Privacy Policy

Effective Date: 1st April 2015
Last Updated On: 10th January 2025

Welcome to M S Mehta & Co. (“we”, “us”, “our”). We are a government-authorized Customs House Agent (CHA License No. 11/0385, PAN-based License No. AAFFM8799PCH001) and logistics service provider engaged in customs clearance, freight forwarding, transportation, and allied logistics services. We are committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, disclose, store, retain, and safeguard information when you visit https://msmehta.in/ or interact with us through our website, official communication channels, or offline documentation for service execution.

This Privacy Policy applies to personal data collected digitally and physically, including statutory KYC records, shipping documents, regulatory filings, commercial records, and business communications. By accessing our website or availing of our services, you consent to the practices described in this Privacy Policy.

1. Information We Collect

We collect information strictly necessary to provide logistics services and to comply with statutory and regulatory mandates applicable to Customs Brokers and logistics service providers.

Personal Information You Provide

When you request a quote, submit an inquiry, or engage us as your Customs Broker, we may collect:

Identity Data: Name, designation, job title, authorized signatory details
Contact Data: Email address, mobile number, office address
KYC Data: PAN, Aadhaar, Importer Exporter Code (IEC), GSTIN, AD Code, authorization letters, and other documents as required under Regulation 10(n) of the Customs Brokers Licensing Regulations, 2018
Shipment Data: Commercial invoices, packing lists, shipping instructions, cargo details, Bills of Lading / Airway Bills, declarations, permits, licenses, and regulatory filings

By submitting personal or business data, you confirm that you are authorized to provide such information on behalf of the relevant individual or entity. We rely on the accuracy and completeness of information provided by you or your authorized representatives. We shall not be responsible for consequences arising from incorrect, incomplete, misleading, or outdated information supplied by clients or their representatives.

Communication Data

Records of communication exchanged via:

Email
Mobile
WhatsApp
Website forms
Other messaging or collaboration platforms

These records are maintained for service coordination, regulatory correspondence, inquiry handling, compliance, dispute resolution, and audit purposes. Official email & WhatsApp communications may be archived and retained as required by law.

Technical & Usage Data

When you visit our website, we may automatically collect limited non-personal information such as:

IP address
Browser type and version
Device and operating system
Pages visited and time spent
Referring URLs
Cookies and basic analytics data

This data is used solely for website security, fraud prevention, performance monitoring, analytics, and functionality improvement.

Shipment Tracking Data

When you use our various Customs tools, we process the tracking numbers (AWB, BL, Container Number, etc.) entered by you solely to retrieve shipment status from shipping lines, airlines, or other relavant authorized systems. We do not independently verify the accuracy of third-party tracking data and disclaim responsibility for delays, errors, or discrepancies originating from external systems.

2. How We Use Your Information

We process personal data only for lawful and legitimate purposes, including:

Service Delivery: Customs clearance, freight forwarding, transportation, warehousing, documentation, and logistics support
Regulatory Compliance: Filing Bills of Entry / Shipping Bills via ICEGATE, Partner Government Agencies (PGAs), customs audits, and legal obligations
Communication: Shipment updates, regulatory requirements, documentation follow-ups, inquiry responses, and service coordination
Legal & Accounting Obligations: Taxation, audit, customs compliance, statutory record-keeping
Website Security & Performance: Monitoring, analytics, fraud prevention, and system integrity
Client Testimonials: With explicit consent, we may display testimonials including name, business name, or industry reference
Recruitment: Professional and educational data submitted for job applications is used solely for recruitment evaluation

3. Lawful Basis for Processing

We process personal data on the basis of:

Consent provided by the Data Principal
Performance of contractual obligations
Compliance with legal and regulatory requirements
Legitimate use under Section 7 of the Digital Personal Data Protection Act, 2023

4. Data Protection & Indian Law Compliance

We process personal data in accordance with applicable Indian laws, including:

Digital Personal Data Protection Act, 2023
Information Technology Act, 2000
Customs Brokers Licensing Regulations, 2018
Allied customs, taxation, and logistics regulations

As a Data Principal, you have the right to:

Access a summary of personal data being processed
Request correction or updating of inaccurate data
Withdraw consent (subject to statutory retention requirements)
Request erasure where legally permissible
Nominate another individual to exercise your rights
Seek grievance redressal

Withdrawal of consent may limit or prevent our ability to provide or continue services where such data is mandatory for customs clearance or regulatory compliance.

