Tracx Logis India Private Limited | Brand: Smartship | www.smartship.in
Effective Date: 01-01-2026 | Last Updated: 25-03-2026
This document is an electronic record within the meaning of the Information Technology Act, 2000 ("IT Act") and the rules framed thereunder, as amended from time to time, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"). This Privacy Policy additionally complies with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Indian Contract Act, 1872.
This electronic record is generated by a computer system and does not require any physical or digital signature to be legally binding.
This Platform (www.smartship.in) is owned and operated by Tracx Logis India Private Limited ("Company", "we", "us", or "our"), a company incorporated under the Companies Act, 2013, having its registered office at:
Unit No. 901, 902 & 903, Tower "C", 9th Floor, Unitech Building,
Unitech Cyber Park, Sector 39, Village Jharsa,
Gurugram, Haryana – 122003, India.
"Smartship" is a registered brand/trade name of Tracx Logis India Private Limited. All rights, obligations, and services offered through this Platform are provided by Tracx Logis India Private Limited. Any reference to "Smartship", "Platform", "we", "us", or "our" shall be deemed to refer to Tracx Logis India Private Limited.
Under the DPDP Act, 2023, the Company acts as the Data Fiduciary in respect of personal data processed through this Platform..
For the purposes of this Privacy Policy:
• "Data Principal" means the individual to whom the personal data relates (i.e., you, the user).
• "Data Fiduciary" means Tracx Logis India Private Limited, which determines the purpose and means of processing personal data.
• "Personal Data" means any data about an individual who is identifiable by or in relation to such data, as defined under the DPDP Act, 2023.
• "Sensitive Personal Data or Information (SPDI)" includes passwords, financial information (bank account/credit/debit card details), physical/physiological/mental health conditions, sexual orientation, medical records, and biometric data, as defined under the SPDI Rules, 2011.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, sharing, transfer, or deletion.
• "Consent" means free, specific, informed, unconditional, and unambiguous agreement, signified by a clear affirmative action, as required under the DPDP Act, 2023.
• "Consent Manager" refers to a registered entity under the DPDP Act through which Data Principals may give, manage, review, or withdraw consent.
• "Grievance Officer" means the officer designated to address data-related complaints, as mandated under the IT Act, 2000 and SPDI Rules.
• "Platform" means the website www.smartship.in and all its sub-domains and associated mobile applications.
This Privacy Policy applies to all visitors, registered users, and customers (collectively, "Users" or "Data Principals") who access or use the Platform. This Policy also applies generally to our affiliates, subsidiaries, or joint venture websites that operate under similar privacy practices, subject to the requirements of applicable law.
By accessing or using the Platform, registering an account, or providing your personal data, you confirm that you have read, understood, and freely consent to the collection, storage, use, and processing of your personal data as described in this Privacy Policy. This Policy is incorporated into and forms part of the User Agreement. Your use of the Platform constitutes a valid contract of lawful processing of personal data within the meaning of the Indian Contract Act, 1872 and the DPDP Act, 2023.
If you do not agree with any part of this Privacy Policy, you must immediately cease using the Platform and request deletion of your account and data.
The Platform and its services are available only to persons who are competent to enter into a legally binding contract under the Indian Contract Act, 1872. In accordance with Section 3 of the DPDP Act, 2023 and applicable law:
• You must be 18 years of age or older to register or transact on the Platform independently.
• Minors (persons below 18 years) may not purchase services or register independently. Any transaction on behalf of a minor must be undertaken by a parent or legal guardian who is a registered User.
• We do not knowingly collect personal data of children below 18 years of age without verifiable parental consent. If we become aware that personal data of a minor has been collected without proper parental consent, we will take immediate steps to delete such data.
• Parents and guardians are responsible for supervising minors' use of the Platform.
