Privacy notice
Every data item, and why we hold it.
Specific to what the site and the portal actually do. If something here is unclear, ask us — we would rather explain it than have you guess.
Last updated
Who is responsible
PGM Distributors ("ShipGoPick") is the data fiduciary for the personal data listed here. This notice covers the public website and the signed-in portal; it is the same text customers accept in the portal.
What we collect, and why
| Data item | Where it comes from | Purpose |
|---|---|---|
| Business identity: legal name, GSTIN, PAN, IEC, AD code, registered address, entity type | Signup and account details | Opening the account, KYC, customs paperwork (you are the exporter of record), tax invoices |
| Signatory / login: name, email, phone, password (stored only as a hash by our auth provider) | Signup, invites, profile | Authentication, account notices, signing the commercial invoice on your behalf |
| KYC documents: GST certificate, IEC certificate, AD code letter, signatory PAN, cancelled cheque, courier authority letter | Uploaded by you | Verifying the account; the cancelled cheque sets the only refund destination. Never an Aadhaar |
| Bank account (encrypted; only the last four digits are visible) | Cancelled cheque / your entry | Refunds to your verified bank account |
| Login events: IP address, browser, time, MFA status | Automatic | Security of your account, fraud prevention, statutory log retention |
| Orders and consignee data: recipient name, address, phone, email, item descriptions, values, HSN codes | Entered by you | Booking, shipping, tracking, customs declarations, claims — processed on your behalf as described in the Terms |
| Wallet and payments: transactions, gateway payment ids, amounts | Your top-ups and bookings | Running your prepaid balance, GST documents, settlement reconciliation. Card and bank details are entered on the payment gateway's page, never on ours |
| Courier adjustments, disputes and claims | Couriers and you | Passing on documented courier charges, resolving disputes and loss/damage claims |
| Product usage events (quote viewed, order started, order booked, wallet top-up, signup) | Automatic, first-party, no tracking cookie | Understanding where the product loses people; never sold or shared |
| Website forms: email, enquiry details, campaign tags, a salted hash of your IP address | Entered by you / automatic | Replying to you and rate-limiting the forms. The hash cannot be turned back into an address |
| Support, grievance and data requests | Entered by you | Answering you within the SLA on the Grievance Redressal page |
Who can see it
Inside ShipGoPick, your data is visible only to staff whose role needs it, enforced by the database, not the interface. Every read of a KYC document and every bulk export of consignee data is logged.
We share data with the carrier and customs authorities a shipment requires, our payment gateway (for top-ups), and our hosting, database and email providers, who process it on our behalf. We do not sell personal data and do not pass it to third parties for their own marketing.
How long we keep it
Business identity, tax documents, wallet ledgers and logs are kept for the statutory period (at least eight years for tax records, at least 180 days for security logs). Consignee personal data on shipments is anonymised after the retention period set in our system once the shipment is closed. Website enquiries are kept while the conversation is live and up to 24 months after. Rate-limit hashes are kept for a rolling hour.
Your rights
Under the Digital Personal Data Protection Act you may ask for access to, correction or erasure of your personal data, nominate someone to exercise these rights for you, and raise a grievance. Erasure cannot remove records we must keep by law.
Cookies and tracking
The website sets no advertising or cross-site tracking cookies. Anonymous page-view analytics are cookieless. The portal uses only the cookies needed to keep you signed in.
Contact
Access, correction, erasure and grievances: the Grievance Redressal page has the officer’s details, the response times and a form. Or write to admin@pgmdistributors.com.