Privacy Notice

• Account details — your name, email address, phone number, and the Caribbean address we deliver to.
• A government photo ID — required, because we declare goods to customs as your agent.
• Package information — tracking numbers, merchants, contents as declared, weights, dimensions, and the value of goods.
• Merchant invoices you upload, including order numbers and prices.
• Photographs we take of your parcel, its shipping label, and any damage.
• Proof of collection — who took the parcel, their relationship to you, and the type and last four digits of the ID shown. We never store a full ID number.

We do not sell your data, share it with advertisers, or use your identity documents for anything other than customs and identity checks.

Access follows the job. Warehouse staff see the parcels they handle and cannot reach billing or customer records. Drivers see the stops on their run. Front-desk staff see what they need to release a parcel. Administrators can see everything.

Your identity document is visible only to you and to administrators, and is served through an authorising route rather than a public URL — guessing an address does not reach it.

Anyone with a tracking number can look up a parcel’s status on our public tracking page, without logging in. That page deliberately shows only vetted progress updates, the destination island, and your first name.

It does not show who collected a parcel, the names of our staff, your mailbox number, your balance, warehouse shelf locations, or the shipment your parcel travelled in. Carrier tracking numbers are printed on the outside of every box and pass through several third parties, so we treat them as public and publish nothing against them that isn’t.

Customs and commercial records are kept for seven years, which is the period we may be asked to produce them for. Identity documents are kept while your account is open and for seven years afterwards for the same reason. Intake photographs are kept for two years. Delete your account and we remove what we are not required to retain.

Passwords are stored hashed, never in plain text. Sessions are httpOnly cookies. Uploaded documents are stored outside the public web root. Repeated failed sign-in attempts are throttled. Administrative actions affecting money or access are recorded in an audit log.

No system is perfect. If you believe your account has been accessed without your permission, contact us immediately.

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete your account. Some records we must keep for the retention period above even after deletion; we will tell you which.

Email stargateimports@gmail.com and we will respond within 30 days.

See also our Terms & Conditions.