Personal Data Protection
Khan Cargo LLC — www.khan.az
This document sets out the principles and security measures applied by “Khan Cargo” LLC (hereinafter “Khan Cargo” or the “Company”) when processing customers’ personal data.
Personal data means any information provided by customers when using Khan Cargo services that makes it possible to identify a natural or legal person. The document complies with the Law of the Republic of Azerbaijan “On Personal Data”.
General principles
Khan Cargo collects and processes customer data only for clear, lawful, and previously stated purposes. The Company may use or disclose personal data to: determine service preferences and offer personalized solutions; inform the customer about products, services, marketing, and advertising; protect Khan Cargo’s legitimate interests; fulfill legal obligations in judicial proceedings; promote Khan Cargo services and third-party special offers considered relevant to the customer. Registration data is collected in line with State Customs Committee requirements and to provide quality service. The Company undertakes not to disclose personal data, including payment card data, to third parties without consent, except where directly required by Azerbaijani law.
Legal bases for processing
Khan Cargo processes personal data on the following legal bases: the customer’s consent to processing, expressed through registration, ordering a service, or completing a separate form; performance of a contract with the customer; obligations imposed by Azerbaijani law, including customs, tax, and accounting requirements; the Company’s legitimate interests, including fraud prevention, service quality analysis, and dispute resolution.
Categories of processed data
To provide services, Khan Cargo collects and processes: for individuals — name, patronymic, date of birth, ID series/number and PIN, residential and registered address, phone and email, payment card details (full number not stored); for legal entities — official name and legal form, TIN and legal address, authorized representative contacts, bank details; shipment data — sender details, tracking numbers, invoices, cargo description, weight, dimensions, and value, other declaration documents; technical data — IP address, browser and device data, site usage statistics, and cookies.
Security principles
Khan Cargo implements organizational and technical measures to prevent accidental deletion or disclosure of personal data, including payment card data. Organizational measures include internal rules, confidentiality obligations and training, access limited to necessary staff, and internal audits. Technical measures include SSL/TLS encryption, multi-level database access, regular backups, antivirus and network monitoring, and PCI DSS-certified payment processing. Physical measures include restricted access to servers and media and protection from fire and other external risks. Khan Cargo is responsible for protecting customers’ personal and payment card data.
Data retention period
Personal data is retained as follows: service-related data while the account is active and for the statutory archive period after closure; customs, accounting, and tax documents for the period required by law (usually 5 years); marketing data until consent is withdrawn. When the retention period ends, data is irreversibly destroyed or anonymized.
Obligations of the data subject
The customer is responsible for answers provided in the registration form. Incomplete or inaccurate answers may lead the Company to suspend or terminate the service.
The customer undertakes to ensure the accuracy of provided data and to promptly notify the Company of changes.
Rights of the data subject
Under the Law of the Republic of Azerbaijan “On Personal Data”, the customer may: obtain information about processing of their data; request correction of inaccurate or outdated data; request deletion when there is no legal basis; withdraw consent at any time; opt out of marketing notices; complain to the competent state authority. Requests may be sent to [email protected] or the Company’s official address and are reviewed within 30 business days.
Procedure in case of a data breach
If unlawful access, loss, or disclosure of personal data is detected, Khan Cargo investigates the cause and scope, takes urgent measures to mitigate consequences, notifies the competent authority and affected customers as required by law, and applies additional security measures to prevent similar incidents.
Document changes
Khan Cargo reserves the right to amend this document. The updated version takes effect when published on the site. Customers are notified of material changes by email or a notice on the site.
Contact
For questions, requests, and complaints about personal data processing, contact Khan Cargo:
Company: “Khan Cargo” LLC
Email: [email protected]
Phone: (+994) 70 210 10 39
Address: Absheron Trade Center, row 2, building 2, Shop 10
