Privacy Policy

Effective Date: January 1, 2025 | Last Updated: April 16, 2026

1. Who We Are

SwiftShift Packers & Movers Pvt. Ltd. (“SwiftShift,” “we,” “us,” or “our”) is a Private Limited Company registered in Haryana under the Companies Act, 2013. We provide packing, moving, vehicle transport, and warehouse storage services across 15 states in India.

Under the Digital Personal Data Protection Act, 2023 (DPDP Act), we act as a Data Fiduciary — meaning we determine the purpose and manner in which your personal data is processed. You, the customer, are the Data Principal.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have. It applies to anyone who visits our website (www.swiftshiftpackers.online), contacts us through any channel, or uses our services.

2. Applicable Laws

This policy is drafted in accordance with the following Indian laws:

• Digital Personal Data Protection Act, 2023 (DPDP Act): India’s primary data protection legislation governing how personal data is collected, stored, and processed.
• Information Technology Act, 2000 (IT Act): Governs electronic transactions and data protection obligations for companies operating online.
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (IT Rules, 2011): Specifies security standards and handling requirements for sensitive personal data.
• Consumer Protection Act, 2019: Protects consumer rights including the right to information and redressal of grievances.
• Consumer Protection (E-Commerce) Rules, 2020: Applies to our website as an electronic platform displaying service information.

3. Contact & Grievance Officer

For any questions about this policy or to exercise your data rights, contact our designated Grievance Officer:

• Designation: Grievance Officer, SwiftShift Packers & Movers Pvt. Ltd.
• Email: letconnect@swiftshiftpackers.online
• Phone / WhatsApp: +91-88002 54354
• Address: Plot No. 22, Sector 14, Gurgaon, Haryana – 122001, India
• Response time: We acknowledge complaints within 48 hours and resolve them within 30 days, as required under the IT Act, 2000.

4. What Personal Data We Collect

We only collect data that is directly necessary to provide our services. Here is exactly what we collect and what we do not:

4.1 Data You Give Us Directly

• Name and phone number — when you fill out a quote form, message us on WhatsApp, or call us.
• Email address — if you email us or include it in the quote form.
• Moving details — pick-up address, destination address, list of items, preferred dates, special instructions, and home or office size.
• Vehicle details — make, model, and registration number if you book vehicle transport.
• Messages and conversation history — from WhatsApp chats, emails, phone call notes, and company verification or compliance requests (we do not record phone calls).

4.2 Data Collected by Our Hosting Provider

Our website is a static site with no server-side processing or database. However, our hosting provider automatically logs standard web server data when you visit any page:

• IP address, browser type and version, operating system
• Pages requested, date and time of access, referring URL

These logs are maintained by the hosting provider under their own privacy policy. We do not have direct access to individual-level server logs.

4.3 Local Storage (Not Cookies)

Our website stores one item in your browser’s localStorage:

• cookieConsent — records whether you accepted the consent banner, so it does not appear again on every visit. This data never leaves your device and is not sent to any server.

We do not set any HTTP cookies, session cookies, tracking cookies, or advertising cookies. See our Cookie Policy for full details.

4.4 What We Do NOT Collect

• We do not collect Aadhaar numbers, PAN numbers, or government-issued identity documents through our website.
• We do not collect financial data (bank account, UPI, card details). Payments are made directly to our business account.
• We do not run any analytics scripts (Google Analytics, Facebook Pixel, or otherwise) as of the date shown above.
• We do not use any advertising trackers, remarketing pixels, or conversion tracking scripts.

5. How We Collect Your Data

Our website has no backend server or database. When you fill out a form on our site and click submit, your details are sent directly to our WhatsApp business number via a WhatsApp link. Here is how each channel works:

• Website forms: Form data (name, phone, email, inquiry type, moving details, service type, and message) is formatted into a WhatsApp message and opened in WhatsApp. No data is stored on our website server.
• WhatsApp: Messages are exchanged through WhatsApp and stored on Meta’s servers. We retain the chat history on our business phone.
• Phone calls: We take notes during calls. We do not record phone calls.
• Email: Emails are stored in our email service provider’s servers.

