7, IX)
Fraud prevention and platform security	Legitimate interest (Art. 7, IX)
Compliance with legal and regulatory obligations	Legal obligation (Art. 7, II)
Marketing communications, updates, and promotions	Consent (Art. 7, I)
Commercial outreach and customer support	Contract performance (Art. 7, V)

When processing is based on consent, you may withdraw it at any time without affecting data already processed, per Art. 8, §5 of the LGPD.

Data Sharing

EncoreLinx does not sell, rent, or trade your personal data to third parties, under any circumstances. Sharing only occurs in the situations below, limited strictly to what is necessary:

Integrated Carriers

Required for the service

MSC, Maersk, CMA CGM, ZIM, COSCO, PIL, Evergreen

Only the data needed to process and return freight quotes (route, date, cargo type). Each carrier has its own privacy policy governing how they handle that data on their platforms.

Infrastructure Providers

Under DPA contracts

Cloud, database, CDN

Technology infrastructure partners (such as AWS, Google Cloud, or Azure) that host and process data on our behalf, under Data Processing Agreements (DPAs) that guarantee protection equivalent to the LGPD.

Analytics Tools

With consent only

Google Analytics and similar

With your consent, we share anonymized usage data with analytics tools to understand how the platform is used and continuously improve it.

Authorities and Public Agencies

Legal obligation

When required by law

We may share data in response to court orders, requests from competent public authorities, or legal obligations, always limited to exactly what is requested.

Our commitment: Your operational freight data — routes, volumes, suppliers, destinations — is never shared with competitors or used for third-party market analysis. That data belongs to you.

Security

EncoreLinx applies rigorous technical and organizational measures to protect your data against unauthorized access, loss, destruction, alteration, or improper disclosure.

Encryption in Transit

TLS 1.3 / SSL on all communications between your browser or API client and our servers.

Encryption at Rest

AES-256 for all data stored in our databases and backups.

Access Control (RBAC)

Role-based access control. Only team members with a legitimate need can access personal data.

Audit Logs

Immutable records of all sensitive operations performed on the platform for full traceability.

Regular Pen Tests

Periodic penetration tests by a specialized team to identify and fix vulnerabilities.

ISO 27001 Principles

Security controls aligned with international best practices for information security management.

In the event of a security incident that could pose risk or harm to data subjects, EncoreLinx will notify Brazil's ANPD and affected individuals within the timeframes established by the LGPD, per Art. 48.

Cookies

We use cookies and similar technologies to keep the platform running, improve your experience, and understand how the system is used.

Essential Session Cookies

Required

Finalidade: Authentication, active session maintenance, basic security preferences.

Consentimento: Cannot be declined — required for the platform to function.

Analytics (Google Analytics)

With consent

Finalidade: Navigation analysis, most visited pages, usage time, and error detection.

Consentimento: Activated only with your explicit consent. You can decline via the cookie banner.

Language and UI Preferences

Functional

Finalidade: We remember your preferred language, interface theme, and other experience settings.

Consentimento: Can be disabled via browser settings without affecting core functionality.

Managing cookies

You can manage or decline cookies at any time in your browser settings (Chrome, Firefox, Safari, Edge). Disabling essential cookies may impact platform functionality. For analytics cookies, use the consent banner displayed when you visit our site.

Data Retention

We keep your data only as long as necessary to fulfill the purposes for which it was collected, or as required by law. Retention periods are:

Account and registration data

Legal and contractual obligation

While account is active + 5 years after closure

Platform access logs

Brazilian Internet Civil Framework (Law nº 12.965/2014)

6 months

Quote history

Fiscal and accounting obligation (Civil Code and tax law)

5 years

Marketing and communications data

Consent as legal basis

Until consent is withdrawn

Technical and diagnostic data

Legitimate interest — service maintenance and improvement

90 days

Customer support data

Legitimate interest — support history

2 years after ticket closure

After the retention period, data is securely and irreversibly deleted, or anonymized when needed for statistical purposes.

Your Rights (LGPD)

Brazil's LGPD grants you, as a data subject, a set of rights you can exercise at any time. EncoreLinx is committed to responding to requests within 15 calendar days, per Art. 18 of the LGPD:

Confirmation of processingArt. 18, I

Know whether we process your personal data or not.

Access to your dataArt. 18, II

Obtain a full copy of the personal data we hold about you.

