Privacy Policy

Harsh Transport Private Limited ("Harsh Express", "we", "us") respects your privacy and protects the personal data entrusted to us. This Privacy Policy explains how we collect, use, share and safeguard information when you visit this website, book or track a shipment, contact us, or use our logistics services. We handle personal data in accordance with Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules). In this policy, "personal data" means information that identifies an individual; where we act as a Data Fiduciary, you are the Data Principal.

Information we collect

  • Profile & contact data: name, company, designation, phone number and email submitted via our forms, WhatsApp, calls or email.
  • Operational data: consignment and LR details, pickup/delivery addresses and contacts, shipment and customs documents, and billing records needed to carry and account for your goods.
  • Transaction data: invoices, payments and GST details required by law.
  • Technical data: IP address, browser and device type, and activity logs captured through essential, analytics or security tooling.
  • Recruitment data: CVs and details you share when applying for a role.

We ask you not to send us sensitive personal data unless it is necessary for a service.

How & why we use it (purpose and lawful basis)

  • To provide the services you request — book, carry, track and deliver consignments and give visibility and proof of delivery (performance of contract).
  • To respond to enquiries, quotes, registrations and grievances, and to send operational updates (including WhatsApp status).
  • To meet legal obligations — tax, e-way bill, transport, customs and company-law requirements.
  • To operate, secure and improve this website through aggregated analytics.
  • To send service or marketing communications where you have consented; you can withdraw consent at any time.

We process personal data on the basis of your consent and/or to perform a contract and comply with law, as permitted by the DPDP Act.

Cookies & tracking

We use essential cookies for session security and optional analytics cookies to understand engagement. You can decline non-essential cookies through your browser settings.

Sharing & disclosure

We do not sell personal data. We share it only as needed: with transport partners and attached vehicle operators, customs brokers, warehousing and IT/communication service providers (as Data Processors under contract), with payment and banking partners, and with government authorities, law-enforcement or regulators where required by law.

Data security & retention

We apply reasonable security practices under the SPDI Rules and DPDP Act — role-based access, access controls and secured systems. No method is completely secure, but we work to protect your data. We retain personal data only as long as needed for the purpose or as required by statutory retention rules (for example, tax and transport records), after which it is deleted or anonymised.

Your rights (Data Principal)

Subject to law, you may request: access to a summary of your personal data and how it is processed; correction, completion or updating; erasure where no longer required; and withdrawal of consent. You may also nominate another person to exercise your rights in the event of death or incapacity, and raise a grievance. To exercise any right, contact our Grievance Officer below. We will respond within the timeframe set by applicable law.

Children's data

Our services are intended for businesses and adults. We do not knowingly process the personal data of children except as permitted under the DPDP Act with verifiable parental consent.

Cross-border transfer

Your data is processed in India. Where a transfer outside India is needed to deliver a service, we do so only as permitted under the DPDP Act and with appropriate safeguards.

Grievance Officer

For any privacy question, request or complaint, contact our Grievance Officer: email privacy@harshexpress.com or write to Harsh Transport Private Limited, T-3, 3rd Floor, Citi Center, Zone-1, MP Nagar, Bhopal, Madhya Pradesh 462011. You also have the right to approach the Data Protection Board of India under the DPDP Act.

Updates

We may revise this policy to reflect new regulations or services. The current version is published here with its effective date.