Privacy Policy

This policy explains how C2K Legacy LLC ("C2K Legacy", "we", "us") handles personal information when you visit c2klegacy.com, request a quote, book freight, apply to haul or work with us, sign in to a customer or carrier portal, or use our API. If you have questions, contact us at dispatch@c2klegacy.com.

1. Information we collect

Information you give us

• Forms: name, company, email, phone, and the details you enter, such as shipment lanes, weights and dates (quote and instant-quote requests), MC/DOT numbers and equipment (carrier onboarding), a resume link and cover note (job applications), and your message (contact form).
• Accounts: if we create a customer or carrier account for you, we store your name, company, email address and a securely hashed password. We never store your password in readable form.
• Shipments and bookings: origin, destination, equipment, weight, commodity, reference numbers, contacts, status updates and the price quoted or agreed. If you use our EDI or API integration, we store the messages and requests you send and the responses we return.
• Load board: loads a carrier requests and any note they add.
• Integrations: API key names (the keys themselves are stored only as one-way hashes), your webhook URL and the delivery log for it.

Information collected automatically

• IP address is saved with form submissions to help us detect spam and abuse, and is used briefly in memory to limit repeated requests.
• Cookies: we use only essential cookies. When you sign in, a session cookie keeps you signed in (it is HttpOnly and is deleted when you sign out or it expires). We do not use advertising or analytics cookies or third-party trackers on this website.

We do not knowingly collect information from children under 18, and our services are for businesses.

2. How we use it

• To respond to your requests, prepare quotes and arrange, track and bill freight.
• To create and secure accounts, verify carriers and operate the load board.
• To send transactional emails, such as quote and booking messages and password resets. We do not send marketing email without your consent.
• To keep our systems secure, prevent fraud and abuse, fix problems and make backups.
• To meet legal, tax, safety and contractual obligations.

3. Who we share it with

We do not sell personal information. We share it only as needed to provide our services:

• Carriers, shippers and consignees involved in a shipment receive the details needed to move it (for example pickup and delivery contacts and addresses).
• Service providers that process data on our behalf: our hosting provider (Railway, servers in the United States), our email delivery provider (Resend) and OpenStreetMap services, which receive only the city and state you type into the instant-quote tool to calculate distance.
• Professional advisers, authorities and courts when required by law or to protect rights and safety.
• A successor business if C2K Legacy is involved in a merger, sale or reorganization, under equivalent privacy protections.

Our servers are located in the United States, so information about people in other countries, including Canada, is transferred to and stored in the United States and may be accessible to authorities there under local law.

4. How long we keep it

We keep information for as long as needed for the purposes above and to meet legal and accounting requirements, then delete or anonymize it. Encrypted database backups are kept for up to about 12 months and then deleted automatically; deleted records may therefore remain in older backups until those backups expire.

5. How we protect it

We use encryption in transit (HTTPS), hashed passwords and API keys, restricted administrator access on a separate, protected system, rate limiting, and encrypted off-site backups. No system is perfectly secure, but we work to protect your information and to respond promptly to any incident.

6. Your choices and rights

Depending on where you live (for example under Canadian federal and provincial privacy laws, or US state privacy laws), you may have the right to access the personal information we hold about you, ask us to correct or delete it, withdraw consent, or object to certain uses, and to complain to your privacy regulator. To make a request, use our privacy request form (or, if you have an account, the "Security & privacy" section of your portal), or email dispatch@c2klegacy.com; we may need to verify your identity first. We will respond within the time required by law. We do not discriminate against anyone for exercising their privacy rights.

7. Links to other sites

Our website may link to other sites. We are not responsible for their privacy practices.

8. Changes to this policy

We may update this policy from time to time. The "last updated" date above shows the latest version, and we will give notice of material changes where required.

9. Contact

C2K Legacy LLC
Email: dispatch@c2klegacy.com