Privacy Policy

Privacy Policy

Last updated: 16 October, 2026

 

1 Who We Are

GUANGZHOU GRAIL LOGISTICS CO., LTD. (广州格乐国际物流有限公司), based in Guangzhou, China (“GRAIL”, “we”, “us” or “our”), is responsible for the personal information processing described in this Policy.

This Policy explains how we handle personal information relating to website visitors, people making business enquiries, customer and partner contacts, and job applicants who contact us through this website or its published contact channels.

Where another GRAIL entity is independently responsible for handling your information, the relevant notice or communication will identify that entity. Additional notices may apply to particular services or recruitment activities.

 

2 Information We Collect

The information involved depends on how you interact with us.

Business contact and enquiry information: Your name, company, position, business email address, telephone number, preferred contact method and the information contained in your enquiry or correspondence.

Shipment-related contact information: Where relevant to your request, the names, contact details and collection or delivery addresses of people involved in arranging or receiving a shipment, together with personal information contained in necessary shipping documents.

Recruitment information: Your contact details, CV, employment history, qualifications and other information you choose to provide when applying for a role.

Website and security information: Technical information generated when you access the website, such as your IP address, access time, requested pages, browser or device information, and error or security logs, to the extent collected by the website’s actual configuration.

Information may come directly from you, from someone authorised to act on your behalf, or from a customer or partner involved in a relevant business activity.

Please do not include identity documents, financial account details, health information or other sensitive personal information in general website enquiries unless specifically requested through an appropriate channel.

 

3 How and Why We Use Information

We process relevant information to:

•Respond to enquiries and communicate with you.

• Assess logistics requirements and prepare quotations or service proposals.

• Coordinate requested services and maintain related business records.

• Manage customer and partner relationships.

• Review job applications and communicate with candidates.

• Operate, maintain and protect the website.

• Comply with applicable legal obligations and handle complaints or disputes.

• Send optional marketing communications where legally permitted.

Processing may involve receiving, recording, storing, reviewing, using, transmitting and deleting information, primarily through electronic systems and authorised business communications.

We use personal information only where a valid legal basis exists under applicable law. Depending on the activity and jurisdiction, this may include your consent, compliance with a legal obligation, or processing necessary for a contract to which you are personally a party. Other legal grounds are used only where applicable law permits them.

Where consent is required, we request it before the relevant processing. Separate consent is requested where required by law. This Policy itself does not constitute that consent.

 

4 Information Sharing

Where necessary for the purposes described above and legally permitted, relevant information may be disclosed to:

•Authorised GRAIL entities involved in handling your enquiry or requested services.

•Carriers, freight agents, customs brokers, warehouses, delivery providers and other operational partners involved in a shipment.

•Website hosting, communications, IT support and other service providers supporting our operations.

•Professional advisers, insurers and claims handlers where relevant.

•Courts, regulators or other public authorities where disclosure is lawfully required or permitted.

We limit disclosures to information relevant to the particular purpose. Service providers processing information on our behalf must act within their authorised scope and be subject to appropriate contractual and security requirements.

Some operational partners act as independent organisations with their own legal responsibilities and privacy notices.

Where applicable law requires specific recipient information or separate consent, we provide the required information and obtain that consent before disclosure.

Website service providers and recipients:

Website Service Providers and Recipients — Website Analytics

We use Yandex Metrica, a third-party website analytics service, to understand how visitors find and use our website, evaluate website performance and improve our content and visitor experience.

Service provider: YANDEX, LLC, located at 16 Lva Tolstogo St., Moscow 119021, Russia. Where processing is subject to the GDPR or Swiss or UK data protection laws, the applicable service provider is Air Smart Advertising Solutions FZ-LLC, United Arab Emirates, as specified in the Yandex Metrica Terms of Use.

Information processed: Depending on the analytics settings and your privacy choices, information may include your IP address, cookie and browser identifiers, browser and device details, pages visited, referral sources, visit times, interactions with our website and approximate location. This information is transmitted to Yandex through analytics code on our website and processed to produce statistical reports.

Use of this service may involve processing information outside your country, including in Russia. Where required by applicable law, we obtain the necessary consent before enabling analytics technologies or transferring personal information.

You may contact us using the details provided in this Privacy Policy to ask about our use of analytics or exercise your applicable privacy rights. You can also restrict Yandex Metrica tracking using the Yandex Metrica opt-out browser extension.

