LogiSelect Privacy Policy
Effective Date: 5 August 2026
This Privacy Policy explains how LogiSelect Pty Ltd collects, uses, discloses and protects personal information in connection with our public website and the LogiSelect transport management system (TMS).
1. Introduction
LogiSelect Pty Ltd (ACN 700 403 345, ABN 62 700 403 345) ("LogiSelect", "we", "us" or "our") is committed to protecting the privacy of individuals who visit our website, use our transport management system (TMS), or otherwise interact with our services.
This Privacy Policy explains what personal information we collect, how we use, disclose and store it, how you can access or correct it, and how you can contact us with a privacy question or complaint.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where we handle personal information of individuals located in the European Union or United Kingdom, we also comply with the General Data Protection Regulation (GDPR) and the UK GDPR.
2. What personal information we collect
The types of personal information we collect depend on how you interact with us. In general, we may collect:
- Contact details you submit — name, email address, company name, phone number, and the content of your message when you fill in a contact or enquiry form.
- Account details — for TMS users: username, hashed password, role, tenant assignment, and audit information about actions taken in the system.
- Technical and device information — IP address (stored as a salted SHA-256 hash, never in raw form), User-Agent string, browser, operating system, device type, screen and viewport size, language, timezone, and connection type.
- Usage information — pages visited, time on page, scroll depth, referrer URL, UTM campaign parameters, outbound link clicks, and interactions with forms.
- Cookies and similar identifiers — a first-party session identifier (`ls_sid`) and a consent-state cookie (`ls_consent`). We do not use third-party advertising trackers.
- Billing information for paying customers — company name, ABN, billing address, and invoice history. Payment card details are handled by our payment processor and are not stored on our systems.
3. How we collect personal information
We collect personal information:
- Directly from you — when you submit a contact form, request a demo, register for the TMS, or communicate with us by email or phone.
- Automatically — when you visit our public website, information about your device and browsing activity is collected by our first-party analytics.
- From your organisation — if an authorised representative of your company creates a TMS account on your behalf.
- From third parties — such as public business registers (for ABN/ACN verification) and freight/logistics integration partners with whom you have chosen to connect.
4. Why we collect and how we use personal information
We use personal information for the following purposes:
- To provide, operate and maintain the LogiSelect website and TMS.
- To respond to enquiries and contact requests you submit.
- To authenticate users, secure the TMS, and maintain audit logs.
- To measure aggregate usage of the public website and improve its content and performance.
- To send service-related communications (for example, security notices, incident reports, or billing).
- With your consent, to send marketing communications about LogiSelect products and updates. You can withdraw consent at any time.
- To comply with legal obligations, including record-keeping and responding to lawful requests by public authorities.
- To detect, prevent and respond to fraud, security incidents, or misuse of our services.
5. Lawful basis for processing (EU/UK visitors)
If you are located in the European Union or United Kingdom, we rely on the following lawful bases under the GDPR / UK GDPR:
- Consent — for the contact form and for optional marketing communications.
- Contract — to provide the LogiSelect TMS to you or your employer under our terms of service.
- Legitimate interests — for measuring aggregate website usage and for information security. We balance our interests against your rights and freedoms; you can object at any time.
- Legal obligation — for record-keeping and responding to lawful demands.
6. Cookies and website analytics
Our public website uses first-party cookies and analytics only. We do not embed third-party advertising or social-media tracking scripts.
Cookies we may set:
- `ls_sid` — a random session identifier used to group page views into a visit. Retained for up to 180 days on your device.
- `ls_consent` — records your choice to accept or reject analytics. Retained for up to 365 days.
- Session cookies used by the TMS for authentication after you log in.
7. Do Not Track and Global Privacy Control
We honour the "Do Not Track" (DNT) HTTP header and the Global Privacy Control (Sec-GPC) signal. If your browser sends either signal, our analytics client will not send events to our servers, regardless of the state of the on-screen consent banner.
8. Disclosure of personal information
We do not sell your personal information. We may disclose personal information to:
- Service providers that host our infrastructure, database, and email delivery — bound by written agreements to use the information only to provide services to us.
- Integration partners you or your organisation choose to connect to (for example, carriers, mapping providers, or ERP systems). We only share the data required for the integration to function.
- Professional advisers such as accountants, lawyers, and auditors, under confidentiality obligations.
- Law enforcement, regulators, or courts, when required or authorised by law.
- A successor entity in the event of a corporate reorganisation, merger or sale, in which case we will require the recipient to honour the commitments in this policy.
9. Overseas disclosure
Our servers are located in Australia. Some of our service providers (for example, email or infrastructure providers) may store or process personal information in other countries, including the United States and the European Union.
Before disclosing personal information overseas, we take reasonable steps to ensure the recipient handles it in a manner consistent with the Australian Privacy Principles and, where relevant, uses appropriate GDPR transfer mechanisms such as Standard Contractual Clauses.
10. How we protect personal information
We implement technical and organisational measures appropriate to the sensitivity of the information we hold, including:
- TLS/HTTPS encryption for all traffic to our websites and TMS.
- Salted, one-way hashing of visitor IP addresses so that the raw IP is never stored.
- Role-based access controls and least-privilege access to production data.
- Password hashing (bcrypt), JWT-based session tokens, and audit logging of privileged actions.
- Regular software updates, dependency vulnerability scanning, and backups.
- Employee confidentiality obligations and privacy training.
11. Data retention
We keep personal information only for as long as necessary for the purposes for which it was collected, or as required by law.
Typical retention periods:
- Anonymous website analytics (session and event records): up to 90 days.
- Contact-form submissions and sales enquiries: up to 24 months, unless you request earlier deletion.
- TMS operational data (consignments, invoices, audit logs): for the duration of your subscription plus the period required by Australian tax and accounting law (typically 7 years).
- Backups: rotated on a rolling schedule; personal information in backups is deleted when backups are recycled.
12. Your rights
Subject to applicable law, you have the right to:
- Access — request a copy of the personal information we hold about you.
- Correction — ask us to correct information that is inaccurate, out of date, incomplete, or misleading.
- Erasure — ask us to delete personal information we no longer need to keep. For public-website analytics, you can self-erase by clicking "Reject" in the consent banner or by using the erasure endpoint referenced below.
- Restriction and objection — ask us to stop or limit certain uses of your information, including direct marketing.
- Data portability (EU/UK visitors) — receive your personal information in a structured, commonly used, machine-readable format.
- Withdraw consent — where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing already carried out.
- Lodge a complaint — with us in the first instance, or with the Office of the Australian Information Commissioner (OAIC) or your local supervisory authority.
13. How to make a privacy request
To exercise any of your rights, please contact us at info@logiselect.com.au with the subject line "Privacy request". We may need to verify your identity before we can act on your request.
We will respond within a reasonable timeframe, and in any event within 30 days of receiving a valid request.
To self-service delete website analytics data associated with your browser, you can either click "Reject" in the consent banner or send an authenticated request to our erasure endpoint at /api/v1/analytics/erase.
14. Children's privacy
LogiSelect is a business-to-business service. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us and we will delete it.
15. Third-party links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of every website you visit.
16. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and revise the "Effective Date" at the top. Where changes are material, we will take additional steps to notify you (for example, by an on-site notice or by email to registered users).
17. How to contact us
If you have questions about this policy or the way we handle personal information, please contact:
LogiSelect Pty Ltd
ACN 700 403 345 | ABN 62 700 403 345
Email: info@logiselect.com.au
You can also contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au if you are dissatisfied with our response to a privacy concern.
LogiSelect TMS
Use the dedicated TMS link to sign in and work inside the system.