Privacy & Cookies

About this policy

Windle's Portal is an internal logistics management platform operated by Windle's Bulk Haulage Pty Ltd for authorised staff and operators at the Port of Brisbane. This policy explains what personal information is collected, how it is used, who it is shared with, where it is stored, and how to contact us with questions or requests.

Windle's Bulk Haulage Pty Ltd is bound by the Privacy Act 1988 (Cth) and the thirteen Australian Privacy Principles (APPs).

What information we collect

• Sign-in details: staff sign in with their Microsoft 365 work account using Microsoft Entra single sign-on, so we never see or store your Microsoft password. Where a password-based login is used instead, it is held by Supabase Auth, hashed with bcrypt and never stored in plain text.
• Profile information: your name and job title, used to identify you within the portal.
• Operational records: container gate movements, vessel schedules, and export release records you create or process during normal operations.
• Customer and carrier details: business names, contact details, and ABNs for companies we provide logistics services to.
• Driver and vehicle details: names and rego numbers of drivers and trucks used in gate operations.
• Documents sent to us: delivery orders, equipment interchange reports and similar paperwork received at our Bookings mailbox, together with the details read out of them.
• Technical and security data: IP addresses and request details, used to apply rate limits and detect misuse, and diagnostic information captured when an error occurs.
• Usage analytics: anonymous page-view data collected by Vercel Analytics in the production environment. No personally identifiable information is included.

How we use this information

Information is used solely to operate the freight and logistics activities of Windle's Bulk Haulage at the Port of Brisbane, including:

• Processing container gate-in and gate-out movements
• Managing export release bookings and vessel schedules
• Generating invoices and reconciling charges through Xero
• Producing operational and management reports
• Keeping the platform available, secure and working correctly

We do not sell personal information, and we do not use it for marketing or advertising.

Access and roles

Access is restricted to authorised Windle's Bulk Haulage staff. Four roles are in use:

• Admin: full access to all modules including billing, reporting, and system settings.
• Management: the operational modules, plus read-only access to rate cards and invoices. Cannot create or change billing records, and cannot run a billing run.
• Operations: export management, yard and storage, planning, imports, drivers and operational reports. No access to rates, invoices or other customer financial details.
• Yard Operator: the gate tablet only (gate-in and gate-out). No access to financial information, customer details, or reporting.

Role assignments are managed by administrators and stored in a service-only configuration that users cannot modify themselves. These limits are enforced both in the application and at the database level.

Who we share information with

We do not sell or trade personal information. We share it only with the service providers needed to run the platform, and only for that purpose:

• Supabase: the database and authentication service that stores portal records.
• Vercel: application hosting, and the anonymous usage analytics described above.
• Microsoft 365: single sign-on, and sending and receiving mail through our Bookings mailbox (for example forwarding equipment interchange reports and issuing daily reports).
• Xero: invoicing and accounting.
• Anthropic: an artificial intelligence service used to read details out of delivery orders and pasted yard notes so they can pre-fill records in the portal. Only the document or text being processed is sent, and it is not used to train the provider's models.
• Sentry: error monitoring, which records diagnostic details when something goes wrong.
• Upstash: short-lived counters used to rate limit requests.

We may also disclose information where we are required or authorised to do so by law.

Where your information is stored

The portal database is hosted by Supabase in the Sydney region (ap-southeast-2), on Amazon Web Services infrastructure, so portal records are stored in Australia.

Some of the providers listed above are based overseas and may process information on servers outside Australia. Vercel Inc., Anthropic PBC, Sentry and Microsoft Corporation are United States companies, and Xero is a New Zealand company. Where information is handled overseas we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles.

Data security

Supabase applies row-level security policies that enforce the role-based access controls described above at the database level, so a user cannot read data their role does not permit even outside the application.

All communications between your browser and the platform use HTTPS encryption. Sessions expire automatically after a period of inactivity. Sensitive integration credentials are stored encrypted.

Cookies

Windle's Portal uses the following cookies. No marketing or third-party tracking cookies are used.

Strictly necessary cookies cannot be disabled as they are required for the portal to function. Because Windle's Portal is an internal business system using only privacy-respecting analytics with no PII, a cookie consent banner is not required under Australian privacy law.

Your rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information Windle's Bulk Haulage holds about you
• Request correction of information that is inaccurate, out of date or incomplete
• Make a complaint about how your information has been handled

To make a request, contact us using the details below. We will respond within a reasonable time, and there is no charge for making a request.

Complaints

If you have a concern about how we have handled your personal information, please contact us using the details below and we will work with you to resolve it. If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

Accessibility

Windle's Bulk Haulage aims for Windle's Portal to conform to the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA. We actively work to identify and remediate accessibility barriers. If you encounter an accessibility issue, please contact us using the details below.

Changes to this policy

We may update this policy from time to time. The current version is always available here, and the date at the top shows when it was last updated.

Contact

For privacy, data, or accessibility enquiries, please contact us: