1. Privacy Policy Overview
This Privacy Policy explains how DELTAMARIS GLOBAL LTD.processes personal data and related business information through NAVIQUE, its website, registered accounts, trade workflows, communications and associated services.
NAVIQUE is a business-to-business trade and logistics platform. Because international transactions can involve buyers, suppliers, consignees, notify parties, importers, logistics providers and other individuals, NAVIQUE may process personal information contained in commercial and shipping records.
2. Data Controller
DELTAMARIS GLOBAL LTD.
Agrabad Commercial Area, Chittagong 4100, Bangladesh
Email: info@deltamarisglobal.com
Website: deltamarisglobal.com
For applicable processing, Deltamaris acts as a data controller or data fiduciary/data custodian as defined by the applicable legal framework, and may also process data on behalf of another business where the relevant relationship requires it.
3. Applicable Privacy and Cybersecurity Framework
Deltamaris is based in Bangladesh and considers applicable Bangladesh privacy and cybersecurity requirements, including thePersonal Data Protection Act 2026 and theCyber Security Act 2026, including applicable amendments.
The Personal Data Protection Act 2026 establishes requirements concerning lawful processing, accountability, transparency, security, retention and rights relating to personal data.
Where processing falls within the territorial or material scope of the European Union General Data Protection Regulation (GDPR), Deltamaris will apply the GDPR requirements applicable to that processing.
The reference to GDPR does not mean that every NAVIQUE user, transaction or processing activity is automatically subject to GDPR. Applicability depends on the relevant facts and legal scope.
4. Categories of Personal Data We May Process
4.1 Identity and Contact Data
- name;
- job title or role;
- business email;
- telephone number;
- business address;
- country and postal code; and
- other contact information supplied for legitimate business purposes.
4.2 Business and Verification Data
- company name;
- company registration information;
- tax identification information;
- VAT information;
- EORI or equivalent trade identifiers;
- business website;
- licences and certifications;
- authorised representative information; and
- business verification information.
4.3 Trade Transaction Data
- RFQs and enquiries;
- product selections and specifications;
- quantities and pricing;
- quotations;
- orders;
- contracts;
- proforma and commercial invoices;
- packing lists;
- shipment information;
- consignee and notify-party information;
- importer information;
- delivery and proof-of-delivery information; and
- business correspondence connected with a transaction.
4.4 Technical and Security Data
Depending on the infrastructure and services used, NAVIQUE may process authentication events, timestamps, IP addresses, browser or device information, session information, security logs, error information and other technical information necessary for security and service operation.
5. Sources of Personal Data
We may obtain information directly from users and business representatives, from authorised businesses, from counterparties in a transaction, from service providers, from public or commercial business records where lawful, and from other legitimate sources necessary to administer a transaction or comply with law.
If you provide information about another person, you should ensure that you have appropriate authority or another lawful basis to provide that information.
6. Purposes of Processing
We may process personal data for purposes including:
- creating and administering user accounts;
- business verification and KYB activities;
- processing RFQs and enquiries;
- preparing and administering quotations;
- administering orders and contracts;
- generating and maintaining trade documents;
- coordinating procurement and shipments;
- identifying consignee, importer and notify-party information;
- coordinating delivery and transaction closure;
- processing or coordinating payments and billing;
- communicating with users and counterparties;
- providing technical and commercial support;
- maintaining transaction audit trails;
- fraud prevention and security;
- legal and regulatory compliance;
- protecting our rights and enforcing agreements; and
- maintaining and improving NAVIQUE's reliability and security.
7. Lawful Basis for Processing
Depending on the applicable jurisdiction and circumstances, processing may rely on consent, contractual necessity, steps requested before entering into a contract, compliance with a legal obligation, legitimate interests, protection of rights and security, or another lawful basis recognised by applicable law.
Where consent is the applicable legal basis, it may be withdrawn in accordance with applicable law. Withdrawal does not invalidate processing already lawfully performed and does not prevent processing that has another lawful basis.
