Legal
Privacy Policy
Last updated: 14 July 2026
Binod Acharya, Unipessoal Lda ("Cargosender") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use the Cargosender platform, in accordance with Regulation (EU) 2016/679 (the GDPR) and Portuguese data protection law (Lei n.º 58/2019).
B2. Data Controller Details
Data Controller: Binod Acharya, Unipessoal Lda
Trading as: Cargosender (www.cargosender.com)
Registered address: Rua Lucinda Simões, Nº 9 A, Sala K, 1900-304 Lisboa, Portugal
NIF: 516964992
Privacy contact: support@cargosender.com
B3. Personal Data We Collect
B3.1 Data You Provide Directly
When you register an account or make a booking, we collect:
- Identity data: full name
- Contact data: email address, telephone number, billing address, collection and delivery addresses
- Account data: username, password (stored in hashed form), saved addresses
- Booking data: shipment details, package descriptions, weight, dimensions, declared value
- Payment data: payment status and transaction reference (card details are processed by Revolut and not stored by Cargosender)
- Support communications: emails and messages exchanged with Cargosender
- Customs data: customs declarations and related information for international shipments
B3.2 Data Collected Automatically
When you use our platform, we automatically collect technical data (IP address, browser type, device type), usage data (pages visited, booking flow interactions), and cookie data (see our Cookie Policy).
B3.3 Data from Third Parties
We may receive tracking updates, delivery confirmations, and shipment status information from Eurosender and the assigned carrier, and payment status notifications from Revolut.
B4. How We Use Your Personal Data
B4.1 Performance of Contract (Art. 6(1)(b) GDPR)
We process your data to create and manage your account; process, confirm, and fulfil your bookings; transmit shipment information to Eurosender and the carrier; issue invoices; and provide customer support.
B4.2 Legal Obligation (Art. 6(1)(c) GDPR)
We process your data to comply with Portuguese tax and accounting obligations, anti-money laundering requirements, customs and trade compliance, and legal disclosure obligations.
B4.3 Legitimate Interests (Art. 6(1)(f) GDPR)
We process your data on the basis of legitimate interests for improving and optimising our platform, fraud detection and prevention, and security monitoring.
B4.4 Consent (Art. 6(1)(a) GDPR)
Where we rely on your consent: sending you newsletters or marketing emails about our services; placing non-essential cookies on your device. You may withdraw consent at any time.
B5. Data Recipients and Sharing
We share your personal data only where necessary:
- Eurosender: we transmit your name, contact details, collection and delivery addresses, and shipment information to Eurosender to enable the booking to be fulfilled. Eurosender in turn shares relevant data with the assigned carrier.
- Carriers: the carrier assigned to your shipment will receive the information necessary to perform collection and delivery.
- Revolut: your payment is processed by Revolut. We do not store your card details. Revolut processes payment data as an independent data controller.
- IT and hosting providers: our platform is hosted by third-party infrastructure providers who process data as data processors on our behalf.
- Professional advisers: lawyers and accountants bound by professional confidentiality.
- Authorities: tax authorities, customs authorities, or law enforcement where required by law.
We do not sell your personal data. We do not share it with third parties for their own marketing purposes.
B7. Data Retention
- Account data: retained for the duration of your account and 3 years after closure, unless law requires longer
- Booking and transaction data: retained for 10 years in accordance with Portuguese accounting and tax law
- Support communications: retained for 3 years from last contact
- Marketing data: until consent is withdrawn
- Website usage data: up to 26 months depending on type and purpose
After the retention period, data is securely deleted or anonymised.
B9. Your Rights
Under the GDPR, you have the following rights:
- Access (Art. 15): request a copy of your personal data
- Rectification (Art. 16): request correction of inaccurate data
- Erasure (Art. 17): request deletion, subject to legal retention obligations
- Restriction (Art. 18): request temporary halt to processing in certain circumstances
- Portability (Art. 20): receive your data in a structured, machine-readable format where processing is based on consent or contract
- Object (Art. 21): object to processing based on legitimate interests or for direct marketing
- Withdraw consent: withdraw consent at any time without affecting prior lawful processing
- Complain: lodge a complaint with the CNPD (Comissão Nacional de Proteção de Dados) at www.cnpd.pt
To exercise any right, contact support@cargosender.com. We will respond within 30 days. We may request proof of identity.
B11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes at least 14 days before they take effect.
Binod Acharya, Unipessoal Lda
Rua Lucinda Simões, Nº 9 A, Sala K, 1900-304 Lisboa, Portugal
NIF: 516964992 · support@cargosender.com