Privacy Policy
Your privacy is our priority. This policy outlines how we collect, use, and protect your personal information in compliance with Indian regulations including the DPDP Act 2023.
Information We Collect
To provide exceptional logistics services, we collect:
- Full name, contact details, and identification
- Complete pickup and delivery addresses
- Shipment specifications and contents
- Secure payment information
- Communication and support records
- Technical data for service improvement
How We Use Your Data
Your information enables us to deliver superior service:
- Real-time shipment processing and tracking
- Automated delivery updates via multiple channels
- Secure payment processing and GST invoicing
- Service quality enhancement through analytics
- 24/7 dedicated customer support
- Legal compliance and regulatory requirements
Data Protection & Security
We implement robust security measures:
- 256-bit SSL encryption for all data transfers
- Secure cloud infrastructure with regular audits
- Role-based access control for employees
- Regular security assessments and penetration testing
- Data anonymization for analytical purposes
- Incident response and breach notification protocols
Third-Party Data Sharing
Data sharing is limited to essential service providers:
- Verified delivery partners for shipment execution
- Certified payment gateways (PCI DSS compliant)
- Customs and regulatory authorities for international shipments
- Legal entities when required by Indian law
- Analytics providers (with anonymized data only)
- Customer support and communication platforms
Your Legal Rights (DPDP Act 2023)
Under Indian privacy laws, you have the right to:
- Access your personal data in a structured format
- Request correction of inaccurate information
- Complete data erasure (right to be forgotten)
- Withdraw consent for data processing
- Data portability to other service providers
- Lodge complaints with the Data Protection Board
Data Retention Periods
We retain data only for legitimate business needs:
- Active shipment records: 2 years post-delivery
- Customer account data: Until account deletion
- Financial transaction records: 7 years (Income Tax Act)
- Legal compliance documents: As per statutory requirements
- Marketing consent records: Until withdrawal
- Inactive customer data: Auto-deleted after 24 months
Data Protection Office
Our dedicated Data Protection Officer ensures compliance and addresses your privacy concerns promptly.
Registered Office: Mumbai, Maharashtra, India
Version 2.1 • Effective February 2, 2026
This policy is reviewed and updated annually
© 2026 KVA Logistics Pvt. Ltd.
All rights reserved. GSTIN: 27AAECK1234M1Z5
