Privacy policy & data consent

Policy version …

What we collect and why

  • Names and phone numbers (sender and recipient) — To arrange airport hand-over and collection.
  • Email address — For sign-in, one-time codes and booking notifications.
  • Cargo description, weight and declared value — For the customs declaration, AGL handling and billing.
  • Payment records — For billing and release control.
  • Google profile information (name, email) — For authentication only, if you choose Google sign-in.

Data controller

Elegant Holdings Limited, PO Box 576, Zomba, Malawi.

Who we share your data with

AGL (airport ground handling agent) for cargo handling and customs; Resend for email delivery; Google for sign-in (only if you use it).

Retention

Booking and payment records are kept for 7 years to meet customs and tax obligations. Account and contact data is kept while your account is active and deleted within 30 days of an approved deletion request, except where the law requires us to keep it. Deal enquiries are kept for 2 years.

Your rights

You can access, correct or delete your data, and withdraw consent at any time, under the Malawi Data Protection Act 2024 and, for customers in Ireland, the EU General Data Protection Regulation (GDPR). You can also complain to the Malawi Communications Regulatory Authority or the Irish Data Protection Commission.

Consent

We ask for your consent to process your data before you create an account, submit a booking or send a request to us. Processing consent is required to provide the service. Marketing consent is optional and can be withdrawn at any time from the "My privacy" page in your portal.

Browser storage

We only use essential browser storage to keep you signed in and to remember that you have seen our storage notice. We do not use advertising or tracking cookies.

Contact

Write to the Data Protection Officer, Elegant Holdings Limited, PO Box 576, Zomba, Malawi. Signed-in customers can download their data or request deletion from "My privacy".