Privacy Policy

1. Overview & Scope

Dover Crest (“we,” “our,” or “us”) operates a global food export house and U.S. trucking dispatch and fleet operations desk accessible via dovercrest.com (the “Website”). This Privacy Policy outlines how we collect, store, process, and protect personal and commercial information submitted through our website and digital communication channels.

By accessing our Website, requesting product specifications or pricing, or submitting a dispatch consultation request, you acknowledge and agree to the data collection and processing practices detailed herein.

2. Information We Collect

We collect information directly provided by you when completing contact or consultation forms:

• Export Inquiries: Company name, contact person name, email address, destination market/country, and specific commodity requirements (e.g., peanut butter, Himalayan pink salt, basmati rice, botanical products).
• Fleet & Dispatch Inquiries: Carrier/operator name, fleet size (truck count), direct phone number, email address, preferred lanes, and service requirements.
• Chat Conversations: Messages you type into the on-site export concierge, and any details you submit through its inquiry form (name, company, email, phone, commodity, volume and destination).
• Voice Guide Conversations: If you start a session with our AI voice guide, your microphone audio while the session is open, a text transcript of the conversation, and any inquiry details you confirm and send.
• Technical & Verification Data: IP address, device telemetry, browser headers, and Cloudflare verification tokens utilized exclusively to safeguard our forms and AI assistants against abuse. To enforce usage limits, we keep short-lived counters keyed to your IP address (for example, how many voice sessions you have started), and an address that repeatedly fails our checks is temporarily blocked for 24 hours. These counters expire automatically.

3. Legal Basis for Processing (GDPR & UK GDPR)

For individuals residing in the European Economic Area (EEA) and the United Kingdom, we process your personal data under the following lawful bases pursuant to Article 6 of the General Data Protection Regulation (GDPR):

• Contractual & Pre-Contractual Measures (Art. 6(1)(b)): Processing is necessary to take steps at your request prior to entering into a commercial export agreement or fleet dispatch partnership.
• Legitimate Interests (Art. 6(1)(f)): Processing is necessary for our legitimate commercial interests in responding to business inquiries, securing our digital infrastructure, and preventing spam and unauthorized access.
• Legal Obligations (Art. 6(1)(c)): Retaining transaction and inquiry correspondence where required to satisfy trade, customs, or tax compliance requirements.

4. U.S. Mobile, SMS & Phone Compliance (TCPA & A2P 10DLC)

When you provide a telephone number through our Dispatch Consultation form, you consent to receive telephone calls or SMS messages from Dover Crest regarding your fleet dispatch inquiry. Consent to receive communications is not a condition of purchasing any commodities or services. Message and data rates may apply. You may opt out of further communications at any time by replying “STOP” or requesting removal via email.

5. Anti-Abuse & Cloudflare Turnstile

Our contact and dispatch forms utilize Cloudflare Turnstile, an invisible human verification mechanism designed to block automated spam without intrusive image-selection challenges.

Cloudflare Turnstile processes visitor browser characteristics and IP addresses solely to evaluate risk signals and prevent malicious automated scripts. Turnstile does not track users across non-participating sites or harvest personal data for commercial advertising. Data processed by Cloudflare is governed by Cloudflare’s Privacy Policy.

6. Export Concierge Chat, Voice Guide & Google Gemini

The chat assistant on this Website answers product questions automatically. When the AI service is enabled, the messages you type (the most recent few turns of the conversation) are sent to Google’s Gemini API to generate a reply. Otherwise replies come from our own pre-written product information and your messages stay on our servers.

Your conversation is kept in your browser’s session storage so it survives page changes, and is cleared when you close the tab or press reset. We do not use chat messages for advertising. If you submit the chat’s inquiry form, those details and the last few chat messages are emailed to our sales desk, exactly like the contact form. Please don’t share passwords, payment details or other sensitive information in the chat. Data processed by Google is governed by Google’s terms for the Gemini API.

The AI voice guide only starts when you press “Start talking” and allow microphone access. While the session is open, your audio is streamed directly from your browser to Google’s Gemini Live API, which transcribes it and generates the spoken replies; the guide can also open pages and highlight products for you. Sessions end when you press the end button, after a few minutes of silence, or after 8 minutes at most. We do not record or store your audio. The transcript exists only in your browser for the duration of the session — unless you send an inquiry the guide prepared, in which case the details you confirm and the last part of the transcript are emailed to our sales desk.

7. Cookies & Tracking Technologies (ePrivacy Exemption)

Dover Crest adheres to a privacy-first technical standard. We do not utilize tracking cookies, advertising pixels (such as Meta Pixel or Google Ads tags), or third-party behavioral analytics tools on this Website.

Because no non-essential marketing or cross-site tracking cookies are deposited on your device, our Website is exempt from requiring an intrusive cookie banner under the EU ePrivacy Directive and GDPR.

8. California Privacy Disclosures (CalOPPA & CCPA / CPRA)

Under the California Online Privacy Protection Act (CalOPPA) and the California Consumer Privacy Act (CCPA/CPRA):

• Do Not Track (DNT) Signals: Because we do not track visitors across third-party websites or engage in behavioral advertising, our Website does not alter its operational behavior in response to browser DNT signals.
• No Sale or Sharing of Personal Information: Dover Crest has never sold, leased, or rented personal information to third parties, and will not sell or share personal information for cross-context behavioral advertising.
• Consumer Rights: California residents possess the right to know the categories of information collected, request deletion of their personal information, and be free from discrimination for exercising these rights.

9. Data Sharing & Third-Party Service Providers

Your information is only transmitted to trusted technical service providers essential to operating our digital infrastructure:

• Cloud hosting and edge network delivery (Vercel).
• Secure SMTP and email infrastructure (Google Workspace / Gmail) for routing inquiry notifications to our operations desk.
• Bot mitigation and network security (Cloudflare).
• Automated chat replies and the AI voice guide (Google Gemini API), when these services are enabled.
• Law enforcement or regulatory authorities only where strictly mandated by statutory subpoena or court order.

10. International Data Transfers

Dover Crest serves global markets and maintains digital operations that may process inquiries on servers located outside your country of residence (including the United States and international cloud data centers). Where cross-border transfers occur, we ensure appropriate data safeguards and contractual protections (such as Standard Contractual Clauses) are in place to uphold statutory data protection standards.

11. Data Retention & Security Measures

We retain communication records and inquiry details only as long as necessary to fulfill business engagements, resolve contractual discussions, or comply with tax, customs, and auditing standards. We implement industry-standard technical controls, TLS/SSL transit encryption, and restricted access protocols to safeguard all submitted data against unauthorized modification, destruction, or disclosure.

12. Your Statutory Rights & Supervisory Authority

Depending on your location, you may exercise statutory rights regarding your personal information, including:

• The right to access and receive a copy of your personal data.
• The right to rectify inaccurate or incomplete records.
• The right to request the erasure of your personal data (“right to be forgotten”).
• The right to object to or restrict processing of your information.

If you are located in the EEA or UK and believe our data processing violates applicable data protection regulations, you have the statutory right to lodge a complaint with your local Data Protection Authority (such as the UK Information Commissioner’s Office - ICO).

13. Contact Our Compliance Desk

To exercise your privacy rights, submit questions, or update your contact records, please contact our team directly: