Privacy policy
Updated: 2026-10-02
301-1220 Kensington Road NW, Calgary, AB T2N 3P5, Canada
info@bidxport.com1. Controller and contact
The controller of personal information provided through the public BIDXPORT websites (bidxport.pl, bidxport.com and bidxport.ca) is United Cargo Shipping Ltd, 301-1220 Kensington Road NW, Calgary, AB T2N 3P5, Canada.
For privacy matters, contact info@bidxport.com, write to our company address or use the website contact form. This policy covers the public website, inquiries and correspondence. Information specific to a customer account or service agreement is provided as part of that service.
2. Information we process
The contact form asks for your name, email address, subject and message. Other contact channels provide the information you choose to share about your inquiry. Please do not use the public form to send identity documents, payment card information or sensitive personal information.
Providing information is voluntary. We need contact details and enough information to understand and answer your inquiry. Browsing vehicle listings does not require an account or a contact-form submission.
Hosting and security services process technical request information, including IP address, connection time and browser information. The form uses an IP-address hash for short-term abuse prevention. Inquiries are sent to the company mailbox; this form does not publish them in the vehicle or broker directory.
3. Purposes and legal grounds
We use correspondence to answer your question, handle your inquiry and prepare a quotation or offer. Where GDPR applies and you request steps towards an agreement, processing is based on steps taken at your request before entering into a contract and subsequent performance of that contract — GDPR Article 6(1)(b).
General correspondence and website security are based on our legitimate interests in responding to inquiries, keeping the service secure and preventing abuse — GDPR Article 6(1)(f). Information needed to meet a legal obligation is processed on the applicable legal basis; GDPR Article 6(1)(c) applies where such an obligation applies under GDPR.
Under applicable Canadian privacy law, information is used for the purposes identified when collected, and consent is obtained where required. Sending an inquiry does not subscribe you to a newsletter or give blanket permission for marketing or unrestricted disclosure to partners. Where consent is required for a particular purpose, it is requested separately.
4. Recipients
Authorized staff handling your inquiry and providers of hosting, security, email and IT support may access information as needed to provide their services. The website uses Vercel and company email uses Titan Mail. Titan hosts correspondence as the email-service provider; United Cargo Shipping Ltd remains the controller.
If your specific inquiry or requested service requires a broker, auction partner, carrier, freight forwarder or documentation provider, only information necessary for that purpose is disclosed on the appropriate legal basis. Partners may be independent controllers for their own obligations. Information about the relevant recipient and processing arrangements is provided when handling that service.
Competent authorities and authorized advisers may receive information where legally required. Sending an ordinary email is not treated as permission to distribute all correspondence to every business partner.
5. Retention
An ordinary inquiry that does not result in an agreement is removed from active correspondence after we reply and finish handling the matter. If further discussion is needed, correspondence is retained until the inquiry is resolved. We do not count a deletion deadline from receipt while an inquiry is still being handled.
Moving an email to Trash does not immediately remove it from the email service. Titan states that emails left in Trash are permanently deleted 30 days after they are moved there; Trash can be emptied earlier. The deletion practice also covers unnecessary copies and attachments in folders and devices used by us.
Messages forming part of an agreement, complaint, financial record or specific claim are not deleted merely because a reply has been sent. Relevant information is retained as needed for the matter, applicable legal requirements or establishing, exercising or defending claims. The period depends on the type of record and applicable obligations. Technical logs and security copies follow provider retention cycles; contact us for details.
6. International processing
The controller is based in Canada. Email, hosting and infrastructure providers may process information in other countries, including the United States. A Canadian company address does not mean that all information is stored exclusively in Canada.
Transfers covered by GDPR require an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses. The Canadian adequacy decision covers certain commercial organizations subject to PIPEDA. Provider processing documents describe the arrangements and transfer safeguards applicable to their services. Contact the controller for information about safeguards relating to specific processing and how to obtain a copy.
7. Your rights
Subject to applicable law and its conditions, you may request access, correction, deletion, restriction and portability of your information, and object to processing based on legitimate interests. Consent-based processing can be withdrawn without affecting the lawfulness of earlier processing.
Send requests to the privacy email, through the contact form or to the company postal address. We may verify your identity only as needed to protect the information. You may complain to the competent data-protection authority; in Poland this is the President of UODO. Canadian regulator jurisdiction depends on PIPEDA or Alberta provincial privacy law.
A contact-form inquiry is not used to make decisions with legal effects solely by automated means or to profile the inquiry.
8. Browser storage, statistics and external services
The disabled catalog does not save new navigation data. Earlier versions used sessionStorage for filters, scroll position and result counts, without message content or full vehicle records. Any remaining session storage can be cleared in browser settings.
Vercel Web Analytics and Speed Insights provide aggregate visitor statistics and performance measurements. Web Analytics documentation describes aggregate measurements without third-party cookies. Hosting and security services may still process technical information needed to operate the website. The public form does not subscribe visitors to advertising or newsletters.
The public auction catalog is currently disabled; the website does not load vehicle photos from Copart servers. Links to Copart, Facebook, WhatsApp, transport pricing and other services lead to separate services with their own privacy information.