In short.
- No cookies and no advertising trackers. Our fonts and tools are served from our own website.
- Usage statistics are anonymous and are not personal information. We count page views and the use of our calculators, reading time and clicks for every visitor, with no visitor code, no IP address and nothing else that could identify you.
- Personal information only with your consent. On this website we collect personal information only when you send us a form, and only after you tick the consent box on that form.
- Documents you read into our tools never leave your device.
- Quote requests are sent with your consent, used only to answer you, and deleted after 24 months if they don't lead to business. Partner applications are kept on file with your consent; if you withdraw it, we remove your personal details.
- You can ask for a copy of your data, or for it to be deleted, at any time. Specific information for the UAE and India is below.
1. Who we are
Apex Ocean Lines F.Z.C (apexoceanlines.com), Premises No. B.C. 1309652, C1 Building, Ajman Free Zone, Ajman, United Arab Emirates is responsible for the personal data described here: the "controller" under the GDPR and the UAE law, and the "Data Fiduciary" under India's law. For any question about this notice, to use your rights or to raise a grievance, email info@apexoceanlines.com with "Privacy request" in the subject.
2. What we collect, why, and on what legal basis
| Purpose | Information | Legal basis (GDPR; for the UAE and India see sections 11 and 12) |
|---|---|---|
| Delivering and protecting the website | Connection data such as your IP address, processed by our host Cloudflare to deliver pages and block attacks. We do not store it. | Legitimate interests in a secure, working website (Art. 6(1)(f)) |
| Usage statistics (anonymous) | Page views, counted by our server when it sends you a page: the page, the website that linked to it (domain only), campaign tags in the link (such as utm_source), country, device type, browser and operating-system family and preferred language, as your browser sends them with every request. Nothing is read from or stored on your device for this, and no IP address or visitor code is kept, so page views cannot be linked to you or to each other. With the page script, for the same page view: active time, scroll depth, screen-size band, clicks on Contact, WhatsApp, email and outside links, and for calculators the numbers, options and dates entered and the results (never names, emails, phone numbers or free text). Since 11 October 2026 no visitor code is created; older statistics contain a daily-changing one-way code that can no longer be linked to anyone, because the daily value behind it was deleted after two days. | Not personal data: these statistics do not identify you, so data protection law (GDPR, the UAE law and India's law) does not require consent for them, and we collect them for every visitor. The page script reads only what it measures on the page you are viewing (active time, scroll depth, screen-size band and the clicks and calculator values listed) and stores nothing on your device for statistics. |
| Quote requests | What you enter (name, company, email, phone, ports, mode, Incoterm, cargo details), the vessel and voyage if you chose one, the calculator or offer you came from, campaign tags, the page that linked to the form, your browser and operating-system family, and a one-way code made from your IP address with a secret key (used only to stop more than five requests in ten minutes from one connection). We also limit requests from one email address (five an hour), and mark messages that look like spam (for example, full of links) for our team to review. We also record your consent: the wording you agreed to and when. | Your consent (Art. 6(1)(a)), given with the tick box on the form. You can withdraw it at any time by emailing us; this does not affect what was done before. The IP code: legitimate interest in preventing abuse (Art. 6(1)(f)). |
| Partner applications | What you enter (partnership type, name, company, email, phone, country or city, the number of shippers you could introduce and a description of your network), campaign tags, the page that linked to the form, your browser and operating-system family, and a one-way code made from your IP address with a secret key (used only to stop more than three applications in ten minutes from one connection; one email address can send two a day). Applications that look like spam are marked for our team to review. We use it to assess your application, reply to you, keep it on file for the partner programme and, if we go ahead, prepare the partner agreement. We also record your consent: the wording you agreed to and when. | Your consent (Art. 6(1)(a)), given with the tick box on the form. You can withdraw it at any time by emailing us; this does not affect what was done before. The IP code: legitimate interest in preventing abuse (Art. 6(1)(f)). |
| Shipment status requests | What you enter in the form, and that you ticked the consent box. | Your consent (Art. 6(1)(a)), given with the tick box on the form. You can withdraw it at any time by emailing us. |
| Emails and WhatsApp messages | Your message and contact details, handled by the email or WhatsApp service you chose and by our team. | Steps before or under a contract (Art. 6(1)(b)), or legitimate interests in answering you (Art. 6(1)(f)) |
| The privacy notice | The time you closed the short privacy notice, stored on your own device so that it is not shown on every page. It is not sent to us. | Needed to show the notice once (Art. 6(1)(f)) |
Documents you read into a tool (invoices, packing lists, bills of lading or photos) are processed entirely inside your browser by software served from our own website. They are never uploaded to us or anyone else and are not stored. Our statistics record only that a document was used, its general type and how many values were found, never its contents or file name.
Container tracking. Numbers you enter in our free tracker are checked inside your browser and are not sent to us or stored. When you choose to open a shipping line's tracking page, you go to that line's website and its own privacy policy applies. Our anonymous statistics record only the kind of number, the shipping line and whether the check digit was valid, never the number.
Do you have to give us data? To answer a quote request or a partner application we need your name and email address; everything else is optional. We do not make decisions about you by automated means, and we do not build profiles, sell data or use it for advertising.
