Privacy Policy
Last updated: 12 October 2026
This policy describes how personal information may be handled when you contact MM Carrier or use its communication and transportation services.
It covers business enquiries and the information relevant to answering calls, outbound telemarketing, appointment scheduling and transporting goods throughout the EU. The details depend on the service and the parties’ agreed responsibilities.
Draft for owner review. Before publication, MM Carrier must verify its legal identity, actual data flows, providers, lawful bases, retention criteria, international transfers and website technologies. This draft does not confirm call recording or the use of cookies, analytics or tracking.
1. Information relevant to our services
The information needed depends on your enquiry or agreed service. Relevant categories may include:
- Contact details: names, business names, email addresses, telephone numbers and correspondence.
- Answering-service information: caller details, messages and routing or escalation instructions.
- Telemarketing information: campaign contact details, contact-list sources, communication preferences, objections and campaign outcomes.
- Appointment information: customer details, availability, booking times and relevant scheduling notes.
- Transport information: collection and delivery contacts, addresses, shipment references and handover documentation.
- Agreement and billing information necessary to administer the business relationship.
Please provide only information necessary for the task. Sensitive personal information requires particular care and should not be included in routine messages unless a lawful, agreed process requires it.
2. Purposes and lawful bases
Service-related purposes may include responding to enquiries, preparing quotations, delivering agreed work, coordinating bookings or shipments, maintaining business records and addressing complaints.
Each processing activity requires an appropriate lawful basis. Depending on the circumstances, this may be steps requested before a contract, performance of a contract with an individual, a legal obligation, legitimate interests assessed against individual rights, or consent where required.
A business service agreement does not automatically provide a lawful basis for every use of an individual’s information. Marketing activity must also satisfy the applicable electronic communications and direct-marketing rules. Where consent is relied on, it must be valid and capable of withdrawal.
3. Client and MM Carrier responsibilities
For its own business enquiries and administrative activities, MM Carrier’s role must be assessed according to the purposes and means it determines. When handling caller, campaign or appointment data under a client’s instructions, MM Carrier may act as a processor, depending on the actual arrangement.
Roles must be confirmed before service delivery. Where required, a written data processing agreement should cover instructions, confidentiality, security, approved subprocessors, assistance with rights requests and the handling of information when the service ends.
Information may come directly from an individual or from a client or authorised business contact. Clients must ensure that information they supply is lawfully obtained and that relevant privacy information is provided.
4. Necessary sharing and transfers
Depending on the service, necessary recipients may include authorised client contacts, transport parties, approved service providers, professional advisers or public authorities where disclosure is required by law. Only information needed for the relevant purpose should be shared.
Providers and recipients must be verified for the actual service. If personal information is transferred outside the European Economic Area, applicable transfer requirements and safeguards must be established before the transfer. EU transport coverage alone does not determine where information is stored or accessed.
5. Security and retention
Appropriate technical and organisational measures must reflect the nature of the information and the risks of the processing. Access should be limited to authorised people who need it for their work. Specific measures must be verified against the systems actually used.
Information should be retained only for as long as necessary for the relevant purpose, applicable legal requirements and legitimate handling of disputes. Retention criteria must account for the service, record type and any client processing instructions. No fixed retention period is stated in this draft.
At the end of a processing service, return or deletion should follow the agreement and applicable law. No method of communication or storage can be represented as completely risk-free.
6. Your rights
Where applicable data protection law provides them, you may have rights to access your personal information, correct inaccuracies, request deletion, restrict processing, receive portable information and object to certain processing.
These rights depend on the circumstances and are not absolute. Where processing relies on consent, you may withdraw it without affecting the lawfulness of processing before withdrawal. You may object to processing for direct marketing at any time.
7. Making a privacy request
Email MM Carrier with a description of your request and enough context to identify the relevant enquiry or service. Do not send identity documents or sensitive information unless requested through an appropriate process.
Proportionate verification may be needed to protect your information. Requests must be handled within the time limits required by applicable law. If MM Carrier handles the information on a client’s behalf, the request may need to be referred to that client, with appropriate assistance.
8. Concerns and complaints
If you have a concern about the handling of your personal information, contact MM Carrier so the matter can be reviewed. You may also lodge a complaint with a competent data protection supervisory authority where applicable, including in the country of your habitual residence, place of work or the alleged infringement.
9. Policy updates
This policy should be reviewed when services, processing arrangements or legal requirements change. The date above identifies the latest revision of this text. Material changes should be communicated as required by applicable law.