Last updated: 3 November 2026
This Privacy Policy explains how ChangSha CangBiChen Trading Co., Ltd. collects, uses, stores and protects personal information when you visit the website at https://www.bluedusttrade.surf, contact the mist ledger desk, or use any of the services described on this site. The website is operated under the developer name BlueDust Trade, which is the working name the desk uses for its systems design practice. BlueDust Trade is a trade name and not a separate legal person, and the controller of your personal data is ChangSha CangBiChen Trading Co., Ltd. Throughout this policy, the terms we, us and our refer to that company, and the terms you and your refer to the person using the site or the services. We keep this policy in plain language on purpose, because a policy nobody can read is not a policy at all.
This policy applies to personal information that we process in connection with the website, the contact forms, email correspondence, telephone calls, written notes and the integrated systems work that the desk performs for clients. It does not apply to websites that we do not operate, to third party platforms that have their own privacy notices, or to information that you share with us in a context that is clearly covered by a separate written agreement.
The desk works with freight and logistics information as part of its systems design practice. Where a client shares operational records that contain the personal data of that client employees or customers, the client remains the primary controller of that data and we act as a processor on the client written instruction. In such cases the terms of the relevant service agreement govern the relationship, and this policy governs only the personal information that we collect about you directly.
The controller responsible for your personal data is ChangSha CangBiChen Trading Co., Ltd., a company registered in China with its registered address at No 100 Wangjia Group, Jianshe Village, Yanxi Town, Liuyang City, ChangSha - 410000, China (CN). The desk can be reached by email at logistics@bluedusttrade.surf and by telephone at +14097520265.
We do not operate a formal data protection officer role at this time. Instead, a senior keeper at the desk is responsible for overseeing privacy matters, responding to requests and keeping this policy current. Any question about this policy, any request to exercise a right, and any concern about how your information is handled should be sent to the email address above so that it reaches that keeper directly.
We try to collect as little as we can while still running a dependable desk. The categories below describe what we may collect, depending on how you interact with us.
We do not intentionally collect special categories of personal data such as health information, religious beliefs or biometric data. If such information reaches us by accident, we will minimise it where possible and handle it with the care this policy describes.
Most of the information we hold comes directly from you, either because you wrote to the desk, filled in a form, spoke with a keeper or signed a service agreement. Some information comes from the ordinary operation of the website, such as the technical data a browser sends when it loads a page. A smaller amount comes from business introductions and from public professional sources.
We do not buy personal data from data brokers and we do not build profiles of people who are not our clients. If we ever need information about someone who has not contacted us, we ask the person who introduced them to confirm that sharing is appropriate before we store anything.
We use personal information for a limited set of purposes that are directly connected to the desk and its written practice. Those purposes are:
We will not use your information for a purpose that is unrelated to the reason you gave it to us without first telling you and, where the law requires it, obtaining your consent. We do not sell your personal information to anyone, and we do not rent contact lists.
Where data protection law requires a legal basis, we rely on the following grounds. We rely on your consent when you ask to receive updates, when you agree to a specific use that we describe at the moment of collection, or when you accept optional cookies. We rely on the performance of a contract when we need to deliver services you have engaged, exchange correspondence about a live project, or settle an invoice. We rely on our legitimate interests when we secure the website, keep the desk working and respond to enquiries that may become engagements, provided that those interests are not outweighed by your rights and freedoms. We rely on legal obligation when we must keep records, respond to a lawful request or meet a tax or accounting duty.
Where we rely on legitimate interests, you have the right to object, and we will consider your objection carefully. Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing that happened before the withdrawal.
Like most small professional practices, the desk depends on a handful of service providers. These providers handle email delivery, website hosting, domain services, scheduling and accounting. They are chosen for reliability and for a privacy posture that matches our own. Each provider receives only the information needed to perform the task and is bound by a written agreement to keep it confidential.
We keep a short internal register of these providers so that we can answer questions about where your data travels and can remove a provider quickly if it ever fails to meet our standard. If you would like to know which categories of provider are involved in a particular engagement, write to the desk and a keeper will explain.
The desk is based in ChangSha, China, and some of the providers we use operate in other regions. As a result, your information may be transferred to and processed in a country other than the one where you live. When that happens, we take steps to make sure the information remains protected, for example by relying on a provider contractual commitment, on a recognised transfer mechanism, or on a legal basis that the applicable law accepts.
Transfers are limited to what the work genuinely requires. We do not move personal data abroad for convenience alone, and where a provider offers a regional hosting choice we prefer the option that keeps the data closest to the people it belongs to.
