Legal

Privacy Policy

Last updated: April 2026

Kart Cargo is committed to protecting your personal information. This policy explains what data we collect, how we use it, and your rights.

1. What data we collect

Account data: Name, email address, phone number, and password (stored as a secure hash).

Shipment data: Sender and receiver details, addresses, declared weight, parcel contents, and shipping preferences.

Payment data: Payment method and amount. We do not store card details — payments are processed by Stripe.

Communication data: WhatsApp messages, contact form submissions, and email correspondence.

2. How we use your data

We use your data to process and track your shipments, communicate updates via WhatsApp and email, verify payments, comply with customs and legal obligations, and improve our services. We do not sell your data to third parties.

3. Data sharing

We share data with courier partners (for delivery), payment processors (Stripe), cloud storage (Supabase), and communication providers (Twilio for WhatsApp). We may share data with UK and Nigerian customs authorities as legally required.

4. Data retention

We retain shipment records for 7 years for legal compliance. Account data is retained while your account is active. You may request deletion subject to legal retention requirements.

5. Your rights (UK GDPR)

You have the right to access, correct, delete, and port your personal data. To exercise these rights, contact us via our contact page. We will respond within 30 days.

6. Security

We use encrypted connections (HTTPS), hashed passwords, and secure token-based authentication. No system is 100% secure and we cannot guarantee absolute security.

7. Cookies

We use only essential cookies for authentication. We do not use advertising or tracking cookies.

8. Contact

For privacy queries, visit our contact page.