Privacy notice

Who we are

Aalves Logistics is a courier and logistics business. This notice explains what personal data we collect, why, who we share it with, how long we keep it, and the rights you have under India's Digital Personal Data Protection Act 2023 and, where it applies, the EU General Data Protection Regulation.

What we collect

• Your name, mobile number, email address and postal address, when you book a shipment, receive one, or sign in to our customer portal.
• Identity documents required for international shipments: the document type, its number and a copy of it. Only the last four digits of a number are ever shown on screen.
• Your GST registration number, if you are a business.
• The shipments you send or receive, their contents as declared, their value, and the charges and payments on your account.
• Messages you send us through our website, and the messages we send you about your shipments.
• When you use the portal: the time of each sign-in and the address it came from, kept for security.

Why we use it

• To collect, carry, clear and deliver your shipment, and to tell you and the recipient where it is. This is the service you asked us for.
• To bill you and collect what is owed, and to keep the accounts and tax records the law requires.
• To meet customs and courier regulations, which require identity verification for international shipments.
• To answer your enquiries.
• To keep our systems secure.

We do not sell your data and we do not send marketing messages without your separate consent.

Who we share it with

• The carriers and partners who move your shipment, who receive only what is needed to deliver it.
• Service providers acting on our instructions: the tracking service, our email and messaging providers, our payment gateway, the hosting of our systems, and the AI assistant our staff use. Each is bound by a contract to use your data only for our purposes.
• Customs and government authorities where the law requires it.

When a shipment goes abroad, the recipient's details necessarily travel with it to the destination country.

How long we keep it

• Booking, invoice, receipt and ledger records: eight years, as required by GST and income-tax law.
• Identity documents: for as long as you remain a customer, and then for the period courier regulations require.
• Messages we sent you: six months, after which the content and your address are removed from our records.
• Website enquiries: one year after they are answered.
• Portal sign-in records: thirty days after they expire.

Details of our retention schedule are available from our grievance officer.

Your rights

• You may ask for a copy of the personal data we hold about you.
• You may ask us to correct or complete it.
• You may ask us to erase it. We will do so except for records the law requires us to keep, which we will tell you about.
• You may withdraw a consent you have given, with effect from then on.
• You may nominate a person to exercise these rights on your behalf if you are unable to.
• You may complain to the Data Protection Board of India if you are not satisfied with our response.

Portal customers can make these requests from the Privacy page of the portal; anyone can write to our grievance officer.

Security

Your data is stored on servers in India, transmitted over encrypted connections, and identity documents are encrypted at rest. Access by our staff is limited to what their role needs and is logged.

Children

Our services are for adults and businesses. We do not knowingly collect the data of children.

Changes to this notice

We will update this notice when our practices change and show the version and date at the top.