Privacy Policy

Personal Information

This Privacy Policy applies to all personal information collected, used, stored, and managed by Booth’s Logistics in relation to:

• Customers: Individuals or organizations engaging with us for logistics and transportation services.
• Website Visitors: Any person visiting our website or interacting with online tools, including cookies and analytics tracking.
• Customer Portal Users: Individuals accessing our online portal for account management, tracking, and other services.

This policy outlines our approach to data protection under the Privacy Act 2020 and governs the handling of personal information across all points of interaction, including in person, by phone, through email, and on digital platforms.

Collection of Personal Information

We may collect personal information in several ways:

• Customers: When engaging in business activities, including service delivery, invoicing, or account setup.
• Website Visitors: Through cookies, analytics tools, and online forms to enhance user experience and understand visitor behaviour.
• Customer Portal Users: During registration, account management, and interactions within the portal, such as order tracking or issue resolution.

This information may include names, contact details, billing information, vehicle or delivery details, and website interaction data.

Use of Personal Information

We use personal information to:

• Provide products and services, including delivery and order tracking.
• Improve the functionality and usability of our website and customer portal.
• Communicate service updates, order confirmations, or resolve issues.
• Ensure compliance with legal obligations and internal policies.

Sharing of Personal Information

We do not sell personal data to third parties. However, we may share information with:

• Service Providers: Third-party logistics providers or technology vendors assisting in service delivery.
• Regulators or Legal Authorities: If required to comply with legal obligations.
• Business Partners: For seamless service delivery, such as outsourced maintenance providers or insurers.

Any third party we work with must adhere to strict data protection requirements.

Storage and Protection of Information

All personal information is securely stored in accordance with the Privacy Act 2020. We implement robust technical and organizational measures, including encryption and access controls, to protect against unauthorized access, disclosure, or loss of data.

Website and Vistor Cookies

We use cookies and analytics tools to enhance the browsing experience on our website. Cookies collect non-personally identifiable information, such as browser type and session length. You can control or disable cookies through your browser settings, although some website features may not function as intended without them.

Customer Portal Data Management

When you use our customer portal, we collect and store data to manage your account, track transactions, and provide customer support. We regularly monitor the security of the portal and take all necessary steps to protect data from unauthorized access.

Your data within the portal remains confidential and is accessible only to authorized personnel. You can update or delete your personal information by logging into your account or contacting our support team.

Named Accounts Only
All logon credentials used for accessing the customer portal must be tied to a named individual. Email addresses used for logins must reflect the user’s identity (e.g., john.doe@example.com). The use of generic, shared, or departmental email addresses (e.g., support@example.com or admin@example.com) is strictly prohibited.

Authentication Requirements

• Users must create strong passwords compliant with the organization’s password policy.

Account Ownership and Accountability

• Each user is responsible for their login credentials and must not share them with others.
• Activity performed under a user account is attributed to the named individual, ensuring accountability.

Access Provisioning

• Access is granted only after identity verification and approval by the system administrator or a designated authority.
• Accounts must be deactivated immediately upon a user’s departure or role change that no longer requires portal access.

Monitoring and Auditing

• Access logs will be monitored to ensure compliance with the policy.
• Any login attempts using generic email addresses will be flagged and investigated.

Policy Violations

• Non-compliance with this policy may result in the suspension of portal access.
• Repeated or severe violations could lead to further disciplinary actions, including termination of the contract or service agreement.

Accessing and Correcting Personal Information

Under the Privacy Act 2020, you have the right to access and correct the personal information we hold about you. If you wish to make a request, please contact us at service@booths.co.nz