Kargo
Get Started

Legal

Privacy Policy

Information about how we process personal data when you use Kargo and contact our team.

Last updated: September 23, 2025

Data controller:
Sora Hub S.L.
Tax ID: B22949556
Address: c/ Manuel Llaneza 50, Esc Izq, 1oA
Website: https://kargotr.com
Contact email: info@kargotr.com

1. Introduction

At Sora Hub S.L. ("Kargo", "we", "us"), we respect your privacy and are committed to protecting the personal data you provide through our website https://kargotr.com (the "Site"). This Privacy Policy explains what data we collect, for which purposes, the legal basis for each processing activity, how long we keep it, and which rights you have and how to exercise them.

This policy applies to all personal information collected through the Site, forms, email, phone, payment systems, and any interaction between you and Kargo.

2. Controller and contact details

Controller: Sora Hub S.L. (Tax ID B22949556)
Address: c/ Manuel Llaneza 50, Esc Izq, 1oA
Privacy email: info@kargotr.com

3. Data we process

Depending on your relationship with us, we may process the following categories of personal data:

  • Identification data: first name, last name, tax ID (when needed for invoicing), postal address.
  • Contact data: email, phone number.
  • Billing and payment data: billing address, payment method, and data needed to issue invoices (we do not store full banking details unless strictly necessary and with appropriate security measures).
  • Technical and browsing data: Site usage data, server logs, and other technical data collected through cookies and similar technologies.
  • Communication data: content of emails or messages you send when contacting support or customer service.
  • Commercial and marketing data: preferences, purchase history, and participation in promotions where you have given consent.

We do not deliberately collect or process special categories of personal data (for example, health data, sexual orientation, religious beliefs) unless, in exceptional and justified cases, we obtain your explicit and specific consent.

4. Processing purposes and legal bases

Below are the main purposes for which we process personal data, the legal basis for each activity, and the indicative retention period:

  1. Service delivery and order management (contract):
    • Purpose: manage orders, deliveries, invoicing, and customer support.
    • Legal basis: performance of a contract or pre-contractual measures.
    • Retention: for as long as necessary to provide the service and, afterwards, for the periods required by applicable tax and accounting regulations.
  2. Compliance with legal obligations (legal obligation):
    • Purpose: comply with tax, accounting, anti-money laundering, and other legal requirements.
    • Legal basis: compliance with a legal obligation.
    • Retention: for the legally required periods for each type of record.
  3. Marketing and commercial communications (consent/legitimate interest):
    • Purpose: send newsletters, offers, and commercial communications when the user has granted consent or, where applicable, when a previously assessed legitimate interest exists.
    • Legal basis: the data subject's consent or duly assessed legitimate interest.
    • Retention: until consent is withdrawn; in legitimate interest scenarios, for as long as that interest remains valid and proportionate.
  4. Analytics and cookies (consent/legitimate interest):
    • Purpose: analyze Site usage to improve user experience and measure performance.
    • Legal basis: consent for non-essential cookies; legitimate interest for strictly necessary cookies.
    • Retention: as specified in the Site's cookie policy.
  5. Security, fraud prevention, and dispute handling (legitimate interest):
    • Purpose: ensure Site security, detect and prevent fraud, and handle incidents.
    • Legal basis: controller's legitimate interest.
    • Retention: for as long as necessary for the purpose and/or while legal liabilities remain pending.

5. Cookies and similar technologies

We use cookies and equivalent technologies so the Site functions correctly, to improve user experience, and for analytics and advertising purposes where you provide consent.

  • Strictly necessary cookies do not require consent because they are essential for delivering the service.
  • For analytics, advertising, or personalization cookies, we request your consent through the Site's cookie management tool.

6. Disclosures and international transfers

We will not sell your personal data to third parties.

We may share data with suppliers and processors that provide services to us (hosting, payment platforms, shipping providers, analytics tools, support services, etc.). These third parties act as processors and are contractually and legally required to guarantee data confidentiality and security.

If international data transfers outside the European Economic Area (EEA) are required, they will only take place where appropriate safeguards exist (European Commission adequacy decisions, standard contractual clauses, or other applicable legal mechanisms), and we will inform you when required.

7. Security

We adopt appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including access controls, encryption where applicable, supplier assessments, and periodic technical testing. However, internet transmission is not completely secure; if you have reason to believe your interaction with us is no longer secure, please notify us at our privacy contact.

8. Data subject rights

You have, in particular, the following rights:

  • Access: know whether we process your data and obtain a copy.
  • Rectification: request correction of inaccurate or incomplete data.
  • Erasure ("right to be forgotten"): request deletion of your data where applicable.
  • Restriction of processing: request limitation of processing in specific cases.
  • Portability: receive your data in a structured, interoperable format and, where applicable, transmit it to another controller.
  • Objection: object to processing for reasons related to your particular situation, including direct marketing activities.
  • Withdrawal of consent: withdraw consent at any time (where processing is based on consent) without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, you can send a request to info@kargotr.com or by post to the controller's address indicated in this policy, clearly identifying yourself and your request. If you are not satisfied with our response, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD).

9. Minors

Processing based on minors' consent complies with applicable regulations. Under current Spanish law, processing personal data of minors may only be based on their own consent when they are over fourteen (14) years old; below that age, consent from parents or legal guardians is required. Kargo does not market services aimed at minors and asks parents/guardians to notify us if they detect that we have collected a minor's data without proper parental consent.

10. Changes to this privacy policy

We may update this Privacy Policy to reflect legislative or case law developments, supervisory authority guidance, or improvements in our services. If relevant changes are made, we will communicate them through a prominent notice on the Site or by email.

Version: 09/23/2025

11. Contact

If you have questions about this policy or about how we process your data, you can contact us at:

Sora Hub S.L.
Email: info@kargotr.com
Address: c/ Manuel Llaneza 50, Esc Izq, 1oA

You may also file a complaint with the Spanish Data Protection Agency (AEPD) if you believe your rights have been violated.