Privacy & Cookies

About this policy

Win Portal is an internal logistics management platform operated by Win Haul Pty Ltd for authorised staff and operators at the Port of Brisbane. This policy explains what personal information is collected, how it is used, who may access it, and how to contact us with questions or requests.

Win Haul Pty Ltd is bound by the Privacy Act 1988 (Cth) and the thirteen Australian Privacy Principles (APPs).

What information we collect

• Account credentials — your email address and password (stored by Supabase Auth; passwords are hashed with bcrypt and never stored in plain text).
• Profile information — your name and job title, used to identify you within the portal.
• Operational records — container gate movements, vessel schedules, and export release records you create or process during normal operations.
• Customer and carrier details — business names, contact details, and ABNs for companies we provide logistics services to.
• Driver and vehicle details — names and rego numbers of drivers and trucks used in gate operations.
• Usage analytics — anonymous page-view data collected by Vercel Analytics in the production environment. No personally identifiable information is included.

How we use this information

Information is used solely to operate Win Haul’s freight and logistics activities at the Port of Brisbane, including:

• Processing container gate-in and gate-out movements
• Managing export release bookings and vessel schedules
• Generating invoices and reconciling charges through Xero
• Producing operational and management reports

We do not sell, share, or disclose personal information to third parties except where required by law or strictly necessary to deliver our services (e.g. Xero for billing, Supabase for data storage).

Access and roles

Access is restricted to authorised Win Haul staff. Four roles are in use:

• Admin — full access to all modules including billing, reporting, and system settings.
• Operations / Management — export management, yard and storage, and operational reports. No access to billing or customer financial details.
• Yard Operator — gate tablet only (gate-in and gate-out). No access to financial information, customer details, or reporting.

Role assignments are managed by administrators and stored in a service-only configuration that users cannot modify themselves.

Data storage and security

Data is stored in Supabase, a cloud database platform hosted on Amazon Web Services infrastructure. Supabase applies row-level security policies that enforce the role-based access controls described above at the database level.

The portal is hosted on Vercel’s platform. Sessions expire automatically after 8 hours of inactivity. All communications between your browser and the platform use HTTPS encryption.

Cookies

Win Portal uses the following cookies. No marketing or third-party tracking cookies are used.

Strictly necessary cookies cannot be disabled as they are required for the portal to function. Because Win Portal is an internal business system using only privacy-respecting analytics with no PII, a cookie consent banner is not required under Australian privacy law.

Your rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information Win Haul holds about you
• Request correction of inaccurate information
• Make a complaint about how your information has been handled

Accessibility

Win Haul aims for Win Portal to conform to the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA. We actively work to identify and remediate accessibility barriers. If you encounter an accessibility issue, please contact us using the details below.

Contact

For privacy, data, or accessibility enquiries, please contact Win Haul Pty Ltd:

Port of Brisbane, Queensland, Australia