We collect the following categories of personal data, with a clear indication of whether provision is mandatory or optional:
6.1 Identity and Contact Data (Mandatory):
• Full name, date of birth, gender
• Email address, mobile/telephone number
• Registered User ID and password (stored in encrypted form)
• Residence address and/or place of business
6.2 Financial and Transaction Data (Mandatory for transactions):
• Billing and shipping information
• Bank account details, credit/debit card information, UPI IDs (this constitutes Sensitive Personal Data or Information under the SPDI Rules, 2011)
• Transaction history and shipping records
6.3 Technical and Usage Data (Automatically collected):
• IP address, browser type and version, operating system
• Device identifiers and network information
• Pages visited, click-stream data, referring/exit URLs
• Session duration, log files, and access timestamps
• Cookie identifiers (see Section 10 for details)
6.4 Communication Data (Collected when you interact with us):
• Messages posted on message boards, chat rooms, or feedback forms
• Correspondence sent to us via email or post
• Third-party correspondence about your activities on the Platform
6.5 Data from Third-Party Sources:
• Where you register or interact via a third-party website that facilitates Platform activities, that website may share your profile and transaction data with us. Such third-party data sharing is subject to their own privacy policies.
You always have the option to decline to provide optional information by choosing not to use a particular service or feature on the Platform. Fields clearly marked as "mandatory" must be provided to access the relevant service. You can visit the Platform without providing personal data, in which case you remain anonymous and cannot be identified unless you log in.
Under the DPDP Act, 2023, we process your personal data only on the following lawful bases:
7.1 Consent (Section 6, DPDP Act): Processing your data for marketing communications, personalised content, and non-essential profiling, based on your free, specific, informed, and unambiguous consent given at the time of registration or subsequently.
7.2 Performance of Contract (Section 7, DPDP Act / Indian Contract Act, 1872): Processing necessary to fulfill your service requests, process shipments, manage your account, collect fees, resolve disputes, and provide customer support.
7.3 Compliance with Legal Obligations (Section 7, DPDP Act / IT Act, 2000): Processing required to comply with applicable law, court orders, regulatory directions, and legal process, including obligations under the IT Act, 2000, GST law, and other statutes.
7.4 Legitimate Interests: Processing to detect and prevent fraud, security threats, and criminal activity; to improve Platform performance; and to conduct analytics and aggregated research, where such interests are not overridden by your rights.
7.5 Protection of Vital Interests: Processing necessary to protect the life or safety of any individual in an emergency.
Specific purposes for which we use your personal data include:
• Facilitating account registration, login, and profile management
• Processing shipping transactions, tracking orders, and managing logistics
• Collecting fees, processing payments, and maintaining billing records
• Providing customer service, technical support, and resolving disputes
• Sending transactional communications (booking confirmations, delivery updates, invoices)
• Sending marketing communications, offers, and newsletters (subject to your consent and opt-out rights)
• Personalising your Platform experience and displaying relevant content
• Conducting statistical analysis, trend monitoring, and Platform improvement
• Detecting, preventing, and investigating fraud, abuse, and security incidents
• Enforcing our User Agreement and other legal rights
• Complying with applicable Indian law and responding to lawful government/regulatory requests
We do not sell, rent, or trade your personal data to third parties for their independent commercial purposes. We share your personal data only in the following circumstances and only to the extent necessary:
8.1 Service Providers and Data Processors: We engage third-party service providers (e.g., payment gateways, logistics partners/3PLs, cloud infrastructure providers, customer care services, data analytics firms) who process data on our behalf under written data processing agreements that require them to maintain confidentiality and implement adequate security measures. They are prohibited from using your data for any purpose other than the contracted service.
8.2 Affiliated Entities: We may share data with our parent company, subsidiaries, affiliates, and joint ventures for purposes consistent with this Privacy Policy. All such entities are bound by this Policy or an equivalent privacy standard.
8.3 Business Transfers: In the event of a merger, acquisition, restructuring, sale of assets, or similar corporate transaction, your personal data may be transferred as part of the transaction, subject to the commitments made in this Privacy Policy. We will notify you of any such material change in data controllership.
8.4 Legal Compliance and Law Enforcement: We may disclose your personal data to government authorities, law enforcement agencies, courts, or regulators where required or permitted by applicable law, including under the IT Act, 2000, DPDP Act, 2023, or any court order or legal process. We will only disclose the minimum data necessary and, where legally permissible, will notify you of such disclosure.
