1. Information We Collect

We only collect information you voluntarily provide or that is automatically generated when you use our website.

Information you provide directly:

Contact & Quote Form: Name, mobile number, email address, city/location, and your message or enquiry.
Shipment Tracking Widget: LR number / docket number you enter to track a consignment.

Information collected automatically:

IP address and general geographic region (via server access logs).
Browser type, device type, operating system, and referring URL.
Pages visited and time spent (via server logs only — we do not use Google Analytics or similar tools).

We do not collect payment card details, Aadhaar numbers, PAN, or any other sensitive financial or government identity information through this website.

2. How We Use Your Information

To respond to your service enquiries, quotes, or feedback.
To process and display shipment tracking results for the LR number you enter.
To improve the performance, content, and usability of our website.
To prevent spam and fraudulent submissions (via Google reCAPTCHA).
To comply with applicable legal obligations under Indian law.

We do not use your data for targeted advertising, profiling, or automated decision-making.

3. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information to any third party. Limited sharing occurs only in the following cases:

Google reCAPTCHA v3: The contact form is protected by Google reCAPTCHA. Google may collect certain data to detect bot activity. This is governed by Google’s Privacy Policy.
Google Maps: Our Network page embeds a Google Maps frame. Google may collect data as per their privacy policy when you interact with the map.
TransportTrack: Clicking “Track Shipment” redirects you to our third-party tracking portal at devxps.transporttracks.com. That service has its own privacy practices.
Legal requirement: We may disclose information if required by a court order, government authority, or applicable law.

4. Cookies & Tracking

We use a minimal cookie setup:

Session cookie (PHPSESSID): A temporary server-side session cookie used solely for CSRF token security on the contact form. It is deleted when you close your browser.
We do not use advertising cookies, analytics cookies, or any persistent tracking cookies.

Most browsers allow you to refuse or delete cookies through their settings. Disabling session cookies may cause the contact form to stop working correctly.

5. Data Security

We implement the following technical and organisational measures to protect your data:

HTTPS (TLS) encryption for all data in transit.
CSRF token validation on all form submissions.
Server-side input validation and sanitisation.
Restricted direct access to sensitive configuration files.
HTTP security headers (HSTS, X-Frame-Options, Content-Security-Policy).

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

Contact form enquiries: Retained for up to 12 months for business correspondence purposes, then securely deleted.
Server access logs: Retained for 30 days for security monitoring, then automatically overwritten.
Session data: Deleted at end of browser session.

7. Your Rights

Under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000, you have the following rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you.
Right to Correction: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your personal data where it is no longer necessary.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
Right to Grievance Redressal: Lodge a complaint with our grievance officer.

To exercise any of these rights, email us at [email protected] with the subject line “Data Privacy Request”. We will respond within 30 days.

8. Children’s Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a child has submitted personal data through our site, please contact us immediately and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our business practices. The “Last Updated” date at the top of this page will reflect the most recent revision. We encourage you to review this page periodically.

10. Contact Us

For any questions, requests, or complaints regarding this Privacy Policy:

Company: DEV XPS Transport
Address: Chandralok Hotel Campus, Jamal Road, Patna, Bihar 800001, India
Email: [email protected]
Phone: +91 93865 59129