Value Allies builds integration and intelligence software for the air cargo industry and sells it worldwide. This statement explains what personal data we hold, why we hold it, how we protect it and what you can ask us to do about it. It is our global baseline: it applies wherever you are, and section 08 adds the detail that specific regions require.

01Who we are

“Value Allies”, “we” and “our” mean the companies below. Which one is responsible for your data depends on where you are: for the UK, the European Economic Area, Switzerland, the Americas and the rest of the world outside India, it is Value Allies Ltd. For India, and for our own corporate operations, it is Value Allies Software Pvt. Ltd.

We also operate in Canada through one of the companies above. For any privacy question, or to exercise a right, write to secretary@valueallies.com.

02Personal data we collect

• What you give us. The enquiry form on this site opens a message in your own email application — it does not send data to a server we control. When you write or call, we receive your name, company, email address, telephone number and whatever you choose to tell us.
• What we collect automatically. Our hosting provider keeps standard server logs: IP address, date and time, page requested, referring page, browser and device type. We also use a small number of cookies, listed in our Cookie Policy.
• What we collect from public business sources. Professional contact details from a company website, a conference delegate list, a professional network such as LinkedIn, or an introduction. Business contact information only, never personal profiles.

03Why we use it, and our legal basis

Where a law requires us to identify a legal basis for each use of personal data — as the UK and EU GDPR do — these are ours:

What we do	Legal basis
Respond to your enquiry and arrange a demonstration or proposal	Legitimate interests in answering a request you made; or steps prior to entering a contract
Deliver and support our solutions, administer contracts, invoice and keep records	Performance of a contract; legitimate interests in managing our business
Tell professionals in the air cargo industry about what we do	Legitimate interests in promoting our business to a professional audience; consent where the law requires it
Keep the website secure, and measure how it is used	Legitimate interests in protecting our systems; consent for analytics, given through the cookie banner
Meet tax, corporate and regulatory obligations, and defend legal claims	Legal obligation; legitimate interests

Where we rely on legitimate interests we have weighed them against your rights and concluded they are not overridden. You can ask for that assessment, and you can object — see section 07. Where a law in your country requires consent instead, we ask for consent.

04Client data: what we do not hold

05Who we share with, and where data goes

• Service providers — website hosting, email and productivity, analytics, accounting and professional advisers. Each acts on our instructions under a written agreement.
• Within the Value Allies group — between the companies in section 01, where needed to run the business and support you, under an intra‑group agreement on standard contractual clauses.
• Where the law requires it — to a court, regulator, tax authority or law enforcement body.
• On a business transaction — if we reorganise or are acquired, subject to this statement continuing to apply.

International transfers

We are registered in India and the United Kingdom, we serve clients worldwide, and some of our providers are in the United States and the European Union. Personal data therefore moves between countