ASA Logistics (“we”, “us”, “our”) is a freight and logistics company providing air freight, sea freight, customs clearance, and UK delivery services. Our registered address is in the United Kingdom. We are registered with the Information Commissioner’s Office (ICO) and are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For data protection enquiries, contact us at: info@asalogistics.co.uk

We may collect the following personal data when you interact with our website or services: Contact and identity information: Full name, company name, email address, phone number, job title. Shipment and logistics data: Collection and delivery addresses, postcodes, cargo descriptions, weight and dimensions, special handling requirements. Communication data: Messages, enquiries, and correspondence submitted via our contact forms or email. Technical data: IP address, browser type and version, time zone, browser plug-in types, operating system, and other technology identifiers on the devices you use to access our website. Usage data: Information about how you use our website, including pages visited, time spent, and referring URLs.

We use your personal data for the following purposes, under the lawful bases indicated: To respond to your enquiries and provide quotes (Legitimate Interest / Contract Performance): We use your contact and shipment details to prepare and deliver freight quotations. To fulfil contracted logistics services (Contract Performance): We process your shipment data to arrange collection, transport, customs clearance, and delivery. To send service-related communications (Contract Performance / Legitimate Interest): Updates on your shipment, booking confirmations, and necessary operational communications. To improve our services (Legitimate Interest): Analysing usage patterns to enhance our website and customer experience. To comply with legal obligations (Legal Obligation): Retaining records required by HMRC, customs authorities, and transport regulations.

We do not sell your personal data. We may share your data with: Carriers and transport partners: Shipping lines, airlines, hauliers, and logistics partners who need your information to perform delivery services. Customs authorities: HMRC, UK Border Force, and equivalent international customs bodies where required for import/export declarations. Technology service providers: Our IT systems, website platform, and communications infrastructure providers who process data on our behalf under Data Processing Agreements. Professional advisors: Solicitors, accountants, and insurers, where necessary for legal and financial compliance. All third parties are required to handle your data securely and in accordance with applicable data protection law.

Some of our logistics services involve transferring shipment data to parties located outside the UK, including in China, the EU, and other jurisdictions. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, such as: • Standard Contractual Clauses (SCCs) approved by the ICO • Adequacy decisions where applicable • Binding corporate rules where relevant You may request details of the specific safeguards applicable to your data by contacting us.

We retain personal data only for as long as necessary for the purposes set out in this policy, or as required by law: Enquiry and quote data: 12 months from last contact, unless a contract is entered into. Active customer data: Duration of the business relationship plus 7 years (to comply with HMRC record-keeping requirements). Website usage data: Up to 12 months. After the applicable retention period, data is securely deleted or anonymised.

Under UK GDPR, you have the following rights regarding your personal data: Right to Access: Request a copy of the personal data we hold about you (Subject Access Request). Right to Rectification: Request correction of inaccurate or incomplete data. Right to Erasure: Request deletion of your data where there is no legal basis for continued processing (“right to be forgotten”). Right to Restrict Processing: Request that we limit how we use your data in certain circumstances. Right to Data Portability: Receive your data in a structured, machine-readable format. Right to Object: Object to processing based on legitimate interests or for direct marketing. Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time. To exercise any of these rights, contact us at info@asalogistics.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the ICO at ico.org.uk.

We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption, access controls, regular security reviews, and staff training. No method of transmission over the internet is 100% secure. If you have reason to believe your interaction with us is no longer secure, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The “Last Updated” date at the bottom of this page will be revised accordingly. We encourage you to review this policy periodically.

For any questions about this Privacy Policy or how we handle your personal data, please contact: ASA Logistics — Data Protection Email: info@asalogistics.co.uk Phone: 01274 048 048 Post: ASA Logistics, [Registered Address], United Kingdom