Privacy Policy

Last updated: 6 May 2026

Placeholder content. The privacy policy below is a structural skeleton. A reviewed legal version must replace this text before the site goes live in any GDPR-applicable jurisdiction. Counsel should sign off on the final wording.

1. Who we are

ASL Shipping & Logistics (the "Service") is operated by Sanmol Software. Our registered address and a contact email for privacy queries should appear here once finalised.

2. What personal data we collect

Identity: name, business name, tax identification number (TIN).
Contact: email address(es), phone number(s), postal address(es).
Account: hashed password, login timestamps, IP address.
Shipments: consignee details, sender details, parcel descriptions.
Payments: card last-4 and tokenised references — we never store full card numbers.
Cookies: see the cookie notice below.

3. Why we use it (lawful basis)

To deliver the shipping and logistics service you ordered (contract).
To meet customs, tax and shipping-record legal obligations.
To detect fraud and abuse (legitimate interest).
For optional marketing emails — only with your consent and you can withdraw at any time.

4. How long we keep it

Account records: as long as the account is active, plus any retention period required by law. Shipping records: per customs and tax-record retention rules in the jurisdictions of dispatch and delivery. Email history: 24 months, then automatically purged.

5. Your rights

Under GDPR you can:

Access — request a copy of your personal data.
Export — download it in a machine-readable format via /gdpr/export.
Correct — update inaccurate fields from your account page.
Erasure — delete your account; some legally required shipping records will be anonymised rather than removed.
Object — opt out of marketing email at any time.
Lodge a complaint with your local data-protection authority.

6. Cookies

We set a small number of strictly necessary cookies (session, antiforgery) without consent because the site cannot function without them. Optional analytics or marketing cookies, if added later, will only be set after you accept them in the consent banner shown on first visit.

7. Contact

Questions about this notice or your data: privacy@asl.example — replace with the real address before launch.