IOR Service Privacy Policy

We collect the minimum information necessary to respond to your enquiry and provide our compliance services.

Information you provide directly

• Full name
• Company name
• Email address
• Phone number
• Country of enquiry or shipment destination
• Message content submitted through our contact form

Information collected automatically

• IP address and approximate location
• Browser type and version
• Pages visited and time spent on each page
• Referring URL
• Device type and operating system

This technical data is collected through cookies and standard web analytics tools. It does not identify you personally.

We use the information you provide for the following purposes:

• To respond to enquiries submitted through the contact form
• To assess and structure a compliance framework for your specific market or requirement
• To communicate with you about your IOR or EOR needs
• To improve the content and performance of iorservice.com
• To comply with applicable legal and regulatory obligations

We do not use your personal information for unsolicited marketing, and we do not sell your data to third parties.

Under GDPR, we process your personal data on the following legal bases:

• Legitimate interests: To respond to your enquiry and provide the compliance service you requested.
• Legal obligation: Where required by applicable law or regulation.
• Consent: Where you have explicitly agreed to hear from us. You may withdraw consent at any time.

We use cookies to understand how visitors use iorservice.com and to improve the experience. Cookies are small text files stored on your device.

Types of cookies we use

• Essential cookies — Required for the website to function. These cannot be disabled.
• Analytics cookies —Help us understand page performance and visitor behaviour (e.g. Google Analytics). No personal identity is stored.
• Preference cookies — Remember choices you make when browsing, such as your accepted cookie settings.

You can control and disable cookies through your browser settings. Please note that disabling cookies may affect some functionality of this website.

We use Google Analytics to monitor website traffic. Google may process data in accordance with its own privacy policy, available at policies.google.com/privacy. You can opt out of Google Analytics tracking by installing the Google Analytics opt-out browser add-on.

We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:

• GCE Logistics B.V. IOR Service compliance operations are managed by GCE Logistics B.V. Your data is shared within this relationship.
• Service providers: Third-party tools we use to operate the website (e.g. analytics, email delivery) may process data on our behalf. They are bound by data processing agreements.
• Legal requirements: Where required by law, court order, or government authority.
• Business transfers: In the event of a merger, acquisition, or sale of assets, data may be transferred as part of that transaction.

GCE Logistics B.V. is based in the Netherlands and operates within the European Economic Area (EEA). Where data is processed outside the EEA, we ensure adequate safeguards are in place in accordance with GDPR requirements, including Standard Contractual Clauses where applicable.

We retain personal data only for as long as necessary:

• Contact form submissions are retained for up to 24 months from the date of receipt, or for as long as our compliance engagement is ongoing.
• Website analytics data is retained in accordance with the retention policy of the relevant analytics provider (typically 26 months for Google Analytics).
• Where a legal or regulatory obligation requires us to retain data for longer, we will do so.

When data is no longer required, it is securely deleted or anonymised.

If you are located in the European Economic Area, you have the following rights under GDPR:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct any inaccurate or incomplete data.
• Erasure: Request that we delete your data where there is no longer a legitimate reason to hold it.
• Restriction: Request that we limit the processing of your data in certain circumstances.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests or for direct marketing purposes.
• Withdrawal: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at info@iorservice.com. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect against unauthorised access, loss, or disclosure. However, no transmission over the internet is completely secure, and we cannot guarantee absolute security.

iorservice.com may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We recommend reviewing the privacy policy of any third-party site you visit.

We may update this Privacy Policy from time to time. The most current version will always be published at iorservice.com/privacy-policy with the date of the most recent revision noted at the top of the page. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy or how we handle your data, please contact:

• Email — info@iorservice.com
• Entity — GCE Logistics B.V.
• Website — iorservice.com