3. Cookies and storage on your device
We do not set cookies. The only thing we store on your device is the time you closed the short privacy notice (in your browser's local storage, kept for 12 months, then the notice is shown once more). Nothing is stored on your device for statistics. On pages with a form, Cloudflare Turnstile checks that the form is not being sent by a bot. When you send the form, our server or our form provider asks Cloudflare to confirm the check, sending the check's one-time token and your IP address. It is part of the form's security and is described in Cloudflare's Turnstile privacy addendum.
4. Who receives your data
Only our team and these service providers, each acting on our instructions under data processing terms:
- Cloudflare hosts and protects the website, runs the code that receives forms and statistics, and provides Turnstile. Global network; Cloudflare, Inc. is based in the United States.
- Supabase hosts our database (statistics, quote requests and partner applications) in its Mumbai, India region.
- Formspree delivers enquiry forms to our team by email. Based in the United States.
- Microsoft 365 hosts our company email.
We may also disclose data where the law requires it, or to protect our rights. We never sell personal data.
5. International transfers
Our database is in India and some of our providers are in the United States, so your data may be processed outside your country. India has no adequacy decision from the European Commission. For data from the EU, EEA, UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK and Swiss equivalents) in our providers' data processing terms and, for US providers certified under it, the EU–U.S. Data Privacy Framework. You can ask us for a copy of the relevant safeguards.
6. How long we keep it
| Information | Kept for |
|---|---|
| Usage statistics | 400 days, then deleted automatically. |
| IP code and browser family on a quote request or partner application | 24 hours, then removed automatically |
| Quote requests that do not lead to business | 24 months after we receive them, then deleted automatically, with the contact details if nothing else needs them; sooner if you withdraw your consent or ask us to delete them |
| Partner applications | Kept on file with your consent; we do not delete them after a set time. If you withdraw your consent or ask us to erase your data, we remove your personal details (name, contact details, company, location and the description of your network) and keep only an anonymous record of the application: its reference, dates, partnership type, network size and outcome |
| Requests and applications marked as spam | 30 days |
| Customers' requests and records | For the business relationship, then as long as the law requires us to keep business records |
| Form emails and messages | In our mailbox and Formspree account for as long as needed to deal with your request and any resulting business, and to meet legal obligations |
| The time you closed the privacy notice | 12 months on your device |
7. Your rights
Depending on where you live, you can ask us to:
- give you a copy of the personal data we hold about you, including in a portable format;
- correct it if it is wrong or incomplete;
- delete it;
- restrict how we use it, or object to uses based on our legitimate interests;
- withdraw your consent at any time, as easily as you gave it, by emailing us (address below). Withdrawing does not affect what was done before.
Email info@apexoceanlines.com. We reply within one month (two more months for complex requests, and we will tell you if so). We may ask you to write from the email address you used with us, so we know the request is yours. Usage statistics cannot be linked to you, so we cannot retrieve or delete them for you.
You also have the right to complain to a data protection authority, in particular where you live or work: in the EU or EEA your national authority (list at edpb.europa.eu), in the UK the Information Commissioner's Office (ico.org.uk), and in Switzerland the Federal Data Protection and Information Commissioner. We would appreciate the chance to sort out any concern first.
8. How we protect it
Encrypted connections only (HTTPS with HSTS), a strict content security policy, and no third-party scripts except the form bot check. The database is in a private area that the public internet cannot query; every table has row-level access rules, changes are recorded in an audit log, and the access keys are held only by our hosting platform. Personal data in that log is removed when the record is deleted. Documents you read into our tools never leave your device.
9. Children
This website is for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 16 (or under 18 where Indian law applies).
11. If you are in the United Arab Emirates
The UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) applies to our processing.
- Grounds: usage statistics are anonymous and do not identify you, so they are not personal data under the Law. Quote requests, shipment status requests and partner applications: your consent, given with the tick box on each form, which you can withdraw at any time. The short-lived IP code protects the forms against abuse as part of providing them.
- Your rights: to be told how your data is processed; to get a copy and have it sent to another provider; to have it corrected, completed or erased; to restrict or stop its processing; to object to decisions based solely on automated processing (we make none); and to withdraw consent at any time.
- Transfers: our database is in India and some providers are in the United States. They are bound by data processing terms that require them to protect your data.
- Complaints: to us first, then to the UAE Data Office.
12. If you are in India
India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025 apply to personal data of people in India.
- Grounds: usage statistics are anonymous and do not identify you, so they are not personal data under the Act. Quote requests, shipment status requests and partner applications: your consent (section 6 of the Act), given with the tick box on each form; you can withdraw it as easily, and we then erase your personal details. Emails and messages you send us directly: you give us your details voluntarily for the specific purpose of answering you (a legitimate use under section 7(a) of the Act).
- Your rights: a summary of your personal data, how it is processed and who it is shared with; correction, completion, updating and erasure; nominating another person to exercise your rights if you die or become unable to; and readily available grievance redressal.
- Grievances: email info@apexoceanlines.com with "Privacy grievance" in the subject. We acknowledge promptly and respond within 30 days. If you are not satisfied, you may then complain to the Data Protection Board of India.
- Data breaches: if a breach affects your data, we will tell you and the Data Protection Board as the Rules require.
- Language: you can ask for this notice in English or in any language listed in the Eighth Schedule to the Constitution of India.
- Where data is kept: our database is in Mumbai, India; some providers process data in the United States.
13. Changes to this notice
We will update this notice when our website, providers or practices change, and show the date at the top. Significant changes will be highlighted on this page.
See also our legal disclaimer.