GDPR Compliance

Last updated: April 12, 2026

Data Controller

Company: Michai Media / LoadLadder

Location: St. Louis, MO, United States

Contact: privacy@loadladder.com

Legal Basis for Processing

We process personal data under the following legal bases as defined by the GDPR:

Contract Performance
Processing necessary to provide you with LoadLadder services (account management, load matching, payments).
Legitimate Interest
Processing for platform improvement, analytics, fraud prevention, and security. We balance our interests against your rights.
Consent
Marketing communications, non-essential cookies, and optional data processing. You can withdraw consent at any time.
Legal Obligation
Processing required by law (tax records, regulatory compliance, fraud reporting).

Your Data Subject Rights

Right of Access

You can request a copy of all personal data we hold about you. We will provide this in a structured, machine-readable format within 30 days.

Right to Rectification

You can request correction of any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You can request deletion of your personal data. We will comply unless we have a legal obligation to retain it.

Right to Data Portability

You can request your data in a portable format (JSON/CSV) to transfer to another service.

Right to Restriction

You can request that we restrict processing of your data while a complaint or dispute is resolved.

Right to Object

You can object to processing based on legitimate interests, including profiling and direct marketing.

Data Processing Activities

Activity	Data	Legal Basis	Retention
Account management	Name, email, phone, company	Contract performance	Duration of account + 30 days
Load matching & AI plans	Location, preferences, load history	Contract performance	Duration of account
Payment processing	Billing info (via Stripe)	Contract performance	7 years (tax compliance)
Platform analytics	Usage data, page views	Legitimate interest	1 year
Email communications	Email address, preferences	Consent / Legitimate interest	Until unsubscribe
Carrier verification	MC/DOT numbers, documents	Legal obligation / Contract	Duration of account + 3 years

International Data Transfers

LoadLadder is based in the United States. If you access our platform from the European Economic Area (EEA) or the United Kingdom, your personal data will be transferred to the US. We ensure appropriate safeguards are in place:

Standard Contractual Clauses (SCCs) approved by the European Commission
Data Processing Agreements (DPAs) with all sub-processors
Encryption in transit and at rest for all transferred data
Access controls limiting data access to authorized personnel only

Data Protection Officer

Name: Josh Black

Email: dpo@loadladder.com

Organization: Michai Media

How to Submit a GDPR Request

To exercise any of your data subject rights, you can:

1. Email privacy@loadladder.com with the subject line “GDPR Request”

2. Include your full name and the email address associated with your LoadLadder account

3. Specify which right you wish to exercise

4. We will verify your identity and respond within 30 days

If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.

Cookie Consent

For details on how we use cookies and how to manage your cookie preferences, please see our Cookie Policy.