8. Consent and User Choice
Where NAVIQUE requests consent for an optional processing activity, the request should be presented separately and in a manner that allows the user to understand the purpose of the processing.
Essential account, security, contractual and legal processing may continue where it has an independent lawful basis.
9. Business Transaction Snapshots
NAVIQUE is designed to preserve historical transaction integrity. Accordingly, quotations, contracts, proforma invoices, commercial invoices, packing lists and other transaction records may contain snapshots of business-party information applicable when the relevant transaction stage was created.
A subsequent change to a user's current profile does not necessarily rewrite historical transaction records. This is necessary for commercial accuracy, auditability, accounting, dispute resolution and trade-document integrity.
10. Data Sharing and Recipients
Information may be shared where necessary with categories of recipients including:
- cloud hosting and infrastructure providers;
- authentication and security providers;
- email and communications providers;
- payment and billing providers;
- technology and software providers;
- document-storage providers;
- logistics providers and freight forwarders;
- carriers and shipping service providers;
- customs brokers and trade-service providers;
- banks and financial institutions where relevant;
- inspection and certification bodies where required;
- professional advisers and auditors;
- government authorities and regulators where legally required; and
- transaction counterparties where disclosure is necessary to perform the transaction.
11. Data Processors and Service Providers
Where third-party service providers process personal data on behalf of Deltamaris, we seek to use contractual and organisational arrangements appropriate to the nature of the processing and applicable law.
Service providers may have independent obligations under their own terms and applicable law. Their processing is not necessarily controlled entirely by Deltamaris.
12. International Data Transfers
NAVIQUE supports international trade and may use technology, infrastructure and service providers located in countries other than Bangladesh.
Personal data may therefore be transferred or accessed across borders where necessary for the operation of NAVIQUE, transaction performance, support, security or another lawful purpose.
Where applicable law requires safeguards for an international transfer, we will use an appropriate lawful transfer mechanism and relevant contractual, technical or organisational safeguards.
For GDPR-covered transfers, applicable GDPR transfer requirements will be assessed, including adequacy decisions or appropriate safeguards where legally required.
13. Data Security
Deltamaris applies reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and unauthorised access.
Measures may include authentication controls, access restrictions, encryption where appropriate, secure infrastructure, audit logging, monitoring, backup controls and incident-response procedures.
Security requirements are assessed according to the nature, volume, sensitivity and risk of the relevant processing.
14. Cybersecurity and Security Monitoring
NAVIQUE may maintain security logs and monitoring information to protect accounts, detect malicious activity, investigate incidents, prevent abuse and maintain the integrity of the platform.
Processing for cybersecurity purposes may include technical metadata such as IP address, timestamps, authentication events, device or browser information and system events where reasonably necessary.
15. Data Retention
Personal data will be retained for no longer than reasonably necessary for the purpose for which it was collected, subject to applicable legal, regulatory, accounting, tax, contractual, security, audit and dispute-resolution requirements.
Trade records may need to be retained after an account is closed. Therefore, account closure does not necessarily result in immediate deletion of historical transaction records.
Retention periods may differ by data category, transaction type, legal requirement and applicable jurisdiction.
16. Data Subject Rights
Subject to applicable law and relevant exceptions, individuals may have rights including:
- access to personal data;
- correction of inaccurate or incomplete information;
- completion of information;
- deletion or removal where legally applicable;
- restriction of processing where applicable;
- objection to particular processing;
- data portability where applicable;
- withdrawal of consent where consent is the legal basis; and
- the right to raise a complaint with a competent authority where applicable.
These rights may be subject to statutory exceptions, including legal retention obligations, security requirements, contractual records, legal claims and other lawful grounds.
17. Requests to Exercise Privacy Rights
Privacy requests should be sent toinfo@deltamarisglobal.com.
We may request reasonable information necessary to verify the identity of the requester and protect against unauthorised disclosure.
Requests will be handled within the periods and according to the procedures required by applicable law.
