Corporate Privacy & Data Protection Policy
At Carboatengine.com, we safeguard proprietary technical schematics, corporate procurement records, and financial transaction data to the highest commercial standards. This policy governs how we manage, protect, and process data for commercial fleet operators, marine shipyards, logistics carriers, and industrial facilities worldwide.
1 Institutional Commitment & Regulatory Framework
Our operational infrastructure adheres strictly to international data privacy statutes, including the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and the Indonesian Personal Data Protection Law (UU No. 27/2022 Pelindungan Data Pribadi). We maintain administrative, physical, and digital safeguards across all engineering consultation desks, warehouse depots, and online procurement rails.
Zero Data Commercialization Guarantee: Carboatengine.com does not sell, lease, monetize, or trade corporate client lists, vessel fleet specifications, or commercial purchasing data to any third-party marketing brokers under any circumstances.
2 Operational Data Categories Collected
To fulfill high-value commercial powertrain orders and execute customs clearance for heavy machinery, we process specific categories of corporate and technical data:
Corporate Identity & Financial Records
Company legal entity name, Tax Identification Numbers (TIN/VAT/EIN), authorized purchasing officer credentials, billing address, and corporate wire remittance documents.
Logistics & Receiving Facility Profiles
Commercial loading dock specifications, shipyard gate requirements, forklift/crane offloading capabilities, and receiving manager contact telephone numbers.
Vessel, Vehicle & Mechanical Telemetry
Vessel Hull Identification Numbers (HIN), Vehicle Identification Numbers (VIN), engine casting numbers, transmission tag codes, and technical gear ratio requirements.
Encrypted Transaction Telemetry
Tokenized settlement records from Direct Bank Wire / T/T, commercial trade escrow accounts, and credit card gateways. We never store raw credit card numbers or CVV security codes.
3 Lawful Bases & Purposes of Data Processing
We process commercial records exclusively under verified legal grounds to execute powertrain supply agreements:
Contractual Fulfillment
Generating itemized pro-forma invoices, verifying engine fitment against OEM blueprints, executing live dyno testing, and scheduling heavy timber crating.
Statutory Export & Maritime Compliance
Preparing verified customs export declarations, phytosanitary timber crating certificates (ISPM-15), international ocean Bills of Lading (BOL), and tax audit archives.
Escrow & Fraud Prevention
Authenticating enterprise bank wire deposits, verifying trade escrow milestones, and enforcing 3D Secure 2.0 multi-factor defense on card transactions.
Platform Stability & Telemetry
Monitoring portal uptime, server latency, and catalog responsiveness across our Reman, Inboard, and Transmissions divisions.
4 Authorized Third-Party Disclosures
Operational data is shared strictly with essential partners required to complete heavy freight transport and financial settlement:
• Freight & Maritime Forwarders: Consignment weights, shipyard addresses, and site manager telephone numbers are transferred to carriers (including UPS Supply Chain, DHL Global Forwarding, FedEx Freight, and specialized container lines) solely for transport execution and delivery coordination.
• Banking & Escrow Networks: Financial details are transmitted via encrypted protocols to institutional banking clearinghouses and trade escrow intermediaries under PCI-DSS Level 1 compliance.
• Statutory Customs Bodies: Cargo declarations and commercial invoices are transmitted to customs authorities to enable import/export tariff clearances.
5 Cross-Border Data Flows & Storage Integrity
Due to our international distribution corridors connecting Indonesia with the Americas, Europe, and Asia-Pacific, transactional data may traverse cross-border data routing systems. All transmissions utilize end-to-end 256-bit SSL/TLS encryption and restricted-access enterprise database environments.
Data Retention Schedule: Commercial invoices, engine serial records, and warranty documentation are retained for a statutory period of 5 to 7 years to comply with international maritime commercial code, tax audits, and core deposit tracking, after which records are securely destroyed.
6 Corporate Privacy Rights & Data Subject Inquiries
Under international privacy regulations, authorized corporate representatives hold specific legal rights regarding their organizational records:
Right of Access & Portability
Request a structured digital extract of all commercial purchase orders, vessel equipment records, and warranty registrations linked to your corporate account.
Right to Rectification & Erasure
Update site contact details, loading dock constraints, or request the deletion of non-statutory data following the expiration of warranty and core return terms.
To submit a data access or deletion request, email our Data Governance Desk at [email protected]. Requests are verified and completed within 30 calendar days.
Corporate Governance Hub & Data Protection Nexus
For formal privacy inquiries, data compliance audits, or corporate vendor registration, contact our administrative operations center: