Privacy Policy

SwiftTrack Private Delivery Company is a private delivery company registered in Dubai, United Arab Emirates. In this policy, "we", "us" and "SwiftTrack" mean that company, and "you" means anyone whose personal information we handle, whether you send a shipment, receive one or simply contact us.

We are the controller of the personal information described here. Where we act only on the instructions of a business customer, for example handling recipient details supplied under a corporate account, that customer is the controller and we act as their processor.

Questions about this policy go to privacy@swifttrack.example.

We collect only what is needed to move a shipment and answer questions about it.

• Shipment details. Sender and recipient names, addresses, email addresses and phone numbers, plus a description of the contents, declared value, weight and dimensions.
• Operational records. Scan events with timestamps and locations, the facility and courier involved, internal handling notes, and any exception raised during transit.
• Contact records. Messages you send us through the contact form, by email or by phone, and our replies.
• Delivery feedback. If you rate a delivery, the rating and any comment you write.
• Limited technical data. To protect the tracking lookup and the contact form from abuse, we store a one way hash of the network address a request came from. We do not store the address itself, and the hash cannot be reversed back into it.

We do not use advertising cookies, we do not run third party analytics or tracking scripts, and we do not build behavioural profiles. The only cookies this site sets are the session cookies required for SwiftTrack staff to sign in to the operations area.

Your information is used for these purposes and no others:

• Collecting, transporting, clearing and delivering shipments.
• Producing the tracking record and making it available to whoever holds the number.
• Preparing customs and export documentation required by law.
• Answering enquiries, investigating problems and handling claims.
• Measuring our own service performance, such as how often deliveries arrive by the estimated date.
• Preventing fraud and abuse of our public endpoints.
• Meeting legal, tax and regulatory obligations.

We do not sell personal information, we do not rent contact lists, and we do not share your details with anyone for their own marketing.

This is the part of the policy most worth reading carefully, because it is the one that surprises people.

Anyone who has the tracking number can see the tracking page for that shipment. There is no password on it. A tracking page shows the sender and recipient names, the delivery address as it appears on the waybill, the service level, package type, weight, the estimated delivery date and the full history of scan events with their times and locations.

The tracking page deliberately never shows: phone numbers, email addresses, declared value, internal operational notes, the identity of individual staff, or any event we have marked internal.

Because the tracking number is the key, treat it the way you would treat any other reference that unlocks information about you. Share a tracking link only with people you are content to show the delivery address to. We ask search engines not to index individual tracking pages, and we rate limit lookups so the numbers cannot be guessed at scale.

If you are a business customer and this level of disclosure does not suit your shipments, contact us before booking and we will discuss what can be configured.

Where data protection law requires a lawful basis, we rely on the following, depending on the situation:

• Performance of a contract. Carrying and delivering a shipment you or your sender asked us to carry.
• Legal obligation. Customs declarations, export controls, tax records and lawful requests from authorities.
• Legitimate interests. Keeping the network secure, preventing abuse, investigating claims and measuring our own performance. We balance these against your interests and use the least data that achieves the purpose.
• Consent. Optional things such as leaving a delivery rating. You can decline without any effect on the shipment.

We share personal information only where it is necessary:

• Customs and border authorities in the origin and destination countries, as required for clearance.
• Delivery partners who complete the final leg in cities where SwiftTrack does not operate its own couriers. They receive only what is needed to deliver.
• Service providers who host our systems under contract. Our application and database are hosted on Supabase infrastructure.
• Authorities and legal advisers where we are legally obliged to disclose, or where it is necessary to establish or defend a legal claim.

International delivery necessarily involves transferring information across borders, including to countries whose data protection laws differ from those where the shipment originated. Where required, we put appropriate safeguards in place with the recipients of that information.

We keep shipment and tracking records for as long as we need them to run the service, and then for as long as customs, tax and limitation periods require. In practice that means operational records outlive the delivery itself, because a claim or an audit can arrive long after a package has arrived.

• Shipment and scan records: retained while the shipment is active and for the period required by customs and tax rules afterwards.
• Contact messages: retained while the enquiry is open and for a reasonable period afterwards in case it is reopened.
• Abuse prevention hashes: short lived, and never linked to an identity.
• Archived shipments: removed from public tracking immediately when archived, and retained internally for audit.

The precise retention periods for a given shipment depend on the countries involved. Ask us and we will tell you what applies to yours.

Access to shipment data is restricted at the database itself rather than only in the application. Every table carries row level security policies, so a request that is not from an authorised, active operations account returns nothing at all. Public tracking runs through a single narrow function that returns a fixed set of approved fields and cannot reach anything else.

• Operations accounts are individually issued and can be deactivated immediately.
• Every create, update and archive action by an operator is written to an audit log with the account that performed it.
• All traffic to this site is encrypted in transit.
• Public endpoints are rate limited, and lookups are logged without the tracking number so our own logs do not become a record of who searched for what.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities where the law requires it.

Depending on where you live, you may have the right to:

• Ask what personal information we hold about you and receive a copy.
• Ask us to correct information that is wrong or incomplete.
• Ask us to delete information we no longer have a reason to keep.
• Object to, or ask us to restrict, certain uses of your information.
• Withdraw consent where we relied on it, such as for a delivery rating.
• Complain to your local data protection authority.

To exercise any of these, write to privacy@swifttrack.example. We will ask for enough information to be confident we are talking to the right person, which protects you as much as us.

Some requests we cannot fully grant. We cannot delete a customs declaration we are legally required to retain, and we cannot remove a shipment record that is the subject of an open claim. Where we refuse, we will tell you why.

Our services are for businesses and adults. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact privacy@swifttrack.example and we will remove what we are able to remove.

When we change this policy we will update the effective date at the top of the page. If a change materially affects how we use information we already hold, we will take reasonable steps to tell affected customers directly rather than relying on you noticing a new date.

Our Terms of Service govern the carriage of shipments and sit alongside this policy.