Privacy Policy

This notice explains how [PLACEHOLDER: registered company name] (“ShippitIn”, “we”, “us”) collects and processes personal data when you use our freight booking platform. For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), ShippitIn is the Data Fiduciary that determines the purpose and means of processing your personal data.

• Account and contact data: name, business name, email, phone number, and role.
• Booking and shipment data: consignor/consignee details, cargo descriptions, routes, and documents you upload.
• Compliance and tax data: GSTIN, e-way bill details, and statutory documents required to move freight.
• Payment data: transaction records. Card details are captured on our payment processor’s hosted checkout and are never stored by us.
• Technical and usage data: device and log information, and — only with your consent — analytics about how you use the site (see our Cookie Policy).

We process personal data to create and manage your account; to provide quotes, bookings, payments, tracking, and compliance documentation; to communicate with you about your bookings; to comply with legal and regulatory obligations; and to secure and improve the Platform.

Our lawful bases under the DPDP Act are your consent (which you may withdraw at any time), the performance of the services you request, and our compliance with applicable law (“certain legitimate uses”). Where we rely on consent, refusing or withdrawing it will not affect processing already carried out.

Under the DPDP Act you have the right to:

• access a summary of the personal data we process about you;
• correction, completion, or updating of inaccurate data;
• erasure of your personal data, subject to legal retention;
• nominate another individual to exercise your rights in the event of death or incapacity;
• withdraw consent at any time;
• grievance redressal, and to escalate to the Data Protection Board of India if unresolved.

To exercise any of these rights, contact our Grievance Officer (below). We will respond within the timelines required by law. Self-service data export and account deletion are being rolled out; until then these requests are handled by our Grievance Officer.

We share personal data with the carriers, terminals, customs house agents, and transporters needed to fulfil your booking; with payment processors and other service providers acting as Data Processors on our instructions; and with authorities where required by law. We do not sell your personal data.

We keep personal data only for as long as needed for the purposes above and to meet legal, tax, and regulatory retention requirements, after which it is deleted or anonymised.

We apply technical and organisational safeguards including encryption in transit, field-level encryption of sensitive personal data, role-based access controls, and audited administrative access. No system is perfectly secure, but we work to protect your data and to meet our obligations under the DPDP Act.

In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals as required by the DPDP Act and its rules.

The Platform is intended for business users and is not directed at children. We do not knowingly process the personal data of individuals under 18 without verifiable parental or guardian consent as required by the DPDP Act.

In accordance with the DPDP Act, you may contact our Grievance Officer for any questions or complaints about how your personal data is handled:

We may update this Privacy Policy from time to time. Material changes will be notified through the Platform or by email, and the “last updated” date above will change.