Privacy Policy
Last updated: 1 January 2025. This policy governs how ISHFAQ LOGISTICS LTD collects, processes, and protects personal data in accordance with UK GDPR and applicable international data protection regulations.
Data We Collect and Why
We collect only the personal data operationally necessary to process freight, prepare export and import documentation, and deliver the services you have contracted. This includes contact details, shipment routing information, and business identification data.
Data is collected directly from clients during onboarding, through our enquiry and booking forms, and via automated systems required for customs declarations and carrier communications. No data is collected beyond these operational requirements.
Categories of Personal Data
We may process: full name and business title; company name and registered address; email address and telephone number; shipment origin and destination details; customs reference numbers; and payment records where applicable.
Legal Basis for Processing
Processing is carried out on the basis of contractual necessity, compliance with legal obligations (including customs and trade regulations), and where applicable, legitimate interests in maintaining operational records and service delivery audit trails.
How We Share Your Data
ISHFAQ LOGISTICS LTD does not sell, rent, or trade personal data. Data is disclosed only to vetted logistics partners — including carriers, freight agents, and customs brokers — who are contractually bound to equivalent data protection standards.
Third-party disclosures are limited to what is strictly required to execute your shipment, satisfy regulatory authorities, or fulfil statutory reporting obligations. Each third party is assessed for compliance posture before engagement.
International Data Transfers
Where freight operations require data transfer outside the UK or EEA, we apply appropriate safeguards including standard contractual clauses or equivalent mechanisms recognised under UK GDPR. No cross-border transfer occurs without documented protection measures in place.
Data Retention
Personal data is retained for the duration of the contractual relationship and for a minimum of six years thereafter, in line with UK statutory record-keeping requirements for commercial transactions. Data no longer required is securely deleted.
Your Rights Under Data Protection Law
You have the right to access the personal data we hold about you, request corrections to inaccurate records, and request deletion where data is no longer necessary. These rights are exercisable at any time by contacting our operations team.
Additional rights include: restriction of processing pending a dispute; data portability in a machine-readable format; and objection to processing based on legitimate interests. We will respond to all verified requests within 30 days.
Complaints and Regulatory Authority
If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the United Kingdom or with the supervisory authority in your jurisdiction.
Cookies and Website Tracking
Our website uses strictly necessary cookies to function and, where consent is given, analytical cookies to measure performance. Full details of cookie categories, durations, and opt-out mechanisms are documented in our Cookie Policy.
To exercise any of your rights or to direct a data protection enquiry to our responsible officer, contact us at support@ishfaqlogistics.com. We are registered in England and Wales and operate under UK GDPR.