Privacy Policy
Last updated: 28 October 2026
This Privacy Policy explains how LUNA TRADING AND LOGISTICS LIMITED("LUNA", "we", "us" or "our") collects, uses, stores and protects information in the LUNA ICD Management System available at https://icd.lunalogisticsgroup.com/icd-production (the "Application").
The Application is an internal business system used to run our Inland Container Depot (ICD) in Dar es Salaam, Tanzania. It is used by our authorised staff to manage container manifests, gate-in and gate-out, yard operations, billing, invoicing and reporting. It is not a consumer service and public sign-up is not available.
1. Information we collect
We collect only the information needed to operate the depot and the Application:
- Staff account information – name, username, email address, role, encrypted password, digital signature image and activity logs (for example sign-in times and actions performed) of authorised users.
- Customer and business information – company names, contact persons, email addresses, phone numbers, tax identification details (TIN/VRN), agreements and billing records of our customers, clearing agents and transporters.
- Operational information – container numbers, manifests, bills of lading, vehicle and driver details, gate passes, yard locations, photographs and documents uploaded during depot operations.
- Technical information – IP address, browser type and security cookies required to keep users signed in securely.
2. How we use information
- To operate the depot: track containers, process gate-in/gate-out, allocate yard space and release cargo.
- To prepare invoices, receipts, sales orders and accounting records.
- To send operational emails, such as daily dashboard reports and scheduled reports, to our own staff and authorised recipients.
- To create secure backups of the Application database.
- To secure the Application, audit user activity and prevent unauthorised access.
- To meet legal, tax, customs and regulatory obligations in Tanzania.
We do not sell, rent or trade personal information, and we do not use it for advertising.
3. Google user data
The Application can connect to a Google account owned by LUNA. Only a LUNA super administrator can connect this account, from the administration settings of the Application. The connection is used only for our own internal operations. We do not ask customers or members of the public to sign in with Google.
When connected, the Application requests the following Google permissions:
| Permission (scope) | What we use it for |
|---|---|
Google Drive – files created by the appdrive.file | Create an "ICD Database Backups" folder and upload, list and remove the Application's own database backup files. The Application cannot see or access any other files in the Google Drive. |
Gmail – send emailgmail.send | Send operational emails from the connected LUNA mailbox, such as daily dashboard reports, scheduled reports and container (CODECO) reports, to configured recipients. The Application cannot read, modify or delete any email in the mailbox. |
Storage: the OAuth access and refresh tokens issued by Google are stored in our private database on our own server and are used only by the Application. Email content and Google Drive files are not read or copied into our database, apart from database backup files that the Application itself creates.
Sharing:Google user data is not shared with, sold to or transferred to any third party. It is not used for advertising, and it is not used to develop, improve or train generalised artificial intelligence or machine learning models. No person reads Google user data except where needed for security, to comply with law, or with the account owner's permission.
The Application's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
Revoking access:a super administrator can disconnect Google at any time from the Application's Google Drive settings, which deletes the stored tokens. Access can also be removed at myaccount.google.com/permissions.
5. Data storage and security
The Application is hosted on servers controlled by LUNA. We protect information using encrypted HTTPS connections, hashed passwords, secure cookies, role-based access control, activity logging and regular backups. Only authorised staff can access the Application, and each user sees only the features allowed by their role.
No system is completely secure, but we take reasonable steps to protect the information we hold.
6. Data retention
We keep operational, billing and accounting records for as long as needed for our business and as required by Tanzanian tax, customs and commercial laws. Automatic database backups are rotated and older backups are deleted regularly. Google tokens are kept only while the Google account remains connected.
7. Your rights
You may ask to access, correct or delete personal information we hold about you, subject to our legal record-keeping obligations. To make a request, contact us using the details below.
9. Changes to this policy
We may update this Privacy Policy from time to time. Changes will be published on this page with a new "Last updated" date.