Privacy Policy

Last updated 6 August 2026

This policy explains what personal data SuhagLTD collects through this website and the associated mobile and web application, why, where it is kept, and what a visitor, customer, employee or partner can do about it.

Who we are

This website and the associated application are operated by SuhagLTD, a freight-forwarding, sourcing and logistics business. Our registered company details are shown at the foot of every page:

Data we collect

This is a concrete list of what the platform actually stores, not a generic list of what a site of this kind might collect. Which of these applies to a given person depends on their relationship with us — a website visitor sending an enquiry is not asked for most of this; an employee's record holds considerably more.

Account and profile data

Anyone with a sign-in (customer, staff member, or business partner) has an account record holding an email address, a phone number, a display name, a password — stored only as a cryptographic hash, never in plain text — and preferences such as language, currency and display theme. We record when an account was created and when it last signed in.

Client and business-contact data

For businesses and individuals we trade with: company name, contact name, phone, email, position/role, country and city, preferred language and currency, agreed payment terms, and any notes our staff have recorded about the relationship.

Employee data

For our own staff, considerably more is held, because employment record-keeping requires it: department and position, employment type and start date, salary and payment records, bank account details used to pay salaries — account numbers and IBANs are stored encrypted in our database, not in plain text — and uploaded identity documents. Staff who clock in and out through the app have attendance records that include the clock-in/out time, the GPS coordinates captured at that moment, and a verification selfie photo taken at clock-in and clock-out. Leave requests and expense claims (with any receipts attached) are also recorded against an employee's account.

Shipment and parcel data

Operating a freight and parcel business means holding data about the goods we move and the people sending or receiving them: the client or recipient linked to a shipment, tracking references, declared value, weight and dimensions, a description of the goods, and photographs taken of a parcel and its condition during handling.

Uploaded files

Any document or photo uploaded to the platform — an identity document, a client document, a parcel photo, an attendance selfie — is stored with a record of who uploaded it and when. Files are private by default; the one exception is a company's own logo, which is served publicly by design so it can appear on this website.

Enquiries sent through this website

The contact form asks for a name, an email address, an optional phone number, and a message. That information is used only to answer the enquiry — sending it does not add anyone to a mailing list.

Sign-in sessions

Administrative sign-ins to our internal systems record an IP address and browser identifier against the session, for account security.

How we use it

Data is used to run the business the data was collected for: opening and servicing accounts, arranging and tracking shipments, running payroll and attendance, verifying identity documents and uploaded evidence, generating invoices and trade documents, and replying to enquiries sent through this website. We do not use any of it for advertising, and we do not sell it.

Where your data is stored

Structured records (accounts, shipments, client and employee data) are held in a PostgreSQL database on a server we operate. Uploaded files and photographs are held in object storage hosted by Contabo, in Singapore. If you are contacting us, working with us, or employed by us from outside Singapore, a file you upload is transferred there as a normal part of storing it — we are stating that plainly rather than leaving it implicit.

Email

Outgoing email — account notifications, replies to enquiries, document and shipment updates — is sent from a mail server we run ourselves, not through a third-party marketing or email platform. No mailing list or bulk-email service is used.

Third parties

This website makes no request to any external service when you load it — no analytics, no advertising network, no tracking pixel, no third-party script or font. That is not a promise; it is a build rule enforced automatically before every release of this site, and a copy that violated it would fail to publish. We are not aware of a comparable claim we could make about most websites, which is why we are stating it directly rather than in the usual vague terms.

The application carries no analytics, crash-reporting or advertising software either — its dependency list contains none. The one genuine third party involved in running this platform is our infrastructure provider, described above, which stores data on our behalf and does not use it for any purpose of its own.

Retention

Deleting a record in our systems does not erase it immediately. It is marked removed and kept out of normal view, which lets a genuine mistake be reversed and preserves the business and accounting trail we are required to keep. Records used by the mobile app's offline-sync feature are kept as removal markers for 180 days after deletion — so a device that was offline when a record was removed still learns about it — and are permanently purged after that window. An uploaded file remains in storage for as long as at least one record still references it.

Your rights

Account holders can review and update their own profile — name, phone number, notification email address, language and avatar — directly, without contacting us. Business and employee records that our staff maintain on your behalf can be corrected by asking us; there is currently no button in the app to delete an account or request a data export yourself, so please use the contact details below and we will handle it directly.

Security

Access to company data requires a sign-in issued and controlled by our own staff. Passwords are never stored in plain text. Bank account numbers and IBANs held for salary payment are stored encrypted. Uploaded files are private by default, with the single exception described under "Uploaded files" above.

Changes to this policy

We may update this policy as the platform changes. The date at the top of this page reflects the most recent update; a material change will carry a new date.

Contact

To ask a question about this policy, or to request access to, correction of, or deletion of your data, contact us at info@suhagltd.com or by phone at +8613298136318. Full contact details are also on our contact page.