Trust & Security
How we handle your data.
This page is maintained by GRP Truckloads to answer common security and privacy questions about the GRP Truckloads website. It describes controls we have in place today — it is not a third-party certification or audit.
What we collect
We collect only what you submit through our forms: your name, email address, phone number, and the details of the load or quote you're interested in (origin / destination ZIP, mode, pallet count, liftgate need). We do not ask for payment details on this site.
ZIP-to-ZIP distance lookups are sent to a public US ZIP database (Zippopotam.us) to find coordinates. The map on the freight calculator is rendered with OpenStreetMap tiles. Neither service receives your name, email, or phone number.
How submissions are stored
Quote and order submissions are stored in our backend database hosted on Lovable Cloud. Access to those records is restricted: by default, no anonymous or signed-in visitor can read them. Only accounts we have explicitly designated as administrators can view submitted leads.
Form submissions are validated server-side before they are accepted — empty names, malformed email addresses, and out-of-range values are rejected at the database layer, not just in the browser.
Platform controls
The site is hosted by Lovable and the backend runs on Lovable Cloud. Data is transmitted over HTTPS. Database access is governed by row-level security policies — the database refuses queries that don't match an explicit allow rule.
Mentioning these platform features is not a claim of independent certification (SOC 2, ISO 27001, HIPAA, PCI, GDPR, etc.). If you need contractual security commitments for your organization, contact us directly and we'll discuss what we can sign.
Subprocessors we rely on
- Lovable / Lovable Cloud — application hosting and database
- Zippopotam.us — public US ZIP code geocoding (ZIP only, no PII)
- OpenStreetMap — map tiles for the freight calculator (no PII)
Retention and deletion
We keep submitted quote and order records for as long as we may need them to follow up on your shipment or our business relationship. If you'd like your record removed, email us using the contact below and we'll delete it.
Reporting a security concern
If you believe you've found a security issue with this site or want to ask a question about how your data is handled, email jamie@grptruckloads.com and we'll respond as quickly as we can.
Shared responsibility: Lovable provides the hosting, database, and platform-level security controls described above. GRP Truckloads is responsible for how we configure those controls, who we grant admin access to, and how we handle your information once we receive it. You are responsible for the accuracy of what you submit and for keeping any credentials you use to reach us secure.