Privacy Policy

1. Scope

This Privacy Policy explains how Ship Sherpa Limited collects, uses, stores, analyses and shares personal data across the ShipSherpa platform ecosystem, including:

website and dashboard use
customer bookings
guest checkout
recipient notifications
driver onboarding
fleet onboarding
live GPS tracking
POD photos, signatures and timestamps
support channels
fraud scoring and anomaly detection
enterprise reporting
API workflows

2. Categories of Personal Data

We may process:

identity data
contact details
account credentials
shipment and recipient data
GPS and device data
route history
POD evidence
payment metadata
communications records
fraud indicators
compliance documents

3. Legal Bases

We rely on:

performance of contract
legitimate interests
legal obligation
consent where required
establishment, exercise or defence of legal claims

4. How We Use Data

We use personal data to:

create and manage accounts
allocate drivers and fleets
provide ETA and live tracking
create POD evidence
prevent fraud and spoofing
investigate complaints and claims
meet legal and insurance obligations
support enterprise reporting
improve route allocation and AI pricing logic

5. Sharing

We may share data with:

performing drivers and fleets
enterprise customers
payment providers
cloud and communications vendors
insurers
legal advisers
law enforcement
fraud and risk partners

6. Retention

Default retention periods:

booking and invoice records: 6 years
POD and tracking evidence: 24 months unless claim-sensitive
support tickets: 24 months
fraud flags: risk-based up to 6 years
onboarding compliance data: duration of relationship + 6 years

7. Rights

Users may request:

access
correction
deletion
portability
restriction
objection
complaint to the ICO

8. International Transfers

Where data leaves the UK, we use UK IDTA, UK Addendum or equivalent lawful safeguards.

9. Contact

Data protection queries should be directed to ShipSherpa's privacy contact address published on the website.