Privacy Policy

We collect only what we need to ship your packages and run our business:

• Account info: name, email address, phone number, password (stored as a hashed value — we never see the original)
• Shipping info: sender and recipient names, street addresses, phone numbers, the contents and declared value of each parcel
• Payment info: card details are entered directly into our PCI-DSS compliant processor and are NOT stored on our servers; we keep only the last four digits of the card and a transaction reference
• Communications: email, SMS, and chat messages exchanged with our support team
• Technical data: IP address, browser type, device type, and pages visited — used for security, fraud detection, and product analytics

• To process and deliver your shipments end to end
• To produce customs paperwork and labels
• To send transactional notifications (booking confirmation, tracking updates, delivery confirmation, receipts)
• To respond to support requests and damage claims
• To detect and prevent fraud, abuse, and unauthorized account access
• To comply with applicable laws (tax, export controls, customs reporting, anti-money-laundering)
• To send promotional offers and product news only if you have opted in — every marketing email includes a one-click unsubscribe link
• To improve our service through aggregated analytics (we look at trends, not individual behavior)

We do not sell, rent, lease, or trade your personal information. This applies under the meaning of "sale" in the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and similar laws in Virginia, Colorado, Connecticut, Utah, and other US states.

We also do not:

• Share your data with marketing brokers, data aggregators, or "people-finder" services
• Use your data to train AI models for third parties
• Sell your email address to spam lists
• Show your data on a public profile or directory
• Use cross-site advertising trackers on our site (we use first-party analytics only)

We share specific information with specific partners only when needed to deliver your shipment:

• Shipping carriers (UPS, FedEx, USPS, and airline freight partners): sender and recipient name, address, phone, parcel weight and dimensions — required to actually pick up and transport your package
• Bahamian Customs: shipment contents, declared value, sender, recipient, and any commodity codes — required by law for cross-border shipments
• Payment processor: transaction amount and your card details (handled inside the processor's secure modal — never touches our servers)
• Email and SMS providers (Resend, Twilio): your email address or phone number, plus the message content — used to send tracking updates, receipts, and support replies
• Cloud infrastructure providers: we use industry-standard cloud hosting (AWS, MongoDB Atlas, Cloudflare) under their standard data-processing agreements
• Legal and regulatory authorities: we comply with valid subpoenas, court orders, and required regulatory reporting (e.g., suspicious-activity reports)

We never share more than the minimum needed for each task, and we have written data-processing agreements with all infrastructure vendors.

• Active account data: kept as long as your account is active
• Shipment records: retained for 7 years to comply with US tax and customs record-keeping requirements
• Marketing email logs: 2 years from your last interaction
• Security logs (login attempts, device fingerprints, anomaly detection): 13 months
• Closed accounts: personal identifiers are minimized within 30 days of account closure; only the minimum needed for legal and tax obligations is retained

You have the right to:

• Access a copy of the personal information we hold about you
• Correct inaccurate information in your account
• Delete your account and have personal identifiers removed (subject to the 7-year shipment-record retention requirement above)
• Opt out of marketing emails at any time (unsubscribe link in every email)
• Export your data in a portable format
• Object to certain processing activities

To exercise any of these rights, email us at info@95logistic.com with the subject line "Privacy Request." We will verify your identity and respond within 30 calendar days, free of charge for the first request per year.

• All traffic to our website is encrypted via TLS 1.3 (HTTPS) — the lock icon in your browser
• Passwords are hashed using bcrypt with a high work factor; even our own engineers cannot read your password
• Card details are tokenized by our PCI-DSS Level 1 payment processor and never stored on our servers
• Database backups are encrypted at rest in geographically diverse off-site storage
• Staff access to customer data is logged and reviewed; multi-factor authentication is required
• We run automated anomaly detection (impossible-travel logins, brute-force attempts) and force-revoke suspicious sessions immediately

For a deeper look at our security posture, see our Trust & Security page.

We use first-party cookies to keep you logged in and remember your preferences. We do not use third-party advertising trackers, cross-site pixel networks, or session-replay tools that record your screen.

You can clear or disable cookies in your browser settings; doing so may prevent you from staying logged in or completing a checkout.

Our services are not intended for children under 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child under 13, please contact us at info@95logistic.com and we will delete it.

We may update this Privacy Policy from time to time as our services or applicable laws change. Material changes will be communicated by email to active customers and through a notice on our homepage at least 14 days before they take effect. The "Last updated" date at the top of this page always reflects the most recent revision.

For any privacy question, data access request, or complaint: