Privacy Policy

Version 1.0

Last updated: 20 September 2026

This policy explains what personal data we collect when you use the Super Load Calculator application at app.superloadcalculator.com, why we collect it, how long we keep it and what rights you have over it. It is written in plain language and is meant to be read in full.

This policy covers the application only. Our public marketing website at superloadcalculator.com is a separate site with its own notice.

1. Who we are and how to contact us

The controller of your personal data is:

• PSS Lines Shipping LLC
• 108/109 Al Masraf Building, Dubai, United Arab Emirates
• Email: info@superloadcalculator.com

In this policy, "we", "us" and "our" mean PSS Lines Shipping LLC. "You" means the person using the application, whether as an account holder or as a user invited by their employer.

If you have a question about this policy, or you want to exercise any of the rights described in section 10, please email info@superloadcalculator.com. We aim to reply within 30 days.

2. What the application does

Super Load Calculator is a business tool. You enter cargo details - dimensions, weights, quantities and stacking rules - and our server-side engine calculates how those items could be loaded into shipping containers or road trailers. It returns a 3D view, a loading sequence and a branded PDF loading plan.

Each customer company is given its own workspace on its own subdomain, for example acme.superloadcalculator.com. Data belonging to one workspace is kept separate from every other workspace.

3. What we collect, why, and our lawful basis

We only collect what the service needs. Below is each category of data we hold, the reason we hold it, and the lawful basis we rely on under the UK and EU General Data Protection Regulation.

Sign-up details. When you start a trial we collect your company name, your country, your contact name, your work email address and your contact telephone number. We use these to create your workspace, to identify your company, to send you your login details and to contact you about your account. Lawful basis: performance of a contract with you, or taking steps at your request before entering into one.

Record of acceptance. When you accept our terms and this policy we record that you accepted, which version you accepted and the date and time. We need this to show what wording applies to your account. Lawful basis: our legitimate interest in keeping an accurate record of the agreement between us, and compliance with our legal obligation to demonstrate consent where consent is relied on.

Marketing consent. To take a free trial you must also agree that we may contact you about the product. We say more about this in section 4. Lawful basis: your consent.

User accounts. For each person who can sign in we hold a name, an email address and a password that is stored only as a scrypt hash. We never store or display your password in readable form. Lawful basis: performance of a contract.

Saved load plans. These are the cargo figures you enter and the results the engine produces. They are usually commercial data rather than personal data, but they may include a reference or a name you have typed in. We hold them so you can reopen and reuse your work. Lawful basis: performance of a contract.

Calculation log. Each calculation writes a short technical record: the time, the number of pieces, the number of containers used, how long the calculation took, and a salted hash of the IP address that made the request. We never store the IP address itself, and the hash cannot be turned back into an address. We use this log to measure usage, to bill correctly, to spot abuse and to keep the engine performing properly. Lawful basis: performance of a contract, and our legitimate interests in running, securing and charging for the service.

Administration audit log. When an administrator changes a setting, a user or a workspace, we record who made the change and what changed. Lawful basis: our legitimate interest in the security and accountability of the service.

Brand files. If you upload a company logo or watermark image for your PDFs, we store that file so it can be applied to your documents. Lawful basis: performance of a contract.

Support correspondence. If you email us we keep the message and our reply so we can deal with the matter and refer back to it. Lawful basis: our legitimate interest in providing support.

Where we rely on legitimate interests, we have considered whether our interest is overridden by your rights, and we think it is not, because the data involved is limited, work-related and used only to run the service you are using. You can object to that processing at any time - see section 10.

4. Marketing, honestly stated

A free trial requires marketing consent. To take the 7-day trial you must agree that we may contact you by email and, occasionally, by telephone about Super Load Calculator, including product news, tips and offers. We are stating this plainly rather than burying it: if you are not willing to be contacted, the free trial is not available to you.

Two things follow from that, and both are yours to use:

• You can withdraw that consent at any time once the trial has finished. Every

marketing email carries an unsubscribe link, and you can also email info@superloadcalculator.com. Withdrawing consent does not affect anything we sent before you withdrew it.

• You can take a paid plan without giving marketing consent at all. Marketing

consent is a condition of the free trial, not of using the product.

Withdrawing marketing consent never stops the messages we must send in order to run your account, such as password resets, invoices, security notices and service announcements. Those are part of the contract, not marketing.

5. Cookies

The application uses one cookie: a signed session cookie named lc_session. It keeps you signed in and protects the session against tampering. It is httpOnly, SameSite=Lax and Secure, so it cannot be read by page scripts and is only sent over an encrypted connection. It is strictly necessary for the service to work, so it is set without asking for consent. If you block it you will not be able to sign in.

We use no advertising cookies, and we do not take part in any cross-site tracking or advertising network. We do not sell or share data for behavioural advertising.

We may run analytics - currently Google Analytics and Microsoft Clarity - on our public pages, meaning the marketing site, the public demo and the sign-up pages. Analytics is never loaded inside a signed-in workspace: once you are logged in, no analytics or session-recording script runs on the pages you see. Where analytics is in use on a public page, it is loaded only with the consent you give through the cookie banner on that page, and you can decline or change your mind there. If we switch analytics off, nothing else in this policy changes: the session cookie remains the only cookie the application itself sets.

