Privacy Policy

1. Who we are#

[LEGAL ENTITY NAME], trading as SHIP2YOU IMPEX, Pune, Maharashtra 411052, India (“Ship2You”, “we”, “us”) is the Data Fiduciary for personal data collected through www.ship2youglobal.com and through our email, phone and WhatsApp channels. This policy is our notice under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (together, “DPDP law”), and also under the Information Technology Act, 2000 and its rules.

2. Personal data we collect#

We do not knowingly collect data from anyone under 18, and we do not ask for sensitive data such as health, religion or biometric information.

3. Why we use it#

We use personal data only for these purposes:

1. To reply to your enquiry and prepare quotations (based on your consent).
2. To negotiate, perform and document Sales Contracts, including shipping, customs, inspection, insurance and payment (necessary for the contract you asked for).
3. To comply with Indian law, including customs, GST, foreign exchange (FEMA), Foreign Trade Policy, SCOMET export controls, sanctions screening and anti-money-laundering checks (legal obligation).
4. To prevent fraud, protect our Website and enforce our Terms (legitimate use permitted by law).
5. To send you product updates or market information, only if you tick the optional marketing box. You can withdraw this at any time.
6. To understand how visitors use the Website, only if you accept analytics cookies.

We will not use your data for any new purpose without telling you and, where needed, asking for fresh consent.

4. Who we share it with#

We never sell or rent your personal data. We share it only as needed with: freight forwarders, shipping lines, airlines and customs brokers (CHAs); inspection and certification agencies; our suppliers and manufacturers in India, only the details needed to fulfil your order; banks, payment processors and export credit insurers (such as ECGC); government authorities including Customs, DGFT, GST and RBI-regulated banks, and courts or regulators when the law requires; and our IT service providers, such as website hosting (Vercel), email (Zoho Mail), form handling (Google Apps Script and Google Sheets) and WhatsApp (Meta). Each service provider processes data only on our instructions and under contract.

5. International transfers#

Because we trade internationally, your data may be sent to, or stored in, countries outside India, including the country of your company, the destination country of your shipment, and countries where our service providers run servers. We transfer data only as permitted by DPDP law and will not transfer it to any country the Government of India restricts. If you are in the European Union or United Kingdom, see clause 11.

6. How long we keep it#

7. Your rights#

Under DPDP law you have the right to: obtain a summary of the personal data we hold about you and how we use it; have inaccurate or incomplete data corrected or updated; have data erased when it is no longer needed for its purpose or the law (we may keep records the law requires); withdraw consent at any time, as easily as you gave it (this does not affect processing already done); have your grievances redressed by our Grievance Officer; and nominate another person to exercise your rights if you die or become incapacitated.

To exercise any right, email [GRIEVANCE OFFICER EMAIL] with the subject “Data request”. We may ask you to confirm your identity. We will respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

8. Cookies#

We use essential cookies to make the Website work and remember your cookie choice. With your consent, we also use analytics cookies ([ANALYTICS TOOL, e.g. Google Analytics]) to understand traffic. You can change your choice at any time through “Cookie Settings” in the footer, or by clearing cookies in your browser.

9. Security#

We protect personal data with reasonable security measures, including HTTPS encryption, access limited to staff who need it, password-protected and two-factor-secured accounts, regular backups and logging of access. No system is completely secure. If a personal data breach occurs, we will notify the Data Protection Board of India and affected persons as DPDP law requires, including the initial report within 72 hours where applicable.

10. Communications and fraud warning#

We will never ask you for passwords, OTPs or card PINs. Bank details for payment appear only on our signed proforma invoice. Report any suspicious message claiming to be from us to info@ship2youglobal.com.

11. Visitors from the EU, UK and other regions#

If the EU or UK General Data Protection Regulation applies to you, our legal bases are consent, performance of a contract, legal obligation and legitimate interests (responding to business enquiries and preventing fraud). You also have the rights to object, to restrict processing and to data portability, and to complain to your local supervisory authority. Transfers from the EU or UK to India are made using the European Commission’s Standard Contractual Clauses or another lawful mechanism.

12. Changes to this policy#

We may update this policy. The new version will be posted here with a new “Last updated” date. If we change the purposes for which we use your data, we will tell you and seek fresh consent where required.

13. Grievance Officer and contact#

Name: [GRIEVANCE OFFICER NAME] · Designation: [DESIGNATION] · Email: [GRIEVANCE OFFICER EMAIL] · Phone: +91 88302 82050 · Address: S No 1/11 Plot No 5,6; S No 1/23 Plot No 3,4, CTS No 694, Pinac Colony, Karve Nagar, Hingne Budrukh, Pune, Maharashtra 411052, India · Hours: 8:00 AM – 8:00 PM IST.