8.5 Protection of Rights: We may disclose your data to protect and defend the rights, property, or safety of Smartship, our Users, or the public, including to prevent or detect fraud, enforce our policies, or respond to intellectual property complaints.
8.6 With Your Consent: We may share your data with third parties for any other purpose with your explicit prior consent.
8.7 Advertiser Data: Where you enter information on an advertiser's form hosted on the Platform, that information is simultaneously collected by us and the advertiser. Our use is governed by this Policy; the advertiser's use is governed by their own privacy policy, which you should review independently.
8.8 Classified Listings: Where a classified advertisement receives an expression of interest, the contact details of the listing user (as provided at registration) will be shared with the interested user.
We primarily store and process your personal data in India. In the event that your personal data is transferred outside India to any country or territory, we shall ensure such transfer is carried out in accordance with the provisions of Section 16 of the DPDP Act, 2023 and only to countries or territories notified by the Central Government of India as permitting such transfer. We shall ensure adequate contractual and technical safeguards are in place to protect your data during cross-border transfer.
We use cookies and similar tracking technologies (e.g., web beacons, pixel tags, local storage) on the Platform for the following purposes:
• Essential/Functional Cookies: Required for the Platform to operate correctly, including maintaining your session and enabling login functionality. These cannot be disabled without affecting Platform functionality.
• Analytics Cookies: Used to understand how Users interact with the Platform, measure promotional effectiveness, and track aggregated usage trends. These help us improve the Platform.
• Preference Cookies: Used to remember your settings and preferences for a personalised experience.
• Marketing Cookies: Used to display relevant advertising and offers. These are placed only with your consent.
We do not control the use of cookies by third-party advertisers or analytics providers embedded in the Platform. You are free to decline non-essential cookies via your browser settings or our cookie consent mechanism. Please note that disabling essential cookies may impair your ability to use certain features of the Platform. Session cookies are automatically deleted when you close your browser. Persistent cookies remain until you delete them or they expire.
We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including:
• For the duration of your account with us and as reasonably necessary thereafter to resolve disputes, enforce agreements, and comply with legal obligations.
• Financial and transaction records are retained for a minimum of 8 years as required under applicable Indian tax and accounting laws.
• Data processed pursuant to legal obligations will be retained for the period mandated by the relevant law.
• Where you withdraw consent and there is no other lawful basis for continued processing, we will delete or anonymise your personal data within a reasonable period, unless retention is required by law.
Upon expiry of the retention period, we will securely delete or anonymise your personal data in accordance with the DPDP Act, 2023 and applicable data minimisation principles.
Under the Digital Personal Data Protection Act, 2023, you have the following rights in respect of your personal data:
• Right to Access Information (Section 11): You have the right to obtain a summary of the personal data we hold about you, the purposes of processing, and information about the entities with whom your data has been shared.
• Right to Correction and Erasure (Section 12): You have the right to request correction of inaccurate or incomplete personal data and erasure of personal data that is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to Grievance Redressal (Section 13): You have the right to have your grievances addressed by us promptly and to approach the Data Protection Board of India if your grievance is not resolved satisfactorily.
• Right to Nominate (Section 14): You have the right to nominate another individual to exercise your rights in the event of your death or incapacity.
• Right to Withdraw Consent (Section 6(4)): Where processing is based on your consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal. Withdrawal may affect your ability to use certain features of the Platform.
To exercise any of the above rights, please submit a written request to our Grievance Officer (see Section 15). We will respond to your request within the timeframes prescribed under applicable law and within a maximum of 30 days from receipt of your request, unless extended by law.
To protect your privacy and security, we will verify your identity before granting access to or making changes to your personal data. If you have a registered account, your User ID and password are required to access your profile. You may update your personal information at any time by logging into your account under 'My Account'. For changes you cannot make yourself, please contact our Grievance Officer.
