Privacy Policy
Last updated: 04/06/2026 · Effective date: 21/05/2026
1. Data Controller
CE.D Global, Riga, Latvia ("CE.D", "we", "us", "our") is the data controller for any personal data processed in connection with this website and our driver recruitment services. For all data protection enquiries, please contact: info@ced-global.com
2. Scope
This Privacy Policy applies to personal data processed by CE.D Global in connection with: • This website (ced-global.com) and any demo requests submitted via the website • CE.D's managed driver recruitment service, including data relating to driver applicants, AI-assisted candidate screening, and transport-company clients
3. Driver Applicants
CE.D processes personal data of driver applicants in the course of providing its managed recruitment service to transport-company clients. Categories of data processed: • Name and WhatsApp contact details (phone number associated with the applicant's WhatsApp account) • Work history, routes driven, languages spoken, and employment preferences — as provided by the applicant in conversation • Licence class and professional certifications — as disclosed by the applicant • Availability and notice period How data is collected: Applicants initiate or respond to conversations via CE.D's WhatsApp Business account. Data is collected through AI-assisted and human-reviewed chat conversations in the applicant's preferred language. Lawful basis: Legitimate interests (Article 6(1)(f) GDPR) — matching applicants with suitable employment opportunities and fulfilling CE.D's recruitment mandate for clients. Where an applicant expresses interest in a specific vacancy, processing may also rely on pre-contractual steps (Article 6(1)(b) GDPR). Where data is stored: CE.D does not maintain a separate database of candidate data. All conversation data resides on Meta/WhatsApp servers in accordance with WhatsApp's data retention policies. CE.D retains access to conversation threads within its WhatsApp Business account. Retention: CE.D retains conversation access for as long as necessary for recruitment purposes, typically no longer than 3 months after the last interaction. To request deletion of your conversation data, contact: info@ced-global.com What CE.D shares with clients: CE.D shares only CE.D-authored candidate summaries with transport-company clients. No original WhatsApp conversation logs, raw CVs, or documents provided by the applicant are passed to clients.
4. AI Screening & Candidate Conversations
CE.D uses a custom-built AI system integrated with the WhatsApp Business Cloud API to conduct initial candidate screening conversations. How it works: • When a driver contacts CE.D via WhatsApp, the first interaction may be handled by CE.D's AI assistant, which conducts a structured conversation to gather information about the applicant's experience, preferences, and availability. • The AI operates in the applicant's preferred language. • All AI-screened conversations are reviewed by a CE.D human team member before any candidate is considered for shortlisting. No automated decision-making: CE.D does not make any solely automated decisions that produce legal or similarly significant effects on applicants. All shortlisting and rejection decisions involve human review, in accordance with Article 22 GDPR. EU AI Act — Article 50 disclosure: CE.D's AI assistant is required to inform users that they are interacting with an AI system at the start of the conversation. If you are speaking with the CE.D AI assistant, you will be notified at the outset. Data processed by the AI: The AI processes the same conversation data described in Section 3. No separate AI-specific data store is created.
5. WhatsApp Business & Meta as Data Processor
CE.D operates a WhatsApp Business account using the WhatsApp Business Cloud API, provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. When you communicate with CE.D via WhatsApp: • Your messages and associated metadata (phone number, timestamps, delivery status) are processed by Meta as a data processor on CE.D's behalf. • WhatsApp messages are end-to-end encrypted in transit. • Meta processes this data under a Data Processing Agreement with CE.D and in accordance with Meta's WhatsApp Business Terms of Service and Privacy Policy (whatsapp.com/legal). CE.D's use of the WhatsApp Business Cloud API may involve data transfer to Meta's infrastructure, which may be located outside the EU/EEA. Such transfers are covered by Standard Contractual Clauses between CE.D and Meta Platforms Ireland Ltd. To stop receiving messages from CE.D via WhatsApp, reply STOP or contact info@ced-global.com and CE.D will cease all further communication.
