Privacy Policy

Last updated: July 31, 2026

1. Who We Are

BASINEX ("we," "our," or "us") provides logistics, freight forwarding, shopping delivery, package tracking, warehousing, and related services. Our website is basinex.net.

We have offices at:

• Don Oscar, Calle Peru #11, Santo Domingo Este, Santo Domingo, Dominican Republic
• Avenue Toussaint Louverture, Carrefour Fleuriot, Port-au-Prince (Airport Industrial Park), Immeuble #60, Haiti

You can reach us at: info@basinex.net

2. What This Policy Covers

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, mobile applications, and services (collectively, the "Services"). By using our Services, you consent to the practices described in this policy.

3. Information We Collect

3.1 Information You Provide Directly

When you create an account, request a quotation, place a shopping order, track a package, or otherwise interact with our Services, we may collect:

• Identity & Contact Information: Full name, email address, phone number, country of residence, and profile photo.
• Address Information: Origin/departure addresses and destination/arrival addresses for shipments.
• Product & Shipment Information: Type of products shipped, estimated values, weights, dimensions, quantities, product URLs, tracking numbers, and external order/reference numbers.
• Payment Information: Payment amounts, bank transfer details, receipt uploads, and payment status records.
• Identity Documents: When you designate a representative for package pickup, we may collect that person's name, phone number, email, national ID / passport / driver's license number, badge ID, and photo ID.
• Communications: Messages, notes, and comments you submit through our platform.
• Uploaded Files: Invoices, receipts, shipping documents, and photos you upload.

3.2 Information Collected Automatically

When you use our Services, we may automatically collect:

• Device Information: Device type (iOS/Android), device name, and preferred language/locale for push notifications.
• Technical Data: IP address, browser type, operating system, and access times.
• Cookies and Similar Technologies: Session cookies (to keep you logged in), CSRF tokens (for security), and authentication tokens (JWT) stored on your device. See Section 7 for details.

4. How We Use Your Information

We use your personal information for the following purposes:

• Service Fulfillment: To process quotations, manage shipments, track packages, facilitate shopping orders, handle pickups, and deliver the logistics services you request.
• Account Management: To create and maintain your user account, authenticate you, and communicate with you about your account.
• Notifications: To send you push notifications and emails about shipment status updates, payment confirmations, and service-related communications.
• Customer Support: To respond to your inquiries, support requests, and feedback.
• Billing & Payments: To generate invoices, process payments, and maintain financial records.
• Legal Compliance: To comply with applicable laws, regulations, and legal obligations related to customs, international shipping, and financial record-keeping.
• Service Improvement: To analyze usage patterns and improve our Services.

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who assist us in operating our Services, including:
  • Mailjet (email delivery service) — processes emails we send to you, including notification and transactional emails.
  • Expo Push API (push notification service) — delivers push notifications to your mobile device(s). We send your device token to Expo's servers to enable this.
  • Zoho (CRM and invoicing) — may be used to manage estimates and invoices.
  • Hosting and infrastructure providers who host our servers and database.
• Shipping & Logistics Partners: With carriers, customs brokers, and warehouse operators necessary to fulfill your shipments.
• Legal Obligations: When required by law, court order, or governmental regulation (including customs authorities).
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets.

6. Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area or the United Kingdom, we process your personal information based on:

• Contractual Necessity: Processing necessary to fulfill our contract with you (e.g., delivering logistics services you requested).
• Legitimate Interests: Processing for our legitimate business interests (e.g., improving our Services, fraud prevention), provided these do not override your rights.
• Legal Obligation: Processing required to comply with applicable laws (e.g., customs documentation, financial records).
• Consent: Where you have given explicit consent (e.g., for push notifications). You may withdraw consent at any time.

7. Cookies and Tracking Technologies

Our website uses the following types of cookies and similar technologies:

• Essential Cookies: Session cookies (to maintain your login state) and CSRF tokens (to protect against cross-site request forgery attacks). These are necessary for the website to function and cannot be disabled.
• Authentication Tokens (JWT): When you use our API or mobile applications, a JSON Web Token (JWT) is stored on your device to authenticate you. The access token expires after 1 hour; a refresh token (valid for 7 days) is used to obtain new access tokens.
• Preference Cookies: We store your language preference to display content in your chosen language.

We do not currently use third-party analytics or advertising cookies. You can configure your browser settings to refuse cookies; however, this may affect the functionality of our Services.

8. Data Retention

We retain your personal information for as long as necessary to:

• Fulfill the purposes described in this policy;
• Comply with legal obligations (including customs, tax, and financial record-keeping requirements);
• Resolve disputes and enforce our agreements.

When your information is no longer needed, we will securely delete or anonymize it. You may request deletion of your account and associated data by contacting us (see Section 11).

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS);
• Secure authentication mechanisms (JWT with token rotation, Django's built-in security middleware);
• Access controls limiting data access to authorized personnel;
• Regular security updates and patches.

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data (subject to legal retention requirements).
• Restriction: Request limitation on how we process your data.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw Consent: Withdraw previously given consent at any time (e.g., disable push notifications by unregistering your device through the app).

To exercise any of these rights, contact us at info@basinex.net. We will respond within the timeframe required by applicable law.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: info@basinex.net
• Address: Avenue Toussaint Louverture, Carrefour Fleuriot, Port-au-Prince (Airport Industrial Park), Immeuble #60, Haiti

12. International Data Transfers

Our Services are operated from the Dominican Republic and Haiti. Your information may be transferred to and processed in countries other than your country of residence, including the United States (where our push notification provider, Expo, and email provider, Mailjet, process data). These countries may have data protection laws different from those in your jurisdiction. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.

13. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page and, for material changes, notify you by email or through a prominent notice on our website. Your continued use of the Services after any changes constitutes acceptance of the updated policy.