Further information is available in the Yandex Privacy Policy. Yandex’s privacy contacts are personal-data@yandex-team.ru for Russia and gdpr@yandex-team.ru for other countries.

 

5 International Processing and Transfers

GRAIL is based in China. Information you submit to the Guangzhou company may be processed in China. Depending on the services requested and the systems involved, information may also need to be accessed or processed in other countries.

International processing is subject to applicable legal requirements. Where required, we provide additional information about the overseas recipient, destination, purposes, processing methods, information categories, safeguards and available rights before the transfer, and obtain separate consent.

We also complete any applicable transfer procedures and observe relevant localisation requirements. This Policy does not replace any required transfer notice, consent or other legal safeguard.

 

6 Cookies and Similar Technologies

Cookies and similar technologies can support website functions, security, preferences and, where deployed, audience measurement or other optional features.

The technologies actually used on this website, their providers, purposes, information collected and duration must be identified in the disclosure below.

Cookie and technology details:

Our website stores the language currently used during your visit to support future multilingual display and language switching. You can remove this language setting by clearing our website’s cookies and site data through your browser settings.

Where prior consent is legally required for non-essential technologies, they will only be activated after that consent is obtained. Visitors must be able to refuse or withdraw consent through the relevant controls.

Browser settings may also allow you to block or delete cookies, although doing so may affect certain website functions.

 

7 Marketing Choices

Where we send optional promotional communications, we do so in accordance with applicable law and obtain consent where required.

You may unsubscribe through the instructions in the message or contact us using the details below. Refusing marketing does not prevent us from responding to an enquiry or providing a requested service.

Service-related communications, such as quotation responses and shipment updates, are handled separately from optional marketing.

 

8 How Long We Keep Information

We retain personal information for the shortest period necessary for its stated purpose, subject to applicable legal requirements.

Where a fixed period cannot reasonably be determined in advance, we determine retention as follows:

•Enquiries: By the time needed to resolve the enquiry and complete any follow-up requested by you.

•Customer and shipment records: By the duration of the relevant services, applicable recordkeeping duties, and any necessary complaint or claim period.

•Recruitment records: By the duration of the recruitment process and any legally required retention. Keeping an application for future opportunities requires an appropriate legal basis and any necessary further notice or consent.

•Technical and security records: By applicable legal retention requirements and the period reasonably necessary to investigate relevant faults, misuse or security incidents.

•Marketing preferences: By the duration of the permitted communications, with a minimal suppression record retained where necessary to respect an unsubscribe request.

When information is no longer required, we delete or anonymise it. Where immediate deletion is legally restricted or technically impracticable, we restrict further processing to permitted storage and necessary protection until deletion becomes possible.

 

9 Information Security

We apply technical and organisational safeguards appropriate to the nature of the information and the risks involved, and limit access to authorised people who need it for their work.

No internet transmission or storage system can be guaranteed completely secure. If a personal information security incident occurs, we will take appropriate response measures and make notifications where required by applicable law.

 

10 Your Rights

Depending on applicable law, you may have the right to:

•Obtain information about how your personal information is processed.

•Access and obtain a copy of your information.

•Request correction or completion of inaccurate information.

•Request deletion, restriction or cessation of processing.

•Withdraw consent where processing relies on consent.

•Object to certain processing or request transfer of information where the relevant legal conditions are met.

•Raise a complaint with the competent authority or seek other available remedies.

To exercise a right, contact us using the details below and describe your request. We may request proportionate information to verify your identity or authority.

We will respond within the applicable legal timeframe and explain any lawful reason for declining or limiting a request. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

 

11 Children and Third-Party Services

This website is intended for business and career-related use and is not directed at children. If you believe a child has provided personal information through this website, please contact us so that we can investigate and take the steps required by applicable law.

External websites and services have their own privacy practices. Please review their notices before providing information directly to them.

 

12 Changes to This Policy

We may update this Policy to reflect changes in our activities, website features or legal requirements. The latest version will show an updated date.

Where a change requires additional notice or renewed consent, we will provide it before carrying out the relevant processing.

 

13 Contact Us

For privacy enquiries, requests or complaints, please contact:

GUANGZHOU GRAIL LOGISTICS CO., LTD.

广州格乐国际物流有限公司

Address: 1905-1906, Poly Building, Huali Road 59, Tianhe, Guangzhou

Email: info@grailexpress.com

Please use the subject line “Privacy Request” to help us route your message.