Privacy Policy

1. Who we are

G-Star Express is a global logistics and transportation company headquartered at Noose Lane, Willenhall, WV13 3AP, England, United Kingdom. In this policy, “G-Star Express”, “we”, “us”, and “our” refer to G-Star Express and its affiliated entities that provide freight forwarding, customs clearance, warehousing, packaging, and last-mile delivery services.

This Privacy Policy explains how we collect, use, share, and protect personal information when you use our website, mobile tools, tracking portal, customer account, or any of our logistics services. It applies to shippers, consignees, account holders, website visitors, job applicants, and business contacts.

2. Information we collect

We collect information that you provide directly, information generated automatically when you use our services, and information received from third parties such as customs authorities, agents, and partners.

2.1 Information you provide

• Identity and contact data: name, company name, job title, email address, phone number, billing and shipping addresses.
• Shipment data: cargo descriptions, declared value, weight and dimensions, hazardous or fragile goods classification, pickup and delivery instructions, customs documentation.
• Account data: login credentials, payment details, tax or VAT registration numbers, credit terms, and billing preferences.
• Communications: messages sent through our contact forms, WhatsApp widget, email, or phone, including attachments and call recordings where permitted by law.
• Recruitment data: CVs, qualifications, references, and interview notes when you apply for a role.

2.2 Information generated automatically

• Tracking data: shipment milestones, scan events, GPS location of vehicles where applicable, delivery signatures and proof-of-delivery photos.
• Device and usage data: IP address, browser type, operating system, pages visited, referring URL, and session duration.
• Cookies and similar technologies: as described in section 10.

2.3 Information from third parties

• Customs and border authorities may share clearance statuses, inspection outcomes, and duty assessments.
• Our overseas agents and carrier partners share delivery status and exception reports.
• Credit reference agencies and fraud prevention providers may share account risk information for business accounts.

3. How we use your information

We use personal information for the following purposes:

• Service delivery: booking, collecting, transporting, clearing, and delivering your shipments; generating tracking updates; providing customer support.
• Billing and payments: issuing invoices, processing payments, managing credit terms, and recovering debts.
• Compliance: meeting customs, export control, sanctions screening, anti-money laundering, and tax obligations.
• Safety and security: screening dangerous goods, protecting our warehouses and vehicles, investigating losses, and preventing fraud.
• Service improvement: analysing usage patterns, measuring on-time performance, and developing new features or service routes.
• Marketing: sending newsletters, service updates, and promotional offers where you have consented or where permitted by law. You can opt out at any time.
• Recruitment: assessing job applications and managing the hiring process.

4. Legal basis for processing

Where data protection laws such as the GDPR apply, we rely on the following legal bases:

• Contract: processing necessary to perform the logistics services you have requested.
• Legal obligation: processing required for customs, tax, sanctions, and anti-money laundering compliance.
• Legitimate interests: improving our services, preventing fraud, securing our facilities, and communicating with business contacts, balanced against your rights.
• Consent: for optional marketing communications and certain cookies. You may withdraw consent at any time.

5. Sharing and disclosure

We do not sell your personal information. We share it only as necessary to deliver our services and meet legal obligations, including with:

• Carriers and agents: airlines, ocean carriers, road hauliers, customs brokers, and overseas agents who handle your shipment.
• Customs and regulators: border authorities, tax authorities, and other regulators where required by law.
• Service providers: IT hosting, payment processing, customer support platforms, and analytics providers acting under written contracts and confidentiality obligations.
• Professional advisers: auditors, insurers, and lawyers where necessary.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to appropriate safeguards.

6. International transfers

Because logistics is inherently cross-border, your personal information may be transferred to and processed in countries other than your own. When we transfer personal data out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, or the UK International Data Transfer Addendum, together with supplementary technical and organisational measures where required.

If you would like more information about the safeguards we use, please contact us using the details in section 13.

7. Data retention

We retain personal information only as long as necessary to fulfil the purposes described in this policy, including satisfying legal, accounting, and reporting obligations. Typical retention periods are:

• Shipment and customs records: up to 7 years after the shipment date, in line with customs and tax requirements.
• Billing and payment records: up to 7 years after the end of the financial year.
• Customer account data: for the life of the account plus 3 years after closure, unless a longer period is required.
• Marketing preferences: until you unsubscribe, plus a short suppression period to honour your request.
• Recruitment data: up to 12 months after the hiring decision, unless you ask us to keep it longer.

8. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorised access, loss, misuse, or alteration. These include:

• Encryption of data in transit using TLS and of sensitive data at rest.
• Role-based access controls and multi-factor authentication for staff systems.
• Regular security assessments, penetration testing, and staff awareness training.
• Physical security controls at warehouses, data centres, and offices.
• Incident response procedures to detect, investigate, and notify breaches where required by law.

No method of transmission or storage is completely secure. If you suspect a security issue, please contact us immediately using the details in section 13.

9. Your rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you.
• Correction: ask us to correct inaccurate or incomplete information.
• Deletion: ask us to delete your information where we no longer have a lawful reason to keep it.
• Restriction: ask us to limit how we process your information.
• Objection: object to processing based on legitimate interests, and to direct marketing at any time.
• Portability: request a machine-readable copy of information you provided to us.
• Withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
• Complaint: lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us using the details in section 13. We will respond within the time required by applicable law, typically one month. We may ask you to verify your identity before acting on a request.

10. Cookies and tracking

Our website uses cookies and similar technologies to operate the site, remember your preferences, understand how visitors use our pages, and measure the effectiveness of our marketing. Cookies fall into the following categories:

• Strictly necessary: required for the website to function, such as session management and security. These cannot be disabled.
• Performance and analytics: help us understand how visitors interact with our site. These are set only with your consent where required.
• Functional: remember your preferences, such as language and region.
• Marketing: used to deliver relevant advertising and measure campaign performance. Set only with your consent.

You can manage cookies through your browser settings. Blocking certain cookies may affect your experience on our site. Where required by law, we present a cookie consent banner on your first visit.

11. Children’s privacy

Our services are designed for businesses and adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, or legal requirements. When we make material changes, we will post the updated policy on this page and, where appropriate, notify you by email or through your account portal. The “Last updated” date at the top of this page indicates when the policy was last revised.

13. Contact us

If you have questions about this Privacy Policy, wish to exercise your rights, or have a concern about how we handle your personal information, please contact our Data Protection Team:

• Email: info@gstarexpress.com
• Phone: +985-258-263
• Post: G-Star Express, Data Protection Team, Noose Lane, Willenhall, WV13 3AP, England, United Kingdom

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.