1. Scope and operator
Wong Chao Logistics is operated by Wong Chao International Freight Co., Ltd. and Wong Chao Business Import & Export Co., Ltd. This policy covers the public customer iOS app 王朝智慧物流, the staff-only iOS app 王朝智慧物流运营, wongchaobusiness.com, shipment requests, support, customer accounts, and private tracking invitations.
2. Public customer app and website
When you register, request a physical logistics service, manage an authorized shipment, open a temporary pass, or contact support, we may process:
- Contact, account, and device information: name, verified email address, optional phone number, pickup or delivery address, password hash when email/password is used, sign-in identifier, customer/user identifier, session and device identifiers, app version, optional nickname, and optional profile photo.
- Shipment and user content: origin, destination, cargo description/category, dates, container or booking reference, notes, request status, support message, and shipments linked to your account or temporary pass.
- Authorized tracking: shipment status, reviewed route, assigned plate, estimated arrival, public security state, and vehicle position only while access is authorized. The vehicle position comes from separate fleet hardware and our logistics systems, not from the customer's iPhone.
- Security and delivery: request identifiers, limited service telemetry, in-app notification delivery and read status, login and security events needed to protect accounts and prevent abuse. Logs are designed to redact secrets and unnecessary personal content.
3. Staff-only operations app
王朝智慧物流运营 does not offer public registration. Wong Chao issues accounts only to authorized staff and applies role-based access. Depending on the staff member's role and actions, we may process:
- Staff account information: username, display name, role, account status, session and device identifiers, and security events.
- Operations records: customer assignments, shipment requests, trips, cargo, origins, destinations, routes, progress, handover records, and temporary tracking invitations.
- Fleet and telemetry: vehicle name and plate, container number, GPS-lock serial number, route and vehicle coordinates, speed, direction, battery, lock/rope status, and related timestamps received from fleet devices and operations systems.
- Driver and handover information: driver name, phone number, optional license number, and any handover photo already attached to an authorized operations record.
- Safety, controls, and audit: incident and alarm details, security requests and responses, operational sites and geofences, confirmed GPS-lock commands, administrative changes, the acting account, time, IP address, and device or app information needed for security and accountability.
4. Device permissions
In either iOS app, device location is optional and requested only after you tap the location control. It is processed on-device to center the authorized shipment or fleet map and show your position relative to vehicles or operating sites; the iPhone's location is not uploaded to or stored by Wong Chao. In 王朝智慧物流运营 build 1, the camera is requested only after authorized staff open the temporary-assignment QR scanner. Camera frames are analyzed on-device and are not uploaded; only the decoded, short-lived assignment token is sent to Wong Chao's service. The apps do not automatically browse a photo library. A profile or handover photo is uploaded only if a user deliberately selects or attaches it through an available app function. The current iOS apps use in-app notifications only; they do not request system notification permission or register for Apple Push Notification service (APNs). The apps do not use personal data for advertising tracking.
5. Tracking invitations
A private invitation contains a public link ID and a 256-bit secret in the URL fragment. The fragment is not sent in the initial HTTP request or referrer. The browser submits it once to our same-origin service, removes it from the address, and receives Secure, HttpOnly, host-only session cookies. After authorization, the tracking page loads its base map through OpenFreeMap using OpenMapTiles and OpenStreetMap data. Referrer information is suppressed, and the page uses no advertising or analytics.
Before departure, an invitation shows safe scheduled details without live vehicle position. At arrival, live vehicle access ends immediately. An arrived summary may remain for up to 24 hours; then temporary grants and browser sessions expire. Wong Chao may revoke a link earlier.
6. How we use information
We use information to authenticate customers and staff, review requests, provide physical logistics services, display authorized shipment and fleet status, coordinate trips and handovers, operate role-controlled safety and GPS-lock workflows, send verification, recovery, and service messages, provide in-app notifications, answer support requests, maintain reliability, prevent abuse, audit sensitive actions, comply with law, and resolve disputes. We do not sell personal information or use it for third-party advertising.
7. Service providers and disclosure
Necessary information may be processed by providers that support our services, including Apple, Resend, Netlify, Cloudflare, our PostgreSQL/VPS hosting, private object storage, Jointech for configured GPS-lock device commands, and Telegram for configured authorized incident-response alerts. We may also disclose information to authorized Wong Chao personnel, logistics partners needed to perform a shipment, competent authorities, or professional advisers when legally or operationally necessary. When an authorized web tracking map opens, OpenFreeMap receives the IP address and technical request information needed to deliver the base map, which uses OpenMapTiles and OpenStreetMap data.
8. Retention and your choices
Customer account and shipment history may remain until account deletion, subject to legal and operational retention. Temporary guest tracking expires as described above. Verification and reset secrets are short lived and stored only as hashes. Shipment, service, driver-handover, incident, command, security/audit, financial, and correspondence records are kept only as long as required for operations, safety, legal, fraud-prevention, accounting, or dispute purposes, then deleted or de-identified.
Customers can edit optional profile details, revoke sessions, remove temporary passes, review and mark in-app notifications as read, and request account deletion inside 王朝智慧物流. Staff accounts are company-issued rather than self-registered; authorized administrators can deactivate them. You may contact us to request access, correction, or deletion, subject to identity verification and records we must lawfully retain.
9. Security and children
We use encrypted transport, secure password hashing, protected session storage, rotating sessions, role-based access, confirmation for sensitive commands, audit records, minimized logs, and tested backups. No internet service is risk free. The customer service is not directed to children, and the operations app is only for authorized staff.
10. Contact
Email support@wongchaobusiness.com or use Customer Support. Address: Hun Sen Boulevard, Phnom Penh, Cambodia.