We keep personal information only for as long as we need it for the purpose we collected it. The general periods are:
When a retention period ends we delete the information or render it unrecognisable. Where deletion is not immediately possible because of a backup cycle, we isolate the data and let the cycle complete before confirming deletion.
Security at the desk begins with restraint: we collect little, we store it in few places, and we keep a written record of who can reach it. In practice this means access is limited to keepers who need it for a specific task, devices are protected with strong authentication, and sensitive correspondence is exchanged over encrypted connections wherever the recipient supports them.
We also plan for failure. If a security incident occurs that is likely to affect your rights, we will investigate promptly, contain the issue, restore normal service and notify the affected people and the relevant authority where the law requires it. No method of storage or transmission is completely secure, and we do not promise absolute security. We do promise to take reasonable and consistent measures, to review them regularly, and to tell you the truth about what happened if something goes wrong.
Depending on where you live, you may have the following rights in relation to your personal information. We honour these rights for everyone who contacts us, regardless of geography, because the practice is the same everywhere.
To exercise a right, write to logistics@bluedusttrade.surf and describe your request. We may ask for enough information to confirm your identity before we act, and we will respond within the period the applicable law sets, usually within one month. Exercising a right is free, and we will not treat you differently for doing so.
An access request lets you see what we hold. A correction request lets you set the record straight. A deletion request lets you ask us to remove information that we no longer need. We handle each request with the same care, and we keep a short note of the request so that we can show that we acted.
Some information cannot be deleted immediately, for example a record we are legally required to keep for a tax period or a note that is part of an open dispute. In those cases we will explain the reason, restrict the information so that it is used only for the required purpose, and delete it as soon as the obligation ends. We will always tell you what we did and why.
If you ask us to delete information that a client has shared with us in a processor role, we will forward your request to that client, because the client is the controller of that data and is best placed to act.
The desk provides business services and is not directed at children. We do not knowingly collect personal information from anyone under the age of sixteen. If a child has sent us information and a parent or guardian asks us to remove it, we will do so promptly and without argument, once we are satisfied that the request comes from someone entitled to make it.
If you believe that a child has shared personal information with the desk, write to the email address in this policy and we will investigate quickly. Protecting young people matters more to us than the small amount of data involved.
We send marketing messages only to people who have asked to receive them. The updates are occasional and usually describe a new written practice, a change to the service ledger or a seasonal note from the desk. Every message includes a simple way to unsubscribe, and we act on unsubscribe requests straight away.
We do not buy mailing lists and we do not add people to a list merely because they wrote to us with a question. Transactional messages, such as a reply to an enquiry or an invoice, are not marketing and do not rely on marketing consent.
Our pages may link to websites that we do not operate. Those websites have their own privacy policies, and we do not control how they collect or use information. We encourage you to read the policy of any site you visit before sharing personal information with it. A link from our site is not an endorsement of the privacy practices of the destination.
If you notice a link that you believe is unsafe or misleading, tell the desk and a keeper will review it.
We review this policy at least once a year and whenever the desk changes how it handles information. When we make a change, we update the date at the top of this page. If the change is significant, we will add a short notice on the homepage and, where we have an email relationship with you, send a direct message so that the change does not pass unnoticed.
Continued use of the website after a change takes effect means you accept the updated policy. If you do not accept the updated policy, you are free to stop using the site and to ask us to delete the personal information we hold about you, subject to the legal retention duties described above.
Privacy questions are welcome and are read by a keeper rather than a machine. Use any of the details below and we will route your message to the person responsible for privacy at the desk.
Company: ChangSha CangBiChen Trading Co., Ltd.
Developer and trade name: BlueDust Trade
Address: No 100 Wangjia Group, Jianshe Village, Yanxi Town, Liuyang City, ChangSha - 410000, China (CN)
Email: logistics@bluedusttrade.surf
Phone: +14097520265
If you are unhappy with how we have handled your information or your request, tell us first. Write to the email address above with the word privacy in the subject line and a description of the issue. We will acknowledge the complaint, investigate it honestly and reply with our findings and any remedy within a reasonable period, usually within thirty days.
If our reply does not resolve the matter, you have the right to complain to the data protection authority in your country or region. We will cooperate fully with any such authority and will provide the records it asks for. You can also raise the matter with a court where the law allows it. Nothing in this policy removes or limits any right you have under applicable law.
This policy forms part of the public face of the mist ledger desk, and it is written in the same plain spirit as every ship note and consignment letter we produce. If a sentence here is unclear, treat that as a fault on our side, write to us, and we will explain it in ordinary words.
This policy is published by ChangSha CangBiChen Trading Co., Ltd., which operates the desk under the BlueDust Trade name. The developer name BlueDust Trade is used throughout our website and correspondence to identify the systems design practice behind the mist ledger desk.