6. Transport-Company Clients
CE.D processes personal data of contact persons at transport-company clients in order to deliver its recruitment service. Categories of data processed: • Name and work email address • Job title and company name • Fleet size and route/hiring requirements (as provided during the demo call or subsequently) How data is collected: Via the demo request form on this website, during the demo call itself, and in subsequent email or written communication. Lawful basis: Performance of a contract or pre-contractual steps (Article 6(1)(b) GDPR), or legitimate interests where processing supports the ongoing service relationship (Article 6(1)(f) GDPR). Retention: Client contact data is retained for the duration of the engagement and for up to 3 years thereafter, unless a longer retention period is required by applicable law. Joint controllership over candidate data (Article 26 GDPR): When CE.D delivers a shortlist to a transport-company client, CE.D and that client become joint controllers under Article 26 GDPR for the personal data of the shortlisted candidates contained in that delivery. Respective responsibilities: • CE.D is responsible for: collecting candidate data via WhatsApp, AI-assisted and human-reviewed screening, preparing candidate summaries, and making a summary of this joint-controller arrangement available to candidates on request (Article 26(2) GDPR). • The client is responsible for: evaluating shortlisted candidates, conducting interviews, making hiring or rejection decisions, any further processing of candidate data beyond what CE.D provided, and deleting candidate data received from CE.D once the hiring process concludes. Each party establishes its own lawful basis for its respective stage of processing. CE.D's lawful basis is legitimate interests (Article 6(1)(f) GDPR). Clients typically rely on pre-contractual steps (Article 6(1)(b) GDPR) or legitimate interests for their own stage. Point of contact for candidates: CE.D is the designated first point of contact for data-subject rights requests from driver applicants (Article 26(3) GDPR). CE.D will forward any request that relates to the client's processing stage to the relevant client within 5 business days. Contact: info@ced-global.com Clients agree not to share CE.D-provided candidate summaries with any third party without CE.D's prior written consent.
7. Personal Data We Process (Website)
We process personal data in the following situations in connection with this website: • Demo request form: When you submit a demo request, we collect your name, email address, company name, fleet size, and any optional message you include. This data is used solely to respond to your enquiry and assess your needs. • Newsletter subscriptions: If you subscribe to the CE.D newsletter, we collect your email address, which is stored in our database (Supabase, EU region). You may withdraw your consent at any time by unsubscribing via the link in any newsletter email or by emailing info@ced-global.com. • Anonymous analytics: We use consent-gated analytics tools to collect anonymised page-view, session, and referral data. No personal identifiers are shared across sites. See Section 11A. • Email enquiries: If you contact us by email at info@ced-global.com, we process your email address and the content of your message in order to respond to your enquiry.
8. Purpose and Legal Basis
• Analytics — to understand how visitors find and use the website. Legal basis: legitimate interest (Article 6(1)(f) GDPR). Data is anonymised; no individual is identified. • Newsletter — to send marketing communications to subscribers. Legal basis: consent (Article 6(1)(a) GDPR). You may withdraw consent at any time by unsubscribing. • Email correspondence — to respond to your enquiry. Legal basis: legitimate interest or, where applicable, steps taken prior to entering a contract (Article 6(1)(b) GDPR).
9. Data Retention
• Analytics data: retained by analytics providers according to their own policies (anonymised; no personal data stored by CE.D). • Demo request submissions and email correspondence: retained for as long as reasonably necessary to handle the enquiry and for up to 3 years thereafter, unless a longer retention period is required by law. • Newsletter subscriptions: retained until you withdraw consent (unsubscribe).
10. Data Sharing
We do not sell or share personal data with third parties for their own purposes. Data may be accessed by authorised CE.D personnel and contracted technical service providers acting under our instructions.
11. Cookies and Tracking
The website does not use marketing or tracking cookies. We use strictly necessary technical cookies and consent-gated analytics tools (including session recording with all inputs masked). See our Cookie Policy for full details of each cookie and how to manage your preferences.
11A. Technical Service Providers
• Vercel Inc. — website hosting and anonymised analytics. Data processed under Standard Contractual Clauses. Privacy policy: vercel.com/legal/privacy-policy • Supabase Inc. — database and authentication for the blog admin panel and newsletter subscriptions. EU region hosting. Privacy policy: supabase.com/privacy • Resend Inc. — email delivery service used to forward demo request submissions to the CE.D team. Data processed under Standard Contractual Clauses. Privacy policy: resend.com/legal/privacy-policy • PostHog Inc. (EU instance, eu.i.posthog.com) — page analytics and session recording; all form inputs are masked and no personal data is captured in recordings. Analytics-category consent required via the cookie banner. Privacy policy: posthog.com/privacy • Ahrefs Ltd. — SEO and referral-source analytics. Analytics-category consent required via the cookie banner. Privacy policy: ahrefs.com/privacy-policy • CookieYes Ltd. — cookie consent management platform; stores your consent preferences. Privacy policy: cookieyes.com/privacy-policy
12. Your Rights
Under the GDPR you have the right to: • Access any personal data we hold about you • Request correction of inaccurate data • Request deletion of your data • Object to processing based on legitimate interest • Lodge a complaint with a supervisory authority To exercise your rights, contact: info@ced-global.com You may also lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija — DVI), Elijas iela 17, Riga LV-1050, at dvi.gov.lv.
13. Security
We implement appropriate technical and organisational measures to protect data, including EU-based hosting, access control, and data minimisation practices.
14. Changes to This Policy
This Privacy Policy may be updated to reflect operational or legal changes. The "Last updated" date at the top of this page will reflect any changes.