Privacy Policy

Last updated: 27 May 2026 · Effective immediately · DPDP Act 2023 (India) compliant

This Privacy Policy explains how Sri Lakshmi Prasanna Enterprises (operating as SLP Express International Couriers, hereafter "SLP", "we", "us" or "our") collects, uses, shares and protects your personal data when you use our website slpcouriers.in or our international courier services. We comply with the Digital Personal Data Protection Act 2023 ("DPDP Act") of India.

1. Who we are

Data Fiduciary: Sri Lakshmi Prasanna Enterprises (Proprietorship)
Proprietor: Rajkumar Vemulapalli
Registered office: Ground Floor, H No 11/A, Karunasri Apartments, Sanjeev Reddy Nagar X Road, Vengal Rao Nagar, Hyderabad, Telangana 500038, India
GSTIN: 36AFBPV3120L2ZD
Contact: info@slpcouriers.in · +91 99510 83676

2. What personal data we collect

To process your international courier shipment, we collect the following categories of personal data:

From the sender (you)

• Full name, residential or office address in Hyderabad / India
• Mobile number (for WhatsApp coordination, pickup confirmation, AWB delivery)
• Email address (for tracking notifications and invoices)
• Government-issued ID copy (Aadhaar or passport) for KYC at customs export
• PAN card for high-value shipments above ₹50,000 (Income Tax Rule 114B)
• Payment information (UPI ID, last 4 digits of card, bank reference number)

From the recipient

• Full name and destination address
• Recipient phone number and email for delivery coordination by carrier
• Government ID where mandatory (eg. EORI for EU shipments, EIN for US commercial)

About your shipment

• Itemised contents declaration (required for customs invoice)
• Declared value of items in INR / destination currency
• Weight, dimensions and photographs of the parcel taken at pickup

Automatically when you visit our website

• IP address and approximate location
• Browser type, device type, operating system, language
• Pages visited, time on each page, referring URL
• Cookies — see Section 8 for details

3. Why we collect this data (lawful purposes)

• To deliver the courier service you booked — pickup, packing, customs documentation, carrier handover, tracking and delivery
• Mandatory customs compliance — Indian Customs Act 1962 and destination country customs require sender/recipient identification and itemised value declaration
• Tax compliance — Goods and Services Tax (GST) invoicing under CGST Act 2017
• Service communication — booking confirmation, AWB tracking, delivery notifications via WhatsApp / SMS / email
• Marketing communication — only with your explicit opt-in consent (TRAI 2018 / DPDP Act compliant)
• Fraud prevention — detecting prohibited items, suspicious shipments, KYC verification
• Website analytics — improving site performance and content (Google Tag Manager — only with cookie consent)

4. Who we share your data with

We share the minimum data necessary with the following categories of recipients:

• Carriers — DHL Express, FedEx, UPS, Aramex and their international networks receive sender + recipient details on the Air Waybill (AWB) so they can deliver your parcel
• Indian Customs (CBIC) — sender KYC, commercial invoice, declared value for export clearance
• Destination country customs authorities — eg. US CBP, UK HMRC, Australian DAFF, EU Customs — receive your customs invoice for import clearance
• Banking and payment processors — to process refunds and reconcile invoices (limited to amount + reference)
• Tax authorities — under valid legal demand only (eg. GST audit, Income Tax notice)
• Law enforcement — only on a written, lawful order from a court or competent authority

We do not sell, rent or trade your personal data to any third party for advertising or marketing purposes.

5. How long we keep your data

We retain personal data for the following periods:

• Shipment booking records: 7 years from the date of shipment, as mandated by the GST Act for record retention
• Customs invoices and AWBs: 7 years (Indian Customs Act compliance)
• KYC documents (Aadhaar/passport copies): 7 years from last transaction, then securely destroyed
• Marketing-consent records: until you withdraw consent
• Website analytics: 26 months (Google Analytics default), then aggregated/anonymised
• Cookie data: see Section 8 for per-cookie expiry

After the retention period, your personal data is securely deleted from active systems and retained only in encrypted backup archives for a further 90 days, after which it is destroyed permanently.

6. Your rights as a Data Principal (DPDP Act 2023)

Under Section 11–14 of the DPDP Act, you have the following rights with respect to your personal data:

• Right to access — request a copy of the personal data we hold about you
• Right to correction — ask us to correct inaccurate or incomplete data
• Right to erasure — ask us to delete your data (subject to legal retention requirements)
• Right to nominate — designate another person to exercise these rights on your behalf in the event of your incapacity
• Right to withdraw consent — withdraw any consent you have given (effect is prospective only)
• Right to grievance redressal — file a complaint with our Grievance Officer (Section 10)

To exercise any of these rights, email info@slpcouriers.in or WhatsApp +91 99510 83676 with the subject "DPDP Data Request" and your booking AWB number. We will respond within 7 working days and complete the request within 30 days.

7. Children's data

SLP Express services are not directed at children under 18. We do not knowingly collect personal data of children. If you believe we have inadvertently collected such data, please contact our Grievance Officer immediately and we will delete it.

8. Cookies and tracking technologies

We use the following categories of cookies:

• Essential cookies (always on, no consent needed) — session management, cart, language preference. Expiry: end of session or 30 days.
• Analytics cookies (Google Tag Manager, Google Ads) — consent-based. Track page views, conversions. Expiry: up to 26 months.
• Functionality cookies (slp_consent_v1) — remembers your cookie consent choice. Expiry: until cleared by you.

You can accept or reject non-essential cookies via the consent banner that appears on your first visit. You can change your choice anytime by clearing your browser's local storage and reloading the site.

9. Data security

We implement reasonable security measures including:

• HTTPS / TLS encryption for all data in transit
• Access controls on customer database — only authorised SLP staff can view sender/recipient details
• Physical document storage in locked cabinets at registered office
• Regular staff training on data handling and confidentiality
• Vendor due-diligence — we use reputable carriers (DHL, FedEx, UPS, Aramex) with their own DPDP-aligned data handling practices

In the unlikely event of a personal data breach affecting your data, we will notify you and the Data Protection Board of India within 72 hours as required by DPDP Act Section 8(6).

10. Grievance Officer (DPDP Act mandatory contact)

If you are not satisfied with the resolution provided by our Grievance Officer, you may escalate the matter to the Data Protection Board of India under DPDP Act Section 28.

11. International data transfers

To deliver your international parcel, your data necessarily crosses borders — to the destination country's carrier network and customs authority. We share the minimum data legally required for delivery (sender/recipient details on AWB and customs invoice). All transfers are governed by the destination country's data protection law, the relevant carrier's privacy policy, and DPDP Act Section 16 (notified countries; no general restrictions as of date of this policy).

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, services or our practices. The "Last updated" date at the top of this page indicates the latest revision. For material changes, we will notify customers via the WhatsApp number on record at least 30 days before the change takes effect.

13. Governing law and jurisdiction

This Privacy Policy is governed by the laws of India, specifically the Digital Personal Data Protection Act 2023, Information Technology Act 2000 (and Rules), and Consumer Protection Act 2019. Any dispute arising out of or in connection with this policy shall be subject to the exclusive jurisdiction of courts in Hyderabad, Telangana, India.

This Privacy Policy is the complete and exclusive statement of how SLP Express processes your personal data. If anything is unclear, please ask before sharing your data with us — we want you to be fully informed.