This Privacy Policy describes how Starlight Express Pvt. Ltd. ("Starlight Express", "we", "us", or "our") collects, uses, discloses, and protects personal information when you visit our website at www.starlight.com.np (the "Site") or use our services. We are committed to protecting your privacy and handling your personal data in compliance with the EU General Data Protection Regulation (GDPR), the UK GDPR, and applicable Nepalese laws.
1. Who We Are (Data Controller)
The data controller responsible for your personal data is:
- Starlight Express Pvt. Ltd.
- G.P.O Box 12713, Kathmandu, Nepal
- Email: [email protected]
- Phone: +977-1-4155451
2. What Information We Collect
2.1 Information you provide directly
- Contact form data: name, company, email, phone number, message content.
- Shipment tracking requests: Air Waybill (AWB) numbers you submit.
- Business correspondence: emails, calls, and other communications.
2.2 Information collected automatically
- Technical data: IP address, browser type, device type, operating system, referring URL.
- Usage data: pages visited, time spent, links clicked (only if you consent to analytics cookies).
- Cookies and similar technologies — see Section 7 below.
2.3 Information from third parties
- CargoMIS: when you track a shipment, the AWB number is forwarded to CargoMIS (cargomis.net) which returns shipment data.
- Google Maps: if loaded, may set cookies and collect data per Google's policy.
3. How We Use Your Information (Purposes & Legal Bases)
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Respond to your enquiries and contact requests | Performance of a contract / Legitimate interest |
| Provide AWB shipment tracking | Performance of a contract / Legitimate interest |
| Maintain and improve the Site (essential functions) | Legitimate interest |
| Analyze website usage to improve content | Consent |
| Marketing communications (if applicable) | Consent |
| Comply with legal obligations | Legal obligation |
4. Who We Share Your Data With
We do not sell your personal data. We share it only with:
- Airline principals we represent as GSSA, where necessary to fulfil cargo bookings.
- CargoMIS (cargomis.net) — for shipment tracking lookups.
- Kales Group affiliates — for coordinated global GSSA operations, where required.
- Service providers (hosting, email, analytics, anti-spam) under contractual data-protection obligations.
- Authorities when required by law (customs, civil aviation, court order).
5. International Transfers
Because we are a global GSSA partner network, your data may be transferred outside Nepal or your country of residence — including to the European Union, the United States, India, and other Kales Group office locations. When transferring data outside the European Economic Area (EEA), we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs).
6. Data Retention
We keep personal data only as long as necessary for the purposes set out above and to comply with our legal obligations. Typical retention periods:
- Contact form enquiries: up to 2 years
- Business correspondence: up to 7 years (regulatory)
- Tracking lookups (logs): up to 90 days
- Cookie consent records: up to 12 months
7. Cookies & Similar Technologies
Our Site uses cookies and similar technologies. You can manage your preferences at any time using the cookie banner — click here to reopen the cookie preferences.
7.1 Categories of cookies we use
| Category | Purpose | Requires consent? |
|---|---|---|
| Strictly Necessary | Site functions: navigation, security, language, consent storage | No |
| Analytics | Understand visitor behaviour and improve content (if used) | Yes |
| Marketing | Tailor advertising (if used) | Yes |
Until you give consent, no analytics or marketing cookies are set. Your consent choice is stored in your browser's local storage under starlight_cookie_consent_v1. You can withdraw consent at any time.
8. Your Rights (under GDPR)
Where GDPR applies to your data, you have the right to:
- Access your personal data (Art. 15)
- Rectify inaccurate data (Art. 16)
- Erasure — "right to be forgotten" (Art. 17)
- Restrict processing (Art. 18)
- Data portability (Art. 20)
- Object to processing based on legitimate interest or for direct marketing (Art. 21)
- Withdraw consent at any time without affecting prior lawful processing
- Lodge a complaint with a supervisory authority — in the EEA, the data protection authority of your country of residence
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
9. Security
We use appropriate technical and organisational measures — including SSL/TLS encryption, access controls, and secure hosting — to protect your personal data from unauthorised access, disclosure, alteration, or destruction.
10. Children
Our Site is intended for business users and is not directed at children under 16. We do not knowingly collect personal data from children.
11. Third-Party Links
Our Site contains links to third-party sites (including Kales Group, CargoMIS, Google Maps). We are not responsible for their privacy practices. Please review their privacy policies before providing personal data.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised "Last updated" date. For material changes affecting how we use your data, we will provide additional notice.
13. Contact Us
For any privacy-related question, request, or complaint, contact:
- Starlight Express Pvt. Ltd. — Privacy Office
- G.P.O Box 12713, Kathmandu, Nepal
- Email: [email protected]
- Phone: +977-1-4155451