ShipCamp ("we," "us," or "our") is a logistics and freight forwarding company operating across Central, Eastern, and West Africa (CCA) and the Middle East and Africa (MEA) regions. We are committed to protecting your personal data and respecting your privacy in accordance with applicable data protection laws, including the Nigerian Data Protection Act 2023 (NDPA), the EU General Data Protection Regulation (GDPR), and the UK GDPR. This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit our website or use our services.

We collect the following categories of personal data:

We collect data directly from you, automatically through cookies and tracking technologies, and from third-party service providers involved in the delivery of your shipments.

We process your personal data for the following lawful purposes:

• To fulfil your shipment and logistics requests and administer your account.

• To process payments, issue invoices, and manage billing.

• To provide real-time tracking and delivery notifications.

• To comply with customs, trade, and regulatory obligations in countries of transit or destination.

• To improve our website, services, and customer experience.

• To communicate with you about your account, services, and promotions (where you have consented).

• To detect fraud, ensure security, and meet legal obligations.

Our legal bases for processing include: performance of a contract, compliance with legal obligations, your consent (where applicable), and our legitimate interests where these do not override your rights.

We do not sell or rent your personal data. We may share it with:

• Logistics partners, customs agents, and freight carriers necessary to fulfil your shipment.

• Payment processors and financial institutions for billing purposes.

• IT service providers and platform operators acting as data processors under our instructions.

• Regulatory authorities, law enforcement, or courts where required by law.

All third parties are required to handle your data securely and in compliance with applicable law. Where data is transferred outside your country of residence, we apply appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

We use cookies to:

• Enhance user experience

• Analyze website traffic and performance

• Remember user preferences

You may control or disable cookies through your browser settings.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. Shipment records are typically retained for seven (7) years. You may request deletion of your data where no overriding legal obligation applies.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.

• Correct inaccurate or incomplete data.

• Request deletion of your data ("right to erasure").

• Object to or restrict processing in certain circumstances.

• Data portability — receive your data in a structured, machine-readable format.

• Withdraw consent at any time where processing is based on consent.

• Lodge a complaint with your local data protection authority.

To exercise your rights, please contact us at: privacy@shipcamp.com

Our website uses cookies and similar technologies to enhance functionality and analyse usage. You will be presented with a cookie consent prompt on your first visit. You may manage or withdraw your cookie preferences at any time through your browser settings. Declining certain cookies may affect website functionality.

We implement industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, or disclosure. These include encryption, access controls, and regular security reviews. While we take all reasonable steps, no transmission over the internet is entirely secure.

We may update this Privacy Policy from time to time. Material changes will be notified on our website. Continued use of our services after the effective date of any update constitutes your acceptance of the revised policy.

Our website may contain links to third-party websites. We are not responsible for their privacy practices or content.

ShipCamp — Data Privacy Team

• Email: privacy@shipcamp.co

For complaints under the NDPA, you may contact the Nigeria Data Protection Commission (NDPC) at www.ndpc.gov.ng. For EU/UK GDPR complaints, you may contact your local supervisory authority.