Privacy Policy
What personal information we collect through this website and our online tools, why we use it, how long we keep it, and the choices and rights you have.

This policy explains how CorEnergy Logistics ("CorEnergy", "we", "us"), 1400 Dell Range Blvd, Cheyenne, WY 82009, USA, handles personal information collected through corenergylogistics.com, the public cargo tracker, private tracking links, the tank-availability tool, the Buyer / Receipt-Holder Portal, our website chat and our contact forms. It applies to visitors, customers, buyers and the people who act for them.
Our services are business to business, but the people we deal with are individuals, and their information deserves care. We collect what we need to run the service, keep it secure, meet our legal obligations and answer you. We do not sell personal information. This policy was last updated in October 2026.
Information we collect
We collect information you give us, information created when you use our tools, and limited technical information from your device. The table shows what each part of the website collects. We ask for identity documents only through the buyer portal's KYC process, not through chat or open forms. If anyone asks you to send a passport copy to an address that does not end in @corenergylogistics.com, do not send it.
| Source | What we collect |
|---|---|
| Contact and enquiry forms | Name, company, job title, email, phone, country and the content of your message |
| Public tracker and private tracking links | Tracking number entered, language chosen, time of access and IP address, used to protect private links |
| Buyer / Receipt-Holder Portal | Account and sign-in records, and KYC documents: company registration, ownership and director details, identity documents, proof of address and screening results |
| Website chat (Chatwoot) | Your messages, any name or email you give, and the browser details needed to keep the conversation |
| Security check (Cloudflare Turnstile or Google reCAPTCHA) | Device and interaction signals sent to the provider to tell people from automated traffic |
| Google Translate | The page text you ask to translate and your IP address, sent to Google; a googtrans cookie stores your language |
| Server logs | IP address, date and time, page requested, referring page, browser and device type, and response codes |
| Business dealings | Contract, invoicing, shipping and payment details for people acting for customers and suppliers |
How we use it
We use personal information only for purposes that fit the reason it was collected. For visitors in the EU and UK, our legal bases are performing a contract or taking steps before one, our legitimate interest in running and securing a business-to-business service, compliance with legal obligations such as sanctions and record-keeping rules, and consent where we ask for it. We do not send marketing email unless you have asked for it.
- To answer enquiries and prepare storage and freight quotes
- To run tracking links, the availability tool and the buyer portal
- To verify counterparties (KYC), screen against sanctions lists and prevent fraud
- To perform contracts, invoice and keep business records
- To secure the website, detect abuse and investigate incidents
- To meet legal, regulatory and tax obligations and answer lawful requests
- To send service messages about your shipment or account
Sharing and international transfers
We share personal information only with service providers that help us run the website and our operations, such as hosting, email, chat, security-check and translation providers; with inspectors, carriers, banks and other parties to a transaction where the transaction requires it; with professional advisers; and with authorities where the law requires. Google and Cloudflare handle the data their widgets collect under their own privacy terms.
We do not sell personal information or share it for cross-context behavioral advertising. We are a US company and process information in the United States. Where we transfer personal data of visitors in the EU or UK, we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.
Retention and security
We keep information only as long as we need it for the purpose it was collected, then delete or anonymize it. Where the law requires a longer period, or the information is relevant to a claim, an investigation or a regulator's request, we keep it for as long as that lasts and restrict its use to that purpose. We protect information with access controls, encryption in transit and hashing of portal passwords, and we limit access to KYC files to the staff who need it.
| Information | How long we keep it |
|---|---|
| Enquiries and chat transcripts | Up to 3 years after our last contact, unless they become part of a contract file |
| Tracking-link access records | Up to 12 months |
| Server logs | Up to 90 days, longer only to investigate an incident |
| Portal account and sign-in records | While the account is open and up to 2 years after it closes |
| KYC and sanctions-screening records | As long as sanctions, anti-money-laundering and tax rules require, which can be 10 years |
| Contracts, invoices and shipping records | For the applicable limitation and tax periods, generally up to 10 years |
Your rights
Depending on where you live and whether a given law applies to us, you may have the right to know what personal information we hold about you, to receive a copy, to correct it, to delete it, to opt out of its sale, sharing or use for targeted advertising, and not to be treated differently for exercising those rights. Residents of California and of other states with comprehensive privacy laws, such as Colorado, Connecticut, Texas and Virginia, have rights of this kind.
Visitors in the EU and UK also have the rights of access, rectification, erasure, restriction, data portability and objection under the GDPR and UK GDPR, the right to withdraw consent at any time, and the right to complain to a supervisory authority, such as the UK Information Commissioner's Office or the authority in your EU country.
To make a request, email info@corenergylogistics.com. We verify requests before acting on them and reply within the time the applicable law sets, generally 45 days under US state laws and one month under the GDPR. We treat a Global Privacy Control signal as an opt-out request where state law requires it.
Children, changes and governing law
Our website and services are meant for businesses and are not directed at children under 16. We do not knowingly collect their information. If we change this policy, we post the new version here with a new date and tell portal users about material changes.
This policy is governed by the laws of the State of Wyoming, without affecting any mandatory rights you have under the law of the place where you live. Questions or complaints can go to info@corenergylogistics.com, to +1 252 633 7061, or by post to CorEnergy Logistics, 1400 Dell Range Blvd, Cheyenne, WY 82009, USA.
Questions about your data?
Email us to ask what we hold about you or to exercise any of your rights.


