Privacy
Notice & Policy
Published in adherence to the Digital Personal Data Protection Act, 2023 (DPDPA) & DPDP Rules 2025. Learn how Afloat Shipping & Port Agency acts as a Data Fiduciary to process and safeguard your personal information.
1. Introduction & DPDPA Scope
Afloat Container Lines India Pvt. Ltd. (operating as “Afloat”, “we”, “our”, or “us”) recognizes the fundamental right to privacy of every individual and is committed to processing digital personal data in strict compliance with the Digital Personal Data Protection Act, 2023 (“DPDPA”) and the DPDP Rules 2025 enacted in India.
Under the DPDPA, Afloat functions as a “Data Fiduciary” regarding the personal data provided by shippers, logistics partners, consignment owners, and website visitors (collectively referred to as “Data Principals”). This Privacy Policy serves as the itemized, standalone statutory notice mandated under Section 5 of the Act.
2. Itemized Personal Data We Collect
In adherence to the principle of Data Minimization, we collect only the personal and corporate data strictly necessary to fulfill your shipping requests:
- Corporate & Contact Data: Name, professional company affiliation, business email address, landline/mobile contact numbers, and physical business coordinates provided via our Contact or Quote inquiry forms.
- Operational & Shipping Consignment Data: Port of origin, destination, cargo descriptions, container specifications (FCL/LCL/Reefer), bills of lading references, and customs compliance documentation containing consignor/consignee contact details.
- Technical Device Data: IP address, device operating system, browser configuration, and necessary session cookies collected strictly to maintain security and prevent automated distributed denial-of-service (DDoS) threats.
3. Purpose of Processing & Lawful Grounds
In accordance with Section 4 and Section 6 of the DPDPA, personal data is processed solely on the basis of your freely given, specific, informed, unconditional, and unambiguous consent, or for legitimate legal uses:
- To calculate freight tariff rates and generate precision port agency quotes upon your request.
- To coordinate cargo clearance with Indian Customs authorities, port terminals, and marine feeder operators.
- To send operational vessel status updates, container tracking milestones, and billing invoices.
- To verify documentation for Hazmat (hazardous materials) or temperature-controlled Reefer shipments.
- To comply with legal obligations under the Indian Carriage of Goods by Sea Act, Customs Act, and Port Authority directives.
4. Security Safeguards, Retention & Breach Protocol
Reasonable Security Safeguards (Section 8(5)): All web interactions and data transfers are protected through 256-bit TLS/SSL encryption. Database repositories are segmented behind enterprise-grade firewalls with multi-factor authentication.
Storage Limitation & Retention (Section 8(7)): Personal data collected for quotes or general inquiries is erased once the inquiry is closed or when consent is withdrawn, unless statutory retention periods (such as mandatory 5-year customs audit records under Indian Maritime & Tax laws) require ongoing storage.
Personal Data Breach Notification (Section 8(6))
In the unlikely event of a personal data breach impacting your information, Afloat commits to promptly notifying the Data Protection Board of India (DPBI) and each affected Data Principal in the format and timeframe stipulated under the DPDP Rules 2025.
5. Your Data Principal Rights (Sections 11 - 14)
As a Data Principal under the DPDPA 2023, you are endowed with enforceable statutory rights:
Right to Access Information (Sec 11)
Request a summary of your personal data being processed and identities of Data Fiduciaries/Processors with whom data has been shared.
Right to Correction & Erasure (Sec 12)
Request rectification of inaccurate data, completion of incomplete records, or permanent erasure of data no longer required for its original purpose.
Right to Withdraw Consent (Sec 6(4))
You may withdraw consent at any time as easily as it was given, without affecting the legality of processing conducted prior to withdrawal.
Right to Nominate (Sec 14)
Nominate another individual who shall, in the event of death or incapacity, exercise your data protection rights on your behalf.
6. Children & Minors Policy (Section 9)
Afloat provides commercial maritime shipping, port agency, and NVOCC logistics services targeted exclusively at corporate entities and individuals aged 18 years or older.
In strict compliance with Section 9 of the DPDPA, we do not knowingly collect, process, or monitor personal data of children (individuals under the age of 18) or persons with disabilities without verifiable parental consent, nor do we engage in targeted advertising directed at minors.
8. Grievance Redressal Officer & Data Protection Board of India
In compliance with Section 8(10) and Section 13 of the DPDPA, Afloat has established a designated Grievance Redressal mechanism to address any questions, rights requests, or complaints:
Grievance Redressal Officer (GRO)
Afloat Container Lines India Pvt. Ltd.
Office 906, NMS Titanium, Sector 15,
CBD Belapur, Navi Mumbai - 400614, Maharashtra, India
Data Protection Board of India (DPBI)
If you do not receive a response from our Grievance Redressal Officer within the prescribed timeframe, or are dissatisfied with the resolution, you have the statutory right under the DPDPA 2023 to register a complaint directly with the Data Protection Board of India.