HALCYON LOGISTICS · LEGAL
Privacy policy.
LAST UPDATED 16 OCTOBER 2026
Your privacy matters to us. This policy explains what personal data Halcyon collects when you use our website and client portal or work with us on a shipment, why we collect it, who we share it with and the rights you have under the Data Protection Act 2017 of Mauritius.
1Who we are
This website (halcyonlogistic.com) and the Halcyon client portal are operated by Halcyon Logistics Ltd (“Halcyon”, “we”, “us”), a company incorporated in Mauritius (BRN C26235790) with its registered office at 2A Falcon Street, 10th Floor, The Peninsula, Caudan, Port Louis 11326, Mauritius.
Halcyon is the controller of the personal data described in this policy for the purposes of the Data Protection Act 2017 of Mauritius. Where we handle personal data on your behalf as part of a shipment (for example, consignee contact details you give us), we use it only to perform that shipment and as the law requires.
2The personal data we collect
We collect only what we need to quote, move and account for your freight, and to keep our systems secure:
- Quote requests: your name, company, email address, the origin and destination you enter, and a description of what you want to move.
- Client portal accounts: your name, business email address, the company you represent, a securely hashed password (we never store or see your actual password), and dates of sign-in.
- Shipment and customs information: names, addresses, phone numbers and email addresses of shippers, consignees and notify parties, together with commercial invoices, packing lists, bills of lading, air waybills and other documents needed to move goods and clear customs.
- Correspondence: emails, phone messages and other communications you send to our sales or operations desks.
- Billing information: invoicing contacts, billing addresses and payment records. We do not collect or store payment card details on this website.
- Technical information: IP address, browser type, the pages requested and the date and time of each request, recorded in standard server and security logs.
We do not intentionally collect special categories of personal data (such as health, religious or political information), and we ask that you do not include it in documents or messages you send us.
3How and why we use it
We use personal data only for the purposes below, each of which has a lawful basis under the Data Protection Act 2017:
- To respond to quote requests and enquiries: to take steps at your request before entering into a contract.
- To arrange, track and deliver shipments and clear goods through customs: to perform our contract with you or your company.
- To provide and secure the client portal: to perform our contract, and in our legitimate interest in protecting our systems and your information.
- To invoice, keep accounts and meet customs, tax, anti-money-laundering and trade-compliance obligations: to comply with legal obligations that apply to us.
- To keep the website running and to detect and prevent fraud, abuse and security incidents: in our legitimate interests.
We will only send you marketing emails if you have asked to receive them or are an existing client and have not opted out. Every marketing email will include a simple way to unsubscribe. We do not sell personal data, and we do not use it for automated decision-making that has legal or similarly significant effects on you.
4Cookies and similar technologies
We keep cookies to a minimum. We do not use advertising, tracking or analytics cookies.
- Session cookie: a strictly necessary cookie that keeps you signed in to the client portal (or our staff signed in to internal tools). It is deleted when you sign out or the session expires.
- Theme preference: the light or dark display setting you choose is stored locally on your device so the site remembers it. It is not sent to us.
Because these are strictly necessary for the site to work as you request, we do not ask for cookie consent. If we ever introduce optional cookies, we will ask for your consent first and update this policy.
5Who we share it with
Freight forwarding involves many parties, and we share personal data only as far as each one needs it:
- Carriers and transport partners: shipping lines, airlines, hauliers, and our overseas agents and correspondents who handle your cargo at origin or destination.
- Ports, terminals and authorities: port and airport operators, the Mauritius Revenue Authority (Customs) and customs and border authorities in other countries, and other public bodies where the law requires it.
- Service providers who support our business: our website hosting provider, Cloudflare (security and content delivery), Google Fonts (which receives your IP address when it delivers the fonts used on our pages), OpenStreetMap (which receives it the same way when it delivers the map tiles on our tracking pages), our email provider, and our professional advisers, auditors and insurers.
- Others where required: courts, regulators or law-enforcement bodies where we are legally obliged to disclose information, or to establish or defend legal claims; and a buyer or successor if all or part of our business is sold or restructured.
Our service providers act on our instructions and are required to keep personal data secure and confidential.
6International transfers
International freight means personal data has to travel. Shipment information is sent to agents, carriers and authorities in the countries your cargo moves through, and our website servers and backups are located outside Mauritius.
When we transfer personal data outside Mauritius, we do so in line with the Data Protection Act 2017. We limit what is sent to what the job requires and rely on appropriate safeguards, such as contractual protections with our providers and agents, or on the transfer being necessary to perform the contract you have asked us to carry out.
7How long we keep it
- Quote requests that do not become bookings: up to two years from our last contact with you.
- Client portal accounts: for as long as the account is active. We deactivate accounts on request or when a client relationship ends.
- Shipment, customs and accounting records: for as long as Mauritian company, tax and customs law requires us to keep them, and for any longer period needed to deal with a claim or dispute.
- Technical and security logs: overwritten on a rolling basis, usually within a few weeks.
When personal data is no longer needed, we delete it or anonymise it securely.
8How we protect it
We use technical and organisational measures appropriate to the risk, including:
- Encryption: all traffic to the website and portal is encrypted in transit (HTTPS).
- Password protection: passwords are protected with a strong one-way hashing algorithm (scrypt).
- Account security: sign-in attempts are rate-limited, and sessions are managed on our servers.
- Access controls: each client sees only its own company’s shipments and documents, and our staff have access only where their role requires it.
No system is completely secure. If a personal data breach occurs that is likely to put your rights at risk, we will notify the Data Protection Commissioner and, where required, you, in line with the Data Protection Act 2017.
9Your rights
Under the Data Protection Act 2017 you have the right to:
- Access: ask whether we hold personal data about you and receive a copy.
- Correction: ask us to correct personal data that is inaccurate or incomplete.
- Erasure: ask us to delete personal data we no longer need or have no lawful basis to keep. We may need to keep some records to meet legal obligations.
- Objection and restriction: object to our use of your data based on legitimate interests, or ask us to restrict how we use it, in the circumstances the law allows.
- Marketing: tell us at any time to stop sending you marketing communications.
- Withdrawing consent: where we rely on your consent, withdraw it at any time. This does not affect anything we did before you withdrew it.
To exercise any of these rights, email info@halcyonlogistic.com. We may need to confirm your identity first. We will respond within one month, or tell you if we need longer and why. There is normally no charge.
If you are unhappy with how we have handled your personal data, please contact us first so we can try to put it right. You also have the right to complain to the Data Protection Office of Mauritius (dataprotection.govmu.org).