6. Why We Use Your Data (Purpose Limitation)

Under the DPDP Act, we can only use your data for the specific purposes you gave it to us for. Here are those purposes:

• Providing a quote: To assess your moving needs and calculate a price.
• Executing your move: To schedule crews, assign vehicles, coordinate logistics, and complete delivery.
• Keeping you updated: To send booking confirmations, dispatch notifications, GPS tracking links, and post-move invoices.
• Customer support: To respond to questions, handle complaints, and resolve disputes.
• Verification and compliance response: To respond to company verification requests, billing confirmations, due-diligence queries, and lawful compliance checks.
• Legal obligations: To comply with GST filing requirements and respond to lawful government requests.
• Promotional messages (only with consent): To send service offers or updates — only if you have opted in. You can opt out at any time by sending STOP on WhatsApp or emailing us.

We will never use your personal data for a purpose you did not agree to.

7. Legal Basis for Processing (DPDP Act, 2023)

Under the DPDP Act, we process your data on the following grounds:

• Consent: When you submit a form or message us, you give us consent to process the data you provided for the purposes described above. Our forms include a consent checkbox that links to this Privacy Policy and our Terms & Conditions.
• Contractual necessity: Once you confirm a booking, we need your data to fulfil the moving contract — assigning crews, arranging vehicles, coordinating delivery.
• Legal obligation: GST regulations require us to maintain transaction records. We are legally required to respond to court orders or lawful government data requests.
• Legitimate use: For service improvement based on aggregated, non-identifying feedback.

8. Consent & Withdrawal

Your consent is the foundation of our data processing. Here is how it works:

• How you give consent: By checking the consent box on our quote/contact form before submitting. The checkbox clearly states that your data will be sent via WhatsApp and processed per this policy.
• How to withdraw consent: Send us a WhatsApp message, email, or phone call requesting data deletion. We will stop processing your data within 7 working days (unless we are legally required to retain it).
• Effect of withdrawal: We will delete your data from our records. If a move is already in progress, we will complete the contracted service and then delete your data.

9. Third-Party Services

We use the following third-party platforms. Each has their own privacy policy governing how they handle data:

9.1 WhatsApp (Meta Platforms, Inc.)

WhatsApp is our primary communication channel. When you message us, your messages are processed by Meta in accordance with WhatsApp’s Privacy Policy. Messages are end-to-end encrypted. We cannot control how Meta processes metadata (timestamps, phone numbers, IP addresses) on their servers.

9.2 Web Hosting Provider

Our website is hosted on a third-party server that maintains standard access logs (IP address, browser, pages viewed). These logs are subject to the hosting provider’s privacy policy and data retention schedule.

9.3 Google Analytics — Not Active

As of the date shown at the top of this page, Google Analytics is not installed on our website. No analytics data is being collected. If we activate Google Analytics in the future, we will update this policy before doing so, and your consent will be required through our cookie consent banner.

9.4 Google Ads — Not Active

As of the date shown at the top of this page, no Google Ads scripts, conversion tracking, or remarketing pixels are active on our website. If we add Google Ads tracking in the future, it will not be activated until we update this policy and obtain your explicit consent. You will always be able to opt out through Google Ads Settings.

9.5 Google Maps (Google LLC)

Our Contact page displays an embedded Google Maps iframe to show our office location. When you visit the Contact page, your browser loads content directly from Google’s servers, which may transmit your IP address, browser type, and device information to Google. This is governed by Google’s Privacy Policy. We do not control what data Google collects through the Maps embed. If you prefer not to share data with Google Maps, you can block third-party iframes in your browser settings.

10. Data Sharing

We do not sell, rent, or trade your personal data.

We share your data only in these limited situations:

• Our moving crew: Your name, phone number, pick-up address, and destination are shared with the assigned crew to execute your move. They are bound by confidentiality obligations.
• Pentrix Hub: Limited inquiry, lead, and contact details may be accessed by Pentrix Hub when it is providing website support, advertising response handling, or lead coordination on behalf of SwiftShift. Pentrix Hub does not provide packing and moving services to customers through this website.
• Logistics and transport partners: For intercity moves, your moving details may be shared with verified transport partners. Only the information needed for delivery is shared.
• Legal requirements: If we receive a valid court order, government directive, or regulatory request, we will disclose the requested data as required by law.
• GST compliance: Customer name and invoice details are included in GST returns filed with the Government of India.

