Privacy Policy
Entity: Saurashtra Freight Private Limited
Version: 1.0
Effective Date: 15th November 2026
1. Who We Are and About this Policy
1.1 Saurashtra Freight Private Limited (CIN: U63030MH2017PTC289608) (“SFPL”, “we”, “us” or “our”) operates a Container Freight Station, Empty Container Yard and warehousing facilities at Mundra and Kandla, Gujarat. Our registered office is at 65/C, 6th Floor, Mittal Tower, Nariman Point, Mumbai City, Maharashtra, India, 400021.
1.2 SFPL acts as the “Data Fiduciary” for personal data processed through our website, digital services and facilities, under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”).
1.3 This Policy explains what personal data we collect, why we use it, who we share it with, how long we keep it, and the rights available to you.
2. Key Terms
- Personal data – any data about an individual who is identifiable by or in relation to such data.
- Processing – any wholly or partly automated operation on digital personal data, such as collection, storage, use, sharing or erasure.
- Data Principal – the individual to whom the personal data relates (“you”).
- Board – the Data Protection Board of India.
3. Personal Data We Collect
3.1 We collect only the personal data reasonably necessary to provide our services or respond to you. Depending on how you interact with us, this may include:
Information you give us:
- Contact Us form: name, organisation, e-mail ID, mobile number and the content of your enquiry.
- Customer Portal and Track Container: name, designation, organisation, e-mail ID, mobile number, user ID and password (stored only in encrypted/hashed form).
- Customer and supplier registration: name, designation, e-mail ID and mobile number of the contact person; identity proof such as PAN.
- Careers: name, e-mail ID, mobile number, date of birth and resume.
- Grievance and rights requests: name, e-mail ID, mobile number and details of your request.
Information collected automatically:
- When you visit our website, we may collect technical data such as IP address, browser type, device identifiers, date and time of access, pages visited and referring URL. We use it to run, secure and improve our website.
4. Why We Collect and Use Your Data
4.1 We use your personal data only for the specific purposes set out below:
4.1.1 Contact Us
- Respond to your enquiry and route it to the right team; and
- Keep a record of our communication for continuity of service.
4.1.2 Customer Portal, Track Container and Services
- Create and manage your account and verify your access;
- Provide container tracking and our CFS, yard and warehousing services, including billing and collections; and
- Send you service notices, such as container status or invoice updates.
4.1.3 Customer and Supplier Registration
- Onboard and verify customers and suppliers, and set up contact persons; and
- Process payments and acknowledgement and manage commercial communication.
4.1.4 Careers
- Assess your suitability for roles and communicate with you during the hiring process.
4.1.5 Grievance Redressal
- Register, investigate and resolve your grievance or rights request and keep you informed.
4.1.6 Legal and Regulatory Compliance
- Meet our obligations as a customs custodian and under tax, company and other laws;
- Respond to lawful requests from Customs, port and other authorities; and
- Prevent fraud, ensure information security and protect our legal rights.
5. Legal Basis for Processing
5.1 We process personal data on the basis of your consent, or for legitimate uses permitted under Section 7 of the DPDP Act. These include data you voluntarily provide for a specified purpose, such as availing our services, and compliance with legal obligations and orders, such as disclosures to Customs and other authorities.
6. Consent and Its Withdrawal
6.1 Where we rely on consent, we ask for it through a clear action, such as ticking an unticked box, after showing you a short notice.
6.2 You may withdraw consent at any time, as easily as you gave it, by writing to the Grievance Officer (Clause 15). Withdrawal does not affect processing done before it, or processing we must continue under law.
7. Who We Share Data With
- Service providers acting on our instructions, such as IT, cloud hosting, security and maintenance providers, under written contracts and safeguards;
- Transporters, shipping lines, customs brokers and consignees, to the extent needed to complete a cargo movement;
- Customs, port authorities, regulators, courts and government authorities, where required by law;
- Auditors, legal advisers, insurers and banks, for audit, legal, insurance and payment purposes; and
- Group companies and shareholders.
7.1 All service providers must process personal data only on our instructions and keep it secure. We remain responsible for processing done on our behalf.