Correction of dataArt. 18, III

Request updates to incomplete, inaccurate, or outdated data.

Anonymization, blocking, or deletionArt. 18, IV

Request anonymization, blocking, or removal of unnecessary or unlawfully processed data.

Data portabilityArt. 18, V

Receive your data in a structured format for transfer to another provider.

Deletion of consent-based dataArt. 18, VI

Request deletion of data processed based on your consent.

Information about sharingArt. 18, VII

Know which public or private entities your data has been shared with.

Withdrawal of consentArt. 18, IX

Revoke consent at any time, without retroactive effect.

How to exercise your rights

Send an email to privacidade@encorelinx.com with the subject "LGPD Rights Request", identifying yourself as the data subject and specifying which right you wish to exercise. We'll respond within 15 calendar days. We may ask for identity verification before processing your request.

DPO — Data Protection Officer

The LGPD (Art. 41) requires data controllers to appoint a Data Protection Officer (DPO). EncoreLinx's DPO is the official channel between the company, data subjects, and the ANPD.

Data Protection Officer (DPO)

To be appointed

Contact Email

dpo@encorelinx.com

The DPO is responsible for receiving communications from data subjects and the ANPD, guiding staff on data protection practices, and monitoring LGPD compliance within EncoreLinx.

The DPO's identity and contact details will be publicly disclosed in compliance with Art. 41, §1 of the LGPD, and this page will be updated upon official appointment.

Policy Changes

This Privacy Policy may be updated periodically to reflect changes in our services, applicable law, or our data processing practices.

Significant changes will be communicated at least 15 (fifteen) days in advance through the following channels:

Notification sent to your registered email with a summary of changes and a link to the updated policy.

Platform Banner

A prominent notice displayed in the platform interface during the transition period.

The effective date of the current version is shown at the top of this page. Continued use of the platform after the new policy's effective date constitutes acceptance of the changes. If you disagree, you may close your account at no charge and request deletion of your data.

Contact

For questions about this Privacy Policy, to exercise your rights as a data subject, or for any matter related to the processing of your personal data, reach out to us:

Privacy Email

privacidade@encorelinx.com

DPO — Data Protection Officer

dpo@encorelinx.com

Headquarters

EncoreLinx — Brazil

You also have the right to file a complaint with Brazil's National Data Protection Authority (ANPD) if you believe your rights were not properly addressed. Learn more at www.gov.br/anpd.

LGPD Compliance — Lei nº 13.709/2018

Brazil's General Data Protection Law (LGPD — Lei nº 13.709/2018) establishes rules for the collection, processing, storage, and sharing of personal data in Brazil, with the aim of protecting individuals' fundamental rights of freedom and privacy. EncoreLinx is fully committed to compliance with the LGPD in all its data processing activities.

Legal Bases We Use (Art. 7)

Every data processing operation at EncoreLinx is grounded in at least one of the following legal bases:

Consent

Art. 7, I

Marketing communications, newsletters, and optional promotional content — only when you explicitly opt in.

Contract Performance

Art. 7, V

Processing necessary to deliver the ocean freight quotation service and manage your account.

Legitimate Interest

Art. 7, IX

Platform improvements, usage analytics, fraud prevention, and security monitoring.

Legal Obligation

Art. 7, II

Retention of fiscal and accounting records as required by Brazilian tax law and the Civil Code.

Credit Protection

Art. 7, X

Registration validation and credit checks when required for service onboarding.

Your Rights Under LGPD (Art. 18)

As a data subject, you have the following rights, which you can exercise at any time by contacting us:

Confirmation that your personal data is being processed
Access to the personal data we hold about you
Correction of incomplete, inaccurate, or outdated data
Anonymization, blocking, or deletion of unnecessary or unlawfully processed data
Portability of your data to another service provider
Deletion of data processed based on your consent
Information about public or private entities your data has been shared with
Withdrawal of consent at any time, without retroactive effect

ANPD — Autoridade Nacional de Proteção de Dados

The ANPD is Brazil's national supervisory authority responsible for overseeing and enforcing the LGPD. If you believe your rights under the LGPD have not been properly addressed by EncoreLinx, you have the right to file a complaint with the ANPD at www.gov.br/anpd.

Contact our Data Protection Officer (DPO)

For any LGPD-related request, question, or complaint, reach out directly to our DPO:

dpo@encorelinx.com