6. Who we share data with

We do not sell your personal data. We do not share it for advertising, profiling or any similar purpose, and we do not pass it to data brokers. The only third parties who process data on our behalf are:

• Hetzner Online GmbH (Germany) - our hosting provider. Your data lives on a

dedicated server in a German data centre.

• Resend - an email delivery provider we use as a fallback. Most of our

email is sent from our own mail server; when that is unavailable, Resend delivers the message instead. It receives the recipient address and the content of the message, and nothing more.

Each of these acts as a processor under a written agreement and may only use the data to provide the service to us.

We may also disclose data if we are legally required to do so, or if it is necessary to establish, exercise or defend a legal claim. If our business is sold or reorganised, data may transfer to the new owner, who would remain bound by this policy.

7. Where your data is processed

Our servers are in Germany, so the day-to-day processing of your data takes place in the EU/EEA. We are established in the United Arab Emirates, and our staff there access the systems to run the service, provide support and administer accounts. Your data is therefore processed in both the EU/EEA and the UAE.

The UAE is not covered by an EU adequacy decision. For transfers from the EU/EEA or the UK to us in the UAE we rely on the European Commission's Standard Contractual Clauses, together with the UK Addendum where UK data is involved, and we apply the safeguards described in section 8. You can ask us for a copy of those clauses by emailing info@superloadcalculator.com.

8. How we protect your data

We describe our security measures accurately rather than expansively. No system is completely secure, and we do not claim ours is. What we do:

• All traffic to and from the application runs over TLS.
• Passwords are stored only as scrypt hashes with a per-password salt.
• Each workspace is isolated: queries are scoped to the workspace, and one

customer's data is not visible to another.

• Session cookies are signed, httpOnly, SameSite=Lax and Secure.
• IP addresses in the calculation log are stored only as salted hashes.
• Administrative actions are recorded in an audit log.
• Backups of the database and uploaded files are taken regularly and kept on

encrypted storage, so that we can restore the service after a failure.

• Access to production systems is limited to the small number of our staff who

need it.

If a personal data breach occurs that is likely to present a risk to you, we will notify the relevant supervisory authority within 72 hours where required to do so, and we will tell you without undue delay where the law requires it.

9. How long we keep data

• Trial sign-up records - company, country, contact name, work email,

telephone, and the record of acceptance and consent - are kept indefinitely as a business record of who signed up and what they agreed to.

• An unconverted trial workspace, including its user accounts, saved load

plans and uploaded brand files, is deleted 90 days after the trial expires.

• Calculation logs are kept as a usage and billing record. They contain no

IP address, only a salted hash.

• A paying customer's workspace data is kept for as long as the account is

open, and is then handled as described in our Terms and Conditions.

• Audit logs are kept for as long as they are needed for security and

accountability.

• Support correspondence is kept for as long as needed to deal with the

matter and any follow-up.

Where we must keep something for accounting, tax or legal reasons, we keep it for the period the law requires.

10. Your rights

Subject to the conditions set out in the law, you have the right to:

• Access - ask for a copy of the personal data we hold about you.
• Rectification - have inaccurate data corrected or incomplete data

completed.

• Erasure - ask us to delete your data where we no longer have a good reason

to keep it.

• Restriction - ask us to pause processing while a dispute about accuracy or

about our grounds is resolved.

• Portability - receive the data you gave us in a structured, commonly used,

machine-readable format, or have it sent to another provider where that is technically feasible.

• Object - object to processing we carry out on the basis of legitimate

interests, and object at any time to direct marketing.

• Withdraw consent - withdraw any consent you have given, including

marketing consent, without affecting processing already carried out.

• Complain - lodge a complaint with a data protection supervisory authority.

To exercise any of these, email info@superloadcalculator.com from the address on your account, or tell us enough for us to identify you safely. We will not charge you, and we will not treat you any worse for asking. We may need to verify your identity before we act.

If you are unhappy with how we have handled your data you can complain to the supervisory authority in your country. In the EU that is the authority in the member state where you live or work; in the UK it is the Information Commissioner's Office. We would appreciate the chance to put things right first.

If your employer holds the workspace, some requests - for example deleting a saved load plan that belongs to the company - may be for them to decide. We will tell you if that is the case and help you reach the right person.

11. Children

Super Load Calculator is a tool for businesses. It is not designed for, directed at or offered to anyone under 18, and we do not knowingly create accounts for them. If we learn that an account belongs to someone under 18, we will close it and delete the associated personal data.

12. Changes to this policy

We may update this policy as the service or the law changes. Each version has a version number and a "Last updated" date, both shown at the top. The current version is always available inside the application.

If a change materially affects you - for example a new category of data, a new purpose or a new recipient - we will tell you by email or by a notice in the application before it takes effect, and where the change requires your consent we will ask for it. Minor corrections take effect when they are published.

Version 1.0 — last updated 2026-09-20.