Data Protection

Your Privacy Matters

We are committed to protecting your personal information and being transparent about our data practices.

Last Updated: January 1, 2026

1. Introduction

The Warehouse Receipt Regulator Board (WRRB) System respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

Please read this privacy policy carefully. By using the WRRB System, you consent to the data practices described in this policy.

We are committed to protecting your personal information and ensuring data privacy compliance.

2. Information We Collect

We collect various types of information to provide and improve our services:

  • Personal Identification Information: Name, NIDA number, phone number, email address, physical address
  • Business Information: BRELA certificate, TRA certificate, business name, business address
  • Warehouse Information: Warehouse location, environmental measurements, storage capacity
  • Account Information: Username, password, account preferences
  • Payment Information: Payment method, transaction details (processed securely)
  • Usage Data: How you interact with our platform, pages visited, time spent
  • Device Information: IP address, browser type, operating system
Personal Identification
Business Information
Warehouse Details
Payment Information

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To process your warehouse license applications
  • To verify your identity and business credentials
  • To schedule and conduct warehouse inspections
  • To generate and issue warehouse certificates
  • To communicate with you about your applications and account
  • To send notifications, updates, and renewal reminders
  • To improve our platform and services
  • To comply with legal and regulatory requirements

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contractual Necessity: To fulfill our obligations under your license application
  • Legal Obligation: To comply with regulatory requirements
  • Legitimate Interests: To improve our services and prevent fraud
  • Consent: When you have given explicit consent (e.g., marketing communications)

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. However, we may share your data with:

  • Government Agencies: BRELA, NIDA, TRA for verification purposes
  • Service Providers: Payment processors, SMS gateways, email services
  • Law Enforcement: When required by law or to protect legal rights

All third-party service providers are bound by strict confidentiality agreements and data protection obligations.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

  • Data encryption in transit and at rest
  • Secure servers and firewalls
  • Access controls and authentication measures
  • Regular security audits and vulnerability assessments
  • Staff training on data protection

While we strive to protect your data, no transmission method over the internet is 100 percent secure.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.

  • Account data: Retained while you have an active account
  • Application data: Retained for regulatory compliance (minimum 7 years)
  • Certificate data: Retained for verification purposes (indefinitely)
  • Communication logs: Retained for 2 years

8. Your Data Protection Rights

Under applicable data protection laws, you have the following rights:

  • Right to Access: Request access to your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data (subject to legal obligations)
  • Right to Restrict Processing: Request limitation of data processing
  • Right to Data Portability: Receive your data in a structured format
  • Right to Object: Object to processing of your data
Your Rights

Your Data Rights

You have control over your personal information. Here's how you can exercise your rights.

Right to Access

Request a copy of all personal data we hold about you.

Right to Rectification

Correct any inaccurate or incomplete data we hold about you.

Right to Erasure

Request deletion of your data when it is no longer needed.

Right to Restrict

Limit how we process your data in certain circumstances.

Right to Portability

Receive your data in a portable format to transfer elsewhere.

Right to Object

Object to processing of your data for specific purposes.