Privacy Policy

How we collect, use and protect your personal information

Effective date: 1 October 2026   |   Last updated: 1 October 2026

1. About this Privacy Policy

This Privacy Policy explains how Digital Media Solutions AU Pty Ltd (ACN to be inserted), trading as BillOfLadingData.com ("we", "us" or "our"), collects, uses, discloses and protects personal information when you visit our website, submit a request, sample or contact form, create an account, or use our data, dashboard and API services (together, the "Services").

We are based in Melbourne, Australia, and handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where other privacy laws apply to you, such as the EU or UK General Data Protection Regulation, we will handle your information in line with those laws as well.

By using our website or Services, you acknowledge that your personal information will be handled as described in this Privacy Policy.

2. Who we are

Digital Media Solutions AU Pty Ltd, trading as BillOfLadingData.com
Level 5, 447 Collins Street, Melbourne VIC 3000, Australia
Email: [email protected]

We supply commercial trade, bill of lading, customs, company, business contact and KYC/KYB data, delivered through our dashboard, API, data files and related services.

3. Information we collect from you

3.1 Website forms

BillOfLadingData.com collects information that you submit through our request, sample and contact forms so that we can respond to your enquiry and provide the services you request. Form submissions may include:

• your name;
• work email address;
• company name;
• phone number;
• requested markets or countries;
• delivery preference (for example API, spreadsheet or dashboard); and
• details of your data requirement.

We do not request unnecessary sensitive personal information through our website forms. Please do not include sensitive information (such as health, financial account or government identifier details) in free-text fields.

3.2 Accounts and Services

When you create an account or use our dashboard or API, we may also collect:

• login details, such as your email address and a securely stored (hashed) password;
• account, subscription, plan and credit information;
• API keys, access tokens and related usage records, such as request volumes, endpoints used and credit consumption;
• searches, saved lists and settings within your account; and
• billing information, such as billing contact, company details and transaction records.

Payments are processed by third-party payment providers. We do not store full payment card numbers on our systems.

3.3 Technical and service logs

Our website and platform use essential service logs to operate the Services and to protect our forms and systems from abuse. These may include IP address, browser and device type, date and time of access, pages or endpoints requested, referring pages and security events such as failed login attempts.

3.4 Communications

If you email us, message us (for example on WhatsApp), book a meeting or speak with our team, we may keep a record of that communication and any details you provide.

4. Business contact information within our datasets

Some of our data products include professional or business contact information about people who work for companies involved in international trade, such as names, job titles, business email addresses, business telephone numbers and professional profile information ("Contact Data").

Contact Data may be collected, obtained, matched, standardised or enriched using public sources, company websites, business directories, professional databases, corporate information, trade records, publicly available information and licensed third-party commercial providers.

We make Contact Data available to business customers for legitimate business purposes such as sales intelligence, supplier and buyer research, and due diligence. Contact Data is not represented as opt-in marketing data. Our customers are contractually responsible for using it in compliance with applicable privacy, data-protection, anti-spam, telemarketing and direct-marketing laws.

If you believe your business contact information appears in our data and you would like to access, correct or suppress it, please contact us at [email protected]. We will cooperate with legitimate correction, suppression or privacy requests where reasonably practicable.

5. How we use your information

We use personal information to:

• respond to enquiries and requests;
• prepare and send data samples;
• create and manage your account, subscription, API access and credits;
• deliver data, reports and other Services you request;
• process payments, invoices and refunds;
• provide customer and technical support;
• send service messages, such as account verification, password resets, credit alerts, renewal notices and maintenance notices;
• maintain service security, prevent fraud and misuse, and enforce usage limits and our Terms of Use;
• improve, test and develop our website and Services; and
• comply with our legal, regulatory and contractual obligations.

We will only use your information for direct marketing, such as product updates or offers, where permitted by law. You can opt out of marketing messages at any time using the unsubscribe link or by contacting us. Service messages relating to your account cannot be opted out of while your account is active.

6. Legal bases (where GDPR applies)

If the EU or UK GDPR applies to you, we process personal information on the following bases: to take steps at your request before entering into a contract, or to perform a contract with you; our legitimate interests in operating, securing and improving our business and Services; compliance with legal obligations; and your consent, where we ask for it, which you may withdraw at any time.

7. How we share information

We do not sell the personal information you submit through our website forms or account. We may share personal information with:

• service providers that help us operate the Services, such as cloud hosting, data storage, email delivery, customer support, scheduling, analytics and payment processing providers;
• our related bodies corporate, subcontractors and professional advisers, such as lawyers, accountants and auditors;
• a purchaser or successor in connection with a merger, acquisition, restructure or sale of business assets; and
• government authorities, regulators or law enforcement where required or authorised by law.

We require our service providers to handle personal information securely and only for the purposes for which we engage them.

8. Overseas disclosure

Some of our service providers and data infrastructure may be located outside Australia, including in the United States, Europe and Asia. Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it in a manner consistent with the Australian Privacy Principles and, where applicable, uses appropriate safeguards for international transfers.

9. Cookies and similar technologies

Our website uses essential cookies and similar technologies needed for the site and platform to function, such as keeping you signed in, protecting forms from spam and maintaining security. Where we use optional analytics or marketing cookies, we will do so in accordance with applicable law. You can control cookies through your browser settings, although disabling essential cookies may affect how the website works.

10. Data security

We maintain commercially reasonable administrative, technical and operational safeguards to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These include encrypted connections, access controls, credential protection and monitoring of our systems.

No method of transmission or storage is completely secure. You are responsible for keeping your password and API keys confidential and for notifying us promptly if you believe they have been lost, compromised or used without authorisation.

If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.

11. Data retention

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, resolve disputes, enforce our agreements and meet legal, tax and accounting requirements. When information is no longer needed, we take reasonable steps to delete or de-identify it.

12. Your rights and choices

Subject to applicable law, you may:

• request access to the personal information we hold about you;
• ask us to correct information that is inaccurate, out of date or incomplete;
• ask us to delete or suppress your information;
• opt out of direct marketing at any time; and
• where GDPR applies, object to or restrict certain processing, request data portability and withdraw consent.

To make a request, email [email protected]. We may need to verify your identity before acting on a request, and we will respond within a reasonable period (generally within 30 days). If we refuse a request, we will explain why where permitted.

13. Children

Our website and Services are intended for business use and are not directed to people under 18. We do not knowingly collect personal information from children.

14. Third-party links

Our website may link to third-party websites and services, such as social media and booking platforms. We are not responsible for their privacy practices, and we encourage you to read their privacy policies.

15. Complaints

If you have a concern about how we have handled your personal information, please contact us first at [email protected]. We will investigate and respond within a reasonable time, generally within 30 days.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au. If you are in the EU or UK, you may also contact your local data protection authority.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, practices or legal requirements. The updated version will be published on our website with a new effective date. Where changes are significant, we may also notify you by email or through your account.

17. Contact us

For privacy questions or requests, please contact:

Digital Media Solutions AU Pty Ltd, trading as BillOfLadingData.com
Level 5, 447 Collins Street, Melbourne VIC 3000, Australia
Email: [email protected]