11. Cross-Border Data Transfers

When you use WhatsApp to communicate with us, your messages pass through Meta’s servers, which may be located outside India (including in the United States). We do not independently transfer your personal data outside India. However, by using WhatsApp to contact us, your data is subject to Meta’s cross-border transfer practices as described in their privacy policy.

12. Data Retention

We keep your data only as long as we need it. Here are the specific retention periods:

• Active customer records (name, contact, moving history): 3 years from the date of your last booking.
• Quote requests that did not convert to a booking: 1 year from the date of inquiry, then deleted.
• WhatsApp and email conversations: 2 years for quality assurance and dispute resolution, then deleted.
• Invoices and payment records: 8 years, as required under the Income Tax Act, 1961, and GST regulations.
• localStorage (cookieConsent): Stays on your device until you clear your browser data. We have no access to it.

When a retention period expires, data is permanently deleted from our records. We do not archive deleted data.

13. Data Security

We take reasonable security measures as required under the IT (Reasonable Security Practices) Rules, 2011:

• SSL/TLS encryption: All website traffic is encrypted in transit.
• Access restriction: Only authorised staff (management and assigned coordinators) can access customer data.
• Device security: Business phones and computers are password-protected with screen-lock timeouts.
• WhatsApp encryption: Messages are end-to-end encrypted by default.
• Staff training: Team members who handle customer data are briefed on confidentiality and data handling norms.

No system is perfectly secure. While we implement these measures diligently, no system can be made perfectly secure, and we continuously work to strengthen our protections. If a data breach affecting your personal data happens, we will notify you and the relevant authorities as required by law.

14. Your Rights as a Data Principal (DPDP Act, 2023)

Under the DPDP Act and IT Act, you have the following rights:

• Right to access: Request a summary of the personal data we hold about you.
• Right to correction: Ask us to fix any incorrect or outdated personal data.
• Right to erasure: Ask us to delete your data. We will comply unless we have a legal obligation to keep it (e.g., tax records).
• Right to withdraw consent: Withdraw your consent at any time. Processing done before withdrawal remains lawful.
• Right to grievance redressal: If you are unhappy with how we handle your data, you have the right to file a complaint with us (see Section 15 below), and if unresolved, with the Data Protection Board of India.
• Right to nominate: Under the DPDP Act, you may nominate someone to exercise your data rights on your behalf in case of your death or incapacity.

To exercise any right, email us at letconnect@swiftshiftpackers.online or WhatsApp us at +91-88002 54354. We will act on your request within 30 days.

15. Grievance Redressal

If you have a complaint about how we handle your personal data:

• Step 1: Contact our Grievance Officer (details in Section 3). We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days.
• Step 2: If you are not satisfied with our response, you may escalate to the Data Protection Board of India established under the DPDP Act, 2023.
• Step 3: You may also approach the relevant Consumer Disputes Redressal Commission (District, State, or National level) under the Consumer Protection Act, 2019, if the complaint relates to unfair trade practices or service deficiency.

16. Sensitive Personal Data

Under the IT (Reasonable Security Practices) Rules, 2011, “Sensitive Personal Data or Information” includes passwords, financial information, health data, biometric data, and sexual orientation.

We do not collect sensitive personal data through our website or services. We do not ask for or store passwords, bank details, Aadhaar numbers, medical information, or biometric data. Payments are made directly through UPI, bank transfer, or cash — we never handle or store your payment credentials.

17. Children’s Privacy

Our website and services are intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal data, contact us and we will delete it promptly.

18. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we do, we will update the “Last Updated” date at the top of this page. For significant changes, we will make reasonable efforts to notify you (such as a notice on our website). Your continued use of our website or services after an update means you accept the revised policy.

19. Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a complaint, reach out to us:

• Email: letconnect@swiftshiftpackers.online
• Phone / WhatsApp: +91-88002 54354 (Available 24/7)
• Address: SwiftShift Packers & Movers Pvt. Ltd., Plot No. 22, Sector 14, Gurgaon, Haryana – 122001, India