Privacy Policy

We collect personal data only when it is necessary to process a freight enquiry or fulfil a logistics service. This includes name, business name, email address, telephone number, and shipment details such as origin, destination, cargo type, and weight.

What We Collect

We may also collect technical data automatically when you visit our website — including IP address, browser type, and pages visited — for security and performance monitoring purposes.

We do not collect sensitive personal data such as financial account numbers, government identification, or health information through this website. Payment processing, where applicable, is handled by regulated third-party processors.

We process your data under the following lawful bases: contractual necessity (to carry out a logistics service you have requested), legitimate interests (to maintain website security and improve our operations), and consent (for any optional marketing communications you have opted into).

Legal Basis for Processing

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

How We Use Your Data

Personal and shipment data is used to respond to freight enquiries, prepare quotations, coordinate cargo movements, manage customs documentation, and communicate shipment status updates throughout the delivery lifecycle.

We retain your data for as long as is necessary to fulfil the service or comply with our legal obligations. Enquiry data is held for up to 24 months; operational shipment records may be retained for up to 7 years for regulatory compliance.

Your data is never sold, rented, or disclosed to third parties for marketing purposes. We share data only within the operational chain required to deliver your shipment — including carriers, port agents, customs brokers, and warehouse operators — who are contractually bound to protect it.

Third-Party Sharing

We may disclose data to regulatory authorities, customs agencies, or law enforcement where required by law. Any international transfer of data is conducted under appropriate safeguards in accordance with UK GDPR and applicable data protection law.

Under UK GDPR you have the right to access the personal data we hold about you, request correction of inaccurate records, request deletion where data is no longer required, and object to processing carried out under legitimate interests.

Your Rights

You may also request that processing be restricted while a dispute is resolved, or request a portable copy of data you have provided to us. We will respond to verified requests within 30 days.

To exercise any of these rights, contact our operations team at support@umallogistics.com. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We review and update this policy periodically to reflect changes in our operations or applicable law. Material changes will be communicated via our website. Continued use of our services after an update constitutes acceptance of the revised policy.

Policy Updates

Questions about this policy or our data handling practices should be directed to support@umallogistics.com. We are registered in England and Wales and operate in compliance with UK GDPR and the Data Protection Act 2018.