18. Data Correction and System-Wide Consistency
Where personal information is corrected through an authorised process, Deltamaris may update relevant active records and, where required by applicable law, take appropriate steps to propagate the correction to relevant processing systems or processors.
Historical transaction documents may remain unchanged where they must be preserved as accurate records of the information applicable when the transaction occurred, subject to applicable data-protection law.
19. Account Closure and Deletion
Users may request closure of their NAVIQUE account through the appropriate support process.
Account closure does not automatically require deletion of information that must be retained under law, accounting requirements, contractual obligations, security requirements or legitimate dispute-resolution needs.
20. Cookies and Similar Technologies
NAVIQUE may use essential cookies or similar technologies required for authentication, session management, security and core functionality.
If optional analytics, advertising or other non-essential technologies are introduced, appropriate notices and consent or preference mechanisms will be provided where required by applicable law.
21. Communications
We may use business contact information to communicate about RFQs, quotations, orders, contracts, shipments, documents, account administration, security matters and service operations.
Where marketing communications are used, they will be handled in accordance with applicable law and any required consent or preference mechanism.
22. Payment Information
Where payment or billing services are used, payment information may be processed by the relevant payment provider or financial institution.
NAVIQUE may retain transaction identifiers, billing records, payment status and other information necessary for accounting and transaction administration without necessarily storing complete payment-card credentials.
23. Children
NAVIQUE is a B2B platform and is not directed to children. We do not knowingly design NAVIQUE as a service intended for children.
24. Automated Processing and Decision-Making
NAVIQUE may use automated validation, workflow, security and data processing functions.
Where applicable law restricts solely automated decision-making that produces legal or similarly significant effects, Deltamaris will provide the safeguards and processes required by that law.
25. Personal Data Breaches and Security Incidents
Deltamaris maintains procedures for assessing and responding to suspected security incidents and personal-data breaches.
Where applicable law requires notification to a regulator, authority or affected individual, Deltamaris will make the required assessment and notification within the legally applicable requirements.
26. Legal Requests and Government Authorities
Personal data may be disclosed where required by law, lawful court order, regulatory request, customs requirement, law-enforcement requirement or another legally recognised obligation.
Where legally permitted, we may apply appropriate safeguards when responding to such requests.
27. International Trade Parties
Because NAVIQUE manages international trade transactions, personal information may appear in commercial documents for legitimate business purposes, including the names and contact information of buyers, sellers, consignees, notify parties, importers, authorised representatives and logistics contacts.
Such information is processed only to the extent reasonably necessary for the relevant transaction, legal requirement or legitimate business purpose.
28. Confidential Business Information
Personal data may exist alongside confidential commercial information. Access is restricted according to role and business need where reasonably practicable.
Users are responsible for ensuring that information they upload or share through NAVIQUE is appropriate for the intended transaction and does not unlawfully disclose another person's confidential or personal information.
29. Privacy by Design and Accountability
Deltamaris seeks to incorporate privacy and security considerations into NAVIQUE's development and operational processes, including access control, transaction integrity, data minimisation where practical, security logging and controlled handling of historical transaction records.
30. Changes to This Privacy Policy
This Privacy Policy may be updated when NAVIQUE's data-processing activities, technology, business model or applicable law changes.
The published version will identify the effective date. Material changes will be communicated through appropriate channels where required by applicable law.
31. Contact and Privacy Complaints
For privacy questions, data-subject requests or privacy complaints:
DELTAMARIS GLOBAL LTD.
Agrabad Commercial Area, Chittagong 4100, Bangladesh
Email: info@deltamarisglobal.com
32. Legal Review Notice
This Privacy Policy is a corporate production draft designed around NAVIQUE's intended B2B trade-platform processing and the legal frameworks identified above. Before final legal publication, Deltamaris should obtain Bangladesh-qualified privacy/legal advice and reconcile this policy against the final production implementation, including Supabase authentication, database processing, document storage, email, payment services, analytics, backups, processors, retention periods and international transfers.