1. Who we are
CargoSelect is based in Perth, Western Australia. We buy the groceries you choose from Australian supermarkets, pack them and ship them to Sri Lanka. This policy explains what information we collect, why, who we share it with and what you can ask us to do. Questions about your information: info@cargoselect.com.au.
2. What we collect
- About you: your name, email address, phone number and address.
- About the person receiving the box: their name, phone number, address in Sri Lanka and NIC or passport number. Sri Lankan customs needs these to clear the box.
- Your order: the boxes and products you choose, prices, delivery or collection choice, and the order and payment status.
- Bring your own box: the pickup address, postcode, date and time.
- Signing in: the one-time codes we send by email or text message, and, if you sign in with Google, your name and email address from Google.
- Messages: what you send us through the website's forms, by email, phone or WhatsApp.
- How you use the website: pages visited, device and browser type, IP address and cookies (see section 5).
We never see or store your card number. Card payments are handled by Stripe.
3. Why we use it
To buy, pack and ship your order; to clear customs and deliver it in Sri Lanka; to send your sign-in codes, order confirmations, invoices and updates; to answer your questions; to prevent fraud and misuse; to measure and improve our website and advertising; and to keep the records the law requires.
4. Who we share it with
Only the companies that help us do this:
- Stripe: card payments.
- Twilio: sign-in codes by text message.
- Zoho: our email.
- Amazon Web Services (Sydney) and Vercel: hosting the website and our systems.
- Our shipping, customs and delivery partners in Australia and Sri Lanka: what they need to move and clear your box, including the recipient's details.
- Google: Google Analytics and, if you use it, Google sign-in.
- Meta (Facebook and Instagram): to measure our ads (see section 5).
We don't sell your information. We may also share it when the law requires us to.
5. Cookies, analytics and advertising
- Google Analytics shows us how people use the website. It uses cookies.
- The Meta pixel measures our Facebook and Instagram ads: for example, that someone who saw an ad later placed an order. It uses cookies. If you're signed in, the pixel also uses your email address and phone number in a scrambled (hashed) form, so Meta can match the visit to an account.
- Meta Conversions API: when you place an order, our server tells Meta about the purchase (order value and products) along with your email address, phone number and name in hashed form, your IP address, browser type and Meta's cookie IDs. This helps us measure our ads when browsers block the pixel. We don't send Meta your recipient's details or their NIC or passport number.
You can block or delete cookies in your browser settings. You can also control ad tracking in your Facebook and Instagram settings (Settings > Accounts Centre > Ad preferences) and in your Google account.
6. Overseas
The recipient's details go to Sri Lanka for customs and delivery. Some of the companies in section 4 (for example Stripe, Twilio, Google, Meta and Vercel) may store or process information outside Australia, including in the United States.
7. Keeping it safe
Our website and systems use encrypted connections, and only our staff who need your information can see it.
8. How long we keep it
As long as we need it for your order and for as long as tax and customs law requires. After that we delete it.
9. Your rights
You can ask to see or correct the information we hold about you, or ask us to delete it where the law allows, by emailing info@cargoselect.com.au. If you're unhappy with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
10. Changes
If we change this policy, we'll update it here and change the date at the top.