Privacy Policy

1. Who we are

AIE Direct Group Limited ("we", "us", "our") is the data controller for personal data collected through ShipMate. We are registered in England and Wales.

Contact: info@aiedirectgroup.com

2. What data we collect

When you create an account and use ShipMate, we collect:

• Identity data — your first and last name
• Contact data — email address and phone number
• Delivery data — your Seychelles delivery address, island, and district
• Parcel data — details of parcels received, weights, dimensions, and shipping history
• Account data — account creation date, login activity, and preferences

We do not collect payment card details directly. Payments are handled by our payment processor and are subject to their privacy policy.

3. How we use your data

We use your data to:

• Create and manage your ShipMate account
• Assign and manage your personal UK delivery address
• Match incoming parcels to your account
• Notify you when parcels arrive and provide shipping quotes
• Forward parcels to your Seychelles delivery address
• Send service and transactional emails (parcel updates, account notices)
• Comply with legal obligations including customs declarations

We do not use your data for marketing without your explicit consent.

4. Legal basis for processing

• Contract — most processing is necessary to deliver the ShipMate service you signed up for.
• Legal obligation — we may need to share data with customs authorities or law enforcement when required by law.
• Legitimate interests — to prevent fraud, abuse, and to improve our service.
• Consent — for marketing communications, where you have opted in at registration or subsequently.

4a. Marketing communications

We will only send you marketing emails (promotions, news, and offers) if you have explicitly opted in at the time of registration. Your consent is recorded and you can withdraw it at any time by:

• Clicking "unsubscribe" in any marketing email
• Emailing us at info@aiedirectgroup.com with the subject "Unsubscribe"

Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal, and will not affect service-related emails which we may still send as necessary to operate your account.

5. Who we share your data with

We share your data only where necessary:

• Supabase — our database and authentication provider. Data is stored on servers within the European Economic Area. See supabase.com/privacy.
• Carriers — your name and Seychelles delivery address are shared with the carrier handling your shipment.
• Customs authorities — your name, address, and a description of parcel contents may be included on customs declarations as required by law.

We do not sell, rent, or trade your personal data to any third party.

6. How long we keep your data

• Account data is kept for as long as your account is active.
• Parcel and transaction records are kept for 7 years to meet financial and legal obligations.
• If you close your account, we will delete or anonymise your personal data within 90 days, except where retention is required by law.

7. Your rights (UK GDPR)

You have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — ask us to delete your data (subject to legal retention requirements)
• Restriction — ask us to limit how we use your data in certain circumstances
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interests

To exercise any of these rights, email info@aiedirectgroup.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Cookies and tracking

ShipMate does not use tracking cookies or third-party analytics. We use only the technical session data required by our authentication provider (Supabase) to keep you signed in.

9. Security

We take appropriate technical and organisational measures to protect your data, including encrypted storage, secure HTTPS connections, and access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact

For any privacy-related questions or requests:
info@aiedirectgroup.com