Privacy Policy · Navo24

1. Who we are

WEMELOGISTICS LTD (“we”, “us”, “our”) is the data controller for personal data processed through navo24.com and our related digital products (the “Services”). We are registered in England and Wales, company number 14081751 (Companies House), registered office 1 Robin Hood House, Kingston Vale, London, England, SW15 3AL. This policy explains what personal data we collect, why, the lawful bases we rely on, and your rights under the UK GDPR and the Data Protection Act 2018.

Questions or requests: [email protected].

2. The personal data we collect

Account data: name, email, company, and login credentials (passwords are stored only in hashed form by our authentication provider).
Billing data: company/billing details and payment records. Card details are handled by our payment provider; we do not store full card numbers.
Usage and technical data: API keys, requests and volumes, log data, IP address, device/browser information, and pages viewed.
Service inputs: the references you submit to be tracked (for example container, bill-of-lading or booking numbers) and any recipient email you provide for notifications.
Communications: messages you send us and our replies (support, sales, contact forms).

We do not intentionally collect special-category (sensitive) personal data, and you should not submit it through the Services.

3. How we use your data, and our lawful bases

To provide the Services: create and manage your account, deliver tracking and API results, and provide support. Lawful basis: performance of a contract.
To take payment and keep records: invoicing, billing and accounting. Lawful basis: contract and legal obligation.
To secure and improve the Services: monitoring, fraud/abuse prevention, troubleshooting, analytics and product improvement. Lawful basis: our legitimate interests in running a secure, reliable service.
To send service messages: security, billing and account notices (including password-reset and login emails). Lawful basis: contract and legitimate interests.
To send marketing: only where permitted; you can opt out at any time. Lawful basis: consent or legitimate interests, as applicable.
To meet legal obligations and protect our rights: e.g. responding to lawful requests, enforcing our terms. Lawful basis: legal obligation and legitimate interests.

4. Cookies and analytics

We use strictly necessary cookies to run the Site and keep you signed in, and (where you agree) analytics to understand usage. You can control non-essential cookies through your browser or our cookie controls where offered. Blocking essential cookies may stop parts of the Site working.

5. Who we share your data with

We do not sell your personal data. We share it only with:

service providers (processors) who help us run the Services (for example cloud hosting, database, email delivery, payment processing and analytics) under contracts that require them to protect your data and use it only on our instructions;
carriers, schedule sources and data providers, strictly to fulfil the tracking or lookups you request;
professional advisers, and authorities or third parties where required by law or to establish, exercise or defend legal claims;
a buyer or successor if we reorganise, merge or sell part of our business, subject to this policy.

6. International transfers

We are based in the UK. Where a provider processes data outside the UK, we ensure an appropriate safeguard is in place: a UK “adequacy” decision, the UK International Data Transfer Agreement (or the EU Standard Contractual Clauses with the UK Addendum), or another lawful transfer mechanism.

7. How long we keep your data

We keep personal data only as long as necessary for the purposes above: account and usage data for the life of your account and a reasonable period afterwards; billing and tax records for as long as the law requires (generally six years); and log data for a shorter operational period. On account closure you may request an export within 30 days, after which we delete or anonymise data we are not required to retain.

8. How we protect your data

We use appropriate technical and organisational measures, including encryption in transit, access controls, hashed credentials and least-privilege access. No system is perfectly secure, so we cannot guarantee absolute security, but we take our obligations seriously and will notify you and the ICO of a reportable breach where the law requires.

9. Your rights

Subject to the conditions in UK data protection law, you have the right to: access your data; have it corrected or erased; restrict or object to processing; data portability; and withdraw consent where we rely on it (without affecting earlier processing).

To exercise any right, contact [email protected]. We will respond within one month. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk), though we would welcome the chance to resolve your concern first.

10. Children

The Services are intended for business and adult users. We do not knowingly collect data from children under 16. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to this policy

We may update this policy to reflect changes to our Services or the law. We will post the updated version here and, where changes are material, take reasonable steps to notify you.

12. How to contact us

WEMELOGISTICS LTD, 1 Robin Hood House, Kingston Vale, London, England, SW15 3AL.

Privacy enquiries: [email protected]. General/technical: [email protected].