8. Transfers Outside India
8.1 Any transfer outside India is made only as permitted under the DPDP Act and Government notifications on restricted countries, with appropriate safeguards.
9. How Long We Keep Your Data
9.1 We retain personal data only for as long as necessary for the purposes described in this Policy, considering the nature of the data, the purpose of processing, legal and regulatory requirements (including those under company, tax and customs laws).
9.2 System logs are kept for at least one year, as required under the DPDP Rules.
10. How We Protect Your Data
10.1 We take appropriate technical and organisational measures to protect your personal data in line with the DPDP Act and Rules, including encryption, access controls, logging and monitoring, backups, and confidentiality obligations on our staff and service providers.
11. Personal Data Breach
11.1 If a personal data breach occurs, we will take steps to contain it, and will notify the affected Data Principals and the Board, with a detailed report to the Board as required under the DPDP Act and Rules. We will also report cyber security incidents to CERT-In where required.
12. Cookies
12.1 We use cookies to make our website work, keep it secure and understand how it is used. When you first visit, a cookie banner lets you accept all cookies, accept only necessary cookies or manage your preferences.
12.2 Types of cookies:
- (a) Strictly necessary cookies – required to operate the website and our online services, such as session management, load balancing and security. These cannot be switched off.
- (b) Analytics cookies – help us understand how visitors use the website, such as pages visited and time spent, so that we can improve it. These are set only with your consent.
- (c) Functional cookies – remember your choices, such as cookie preferences, where used. These are set only with your consent.
12.3 Third-party services: Our website uses the following third-party services, which may receive your IP address, browser and device information when you visit: Google Analytics, Google Fonts, Google Maps (provided by Google LLC); and jsDelivr (a content delivery network that serves website code). These providers process such data under their own privacy policies, and the data may be processed outside India in accordance with Clause 8.
12.4 Managing cookies: You may change or withdraw your cookie consent at any time through the “Cookie Settings” link on our website, in the manner described in Clause 6. You may also block or delete cookies through your browser settings; however, blocking strictly necessary cookies may affect how the website works.
13. Children and Persons with Disability
13.1 Our services are not designed for persons under 18 years of age. We do not knowingly collect their personal data without verifiable consent of a parent or lawful guardian, and we do not track, behaviourally monitor or target advertising at children. The same safeguard applies to persons with disability who have a lawful guardian.
13.2 If you believe a child has shared personal data with us, please contact the Grievance Officer (Clause 15).
14. Your Rights
14.1 Under the DPDP Act, you have the right to:
- Access – a summary of your personal data we hold, how we process it, and with whom it has been shared;
- Correction and erasure – have inaccurate or incomplete data corrected, and data no longer needed erased, unless the law requires us to keep it;
- Withdraw consent – as described in Clause 6;
- Grievance redressal – have your concerns about our handling of your data addressed; and
- Nominate – nominate another person to exercise your rights in the event of your death or incapacity.
14.2 You can exercise these rights by writing to the Grievance Officer. We may ask for information to verify your identity.
14.3 If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India.
14.4 Please give us accurate information and do not file false or frivolous complaints, as required under Section 15 of the DPDP Act.
15. Grievance Officer and Contact
15.1 For any question, request or grievance about this Policy or your personal data, please contact:
Name:
Mr. Ankit Desai
Designation:
Grievance Officer
Email:
Telephone:
+91-22-69337500 (Monday to Friday, 10:00 to 18:00 IST)
Address:
Saurashtra Freight Private Limited, 65/C, 6th Floor, Mittal Tower, Nariman Point, Mumbai City, Maharashtra, India, 400021
16. Changes to this Policy
16.1 We may update this Policy to reflect changes in our processing or in the law. The updated Policy will be published on this page with a revised version number and date at the top of this Policy and will apply from that date. Where a change requires fresh consent, we will ask for it.
17. Governing Law
17.1 This Policy is governed by the laws of India. Subject to the jurisdiction of the Data Protection Board of India and the Appellate Tribunal under the DPDP Act, the courts at Mumbai will have jurisdiction.
You have reached the end of Privacy Policy