5. Sharing of Information & Government Disclosures

We do not sell or rent personal data. However, information may be shared due to the regulated nature of our business with Government & Regulatory Authorities as well as Logistics & Business Partners including but not limited to:

Indian Customs (ICEGATE)
DGFT
Port Authorities
Partner Government Agencies (FSSAI, Drug Controller, Animal & Plant Quarantine, etc.)
Courts, auditors, and enforcement agencies
Shipping lines
Airlines
Transporters
Warehouses and CFS
Overseas agents
IT and compliance service providers

Data is shared strictly on a need-to-know basis for service execution Limited data may also be transferred to overseas agents or foreign authorities for cross-border shipments, in compliance with Section 16 of the DPDP Act, 2023. We do not transfer personal data to any country restricted by the Government of India.

6. Data Retention (Statutory Mandate)

Under Regulation 10(p) of the Customs Brokers Licensing Regulations, 2018, customs-related records must be preserved for at least five (5) years. Requests for deletion within this period will be lawfully declined as permitted under Section 8(7) of the DPDP Act, 2023. Non-transactional inquiry data is retained for up to 12 months or until consent is withdrawn. Once the data is no longer required, it is securely deleted or anonymized.

7. Cookies & Third-Party Services

We use:

Strictly necessary cookies (site functionality & security)
Analytics cookies (performance monitoring)

Users may control cookies through browser settings. Disabling cookies may affect website functionality. Third-party services may include:

Hosting & CDN providers
Analytics tools (e.g., Google Analytics)
Mapping services (e.g., Google Maps)
Communication platforms (e.g., WhatsApp Business)

These services operate under their own privacy policies. Our website does not currently respond to “Do Not Track” signals.

8. Data Security

We implement reasonable technical, physical, and organizational safeguards, including:

Secure servers for digital records
Access-controlled physical document storage
Limited internal access on a need-to-know basis

Clients are advised not to transmit sensitive data over unsecured networks unless expressly requested.

9. Force Majeure

We are not responsible for delays, outages, or data unavailability caused by:

Government portals (ICEGATE, DGFT, etc.)
Shipping line or airline systems
Cyber incidents
Third-party infrastructure failures
Events beyond our reasonable control

10. General Polices

Indemnity – Clients agree to indemnify and hold M S Mehta & Co harmless against penalties, losses, delays, or regulatory consequences arising from false, inaccurate, incomplete, or misleading information provided by them or their representatives.
Automated Decision Making – We do not use personal data for automated profiling or decision-making that produces legal or significant effects. Nothing in this policy creates a fiduciary, partnership, or agency relationship beyond contractual or statutory obligations.
External Links – Our website may contain links to third-party websites. We are not responsible for their content or privacy practices.
Children’s Privacy – Our services are intended for business users. We do not knowingly collect personal data of individuals under 18 years of age.

This Privacy Policy is governed by Indian law and subject to the exclusive jurisdiction of courts in Mumbai, Maharashtra. If any provision is held unenforceable, remaining provisions shall remain valid. We may update this Privacy Policy periodically. The “Last Updated” date reflects the most recent revision.

11. Grievance Officer & Contact Details

Grievance Officer (DPDP Act Compliance Officer)
M S Mehta & Co
📧 Email: hello@msmehta.in
📞 Phone:+91-98709-71171
📍 Address:
31, Khatau Building, 2nd Floor
8/10 Alkesh Dinesh Modi Marg
Opp. BSE Tower, Fort
Mumbai – 400001