Privacy Policy
Last updated: 26 March 2026
1. Introduction
TECHPORT TECHNOLOGIES LTD ("we", "us", "our") is committed to protecting the privacy and security of your personal data. This privacy policy explains how we collect, use, and protect your information when you use our customs declarations platform ("Service").
We act as a data processor on behalf of our clients (the data controllers) when processing customs declaration data. For personal data related to your account with us, we act as the data controller.
2. Data Controller Information
3. Information We Collect
3.1 Account Information
- Name and contact details
- Email address
- Username and encrypted password
- Company/organisation details
3.2 Customs Declaration Data
- Importer and exporter details (names, addresses)
- Goods descriptions and commodity codes
- Invoice and shipment information
- Transport and consignment details
3.3 Technical Data
- IP addresses and browser information
- Login timestamps and session data
- Usage logs for security and troubleshooting
4. How We Use Your Information
We process your personal data for the following purposes:
- Service Delivery: To submit customs declarations to HMRC on your behalf
- Account Management: To create and manage your user account
- Communication: To respond to your enquiries and provide support
- Legal Compliance: To comply with HMRC requirements and applicable laws
- Security: To protect our systems and detect fraudulent activity
5. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract: Processing necessary to perform our services for you
- Legal Obligation: Processing required by UK customs and tax law
- Legitimate Interests: Processing for security, fraud prevention, and service improvement
- Consent: Where you have given explicit consent for specific processing activities
6. Data Sharing
We share your data with the following third parties:
- HMRC: Customs declaration data is submitted to HM Revenue & Customs via their CDS API
- Service Providers: Microsoft Azure for cloud hosting and infrastructure, who process data on our behalf under appropriate data processing agreements
- Legal Requirements: Government authorities when required by law
We do not sell your personal data to third parties.
7. Data Retention
We retain your data for the following periods:
- Customs Declaration Records: 7 years from the date of declaration, as required by UK customs regulations
- Account Information: Duration of your account plus 2 years after closure
- Technical Logs: 12 months for security and troubleshooting purposes
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encryption of data in transit using TLS
- Secure authentication mechanisms
- Access controls and role-based permissions
- Regular security assessments
9. Your Rights
Under UK GDPR, you have the following rights:
- Access: Request a copy of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data (subject to legal retention requirements)
- Restriction: Request limitation of processing
- Portability: Request transfer of your data in a machine-readable format
- Objection: Object to processing based on legitimate interests
To exercise these rights, contact us at management@techport.uk.
10. International Transfers
Your data is primarily processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
11. Cookies
Our Service uses essential cookies for authentication and session management. These cookies are necessary for the Service to function and cannot be disabled.
12. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.
13. Contact Us
If you have questions about this privacy policy or our data practices, please contact us:
14. Complaints
If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):