We implement and maintain reasonable technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, loss, or destruction, in compliance with the SPDI Rules, 2011 and the DPDP Act, 2023, including:
• Industry-standard SSL/TLS encryption for data transmitted through the Platform
• Secure server infrastructure with access controls and firewalls
• Restricted access to personal data on a need-to-know basis, with confidentiality obligations on staff
• Regular security assessments and vulnerability testing
• Incident response procedures for detection and reporting of personal data breaches
In the event of a personal data breach that is likely to affect your rights, we will notify you and the Data Protection Board of India in accordance with the requirements of the DPDP Act, 2023.
IMPORTANT: No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.
In accordance with the Information Technology Act, 2000, the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the SPDI Rules, 2011, and the Digital Personal Data Protection Act, 2023, we have designated a Grievance Officer to address any concerns, complaints, or grievances regarding the processing of your personal data.
Grievance Officer Details:
• Name: Mr. Dheer Singh
• Designation: Manager
• Company: Tracx Logis India Private Limited (Smartship)
• Address: Unit No. 901, 902 & 903, Tower "C", 9th Floor, Unitech Building, Unitech Cyber Park, Sector 39, Village Jharsa, Gurugram, Haryana – 122003
• Email: [Insert Grievance Officer Email, e.g., grievance@smartship.in]
• Phone: 1800-309-1122 (Toll Free)
• Working Hours: Monday to Friday, 10:00 AM to 6:00 PM (IST), excluding public holidays
We will acknowledge your complaint within 24 hours and endeavour to resolve it within 30 days of receipt. If you are not satisfied with our resolution, you may approach the Data Protection Board of India, once established and notified under the DPDP Act, 2023.
Where we use your personal data for marketing communications (including promotional emails, SMS, and push notifications), we will obtain your explicit prior consent. You may opt out of receiving marketing communications at any time by:
• Clicking the "Unsubscribe" link in any marketing email
• Updating your communication preferences under 'My Account'
• Contacting our Grievance Officer
Please note that transactional communications (such as booking confirmations, invoices, delivery updates, and critical security notices) are not subject to opt-out as they are necessary for the performance of your service contract with us.
The Platform may facilitate access to contact information of other registered Users (e.g., sellers and buyers) to enable transactions. By entering into the User Agreement, you acknowledge and agree that any personal data of another User obtained through the Platform or a Smartship-facilitated transaction may only be used for:
• Smartship-related communications that do not constitute unsolicited commercial messages (spam)
• Using co-branded services offered through the Platform (e.g., insurance, shipping, dispute resolution)
• Any other purpose for which the relevant User has given explicit, informed consent
Under no circumstances may you disclose another User's personal data to any third party without the consent of both Smartship and the relevant User. You must give Users a reasonable opportunity to opt out of your database and to review what information you hold about them. Adding a Smartship User to your mailing list without their explicit prior consent is strictly prohibited and constitutes a violation of our User Agreement and applicable law.
The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices or the content of such third-party websites. We encourage you to read the privacy policies of any third-party website you visit. This Privacy Policy applies solely to information collected by or through the Platform.
We reserve the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or for other operational reasons. Any material changes to this Policy will be communicated to you at least 10 days in advance of their effective date via a prominent notice on the Platform and/or via email to your registered email address. Your continued use of the Platform after the effective date of any such changes constitutes your acceptance of the revised Privacy Policy. If you do not agree to the revised Policy, you must cease using the Platform and request deletion of your account.
This Privacy Policy and all disputes arising in connection with it shall be governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, the Indian Contract Act, 1872, and all rules and regulations framed thereunder. Any disputes not resolved through the grievance mechanism shall be subject to the exclusive jurisdiction of the courts at Gurugram, Haryana, India.
For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:
• Tracx Logis India Private Limited (Smartship)
• Unit No. 901, 902 & 903, Tower "C", 9th Floor, Unitech Building,
• Unitech Cyber Park, Sector 39, Village Jharsa, Gurugram, Haryana – 122003
• Email: contact@smartship.in | info@smartship.in |
• Toll Free: 7428808877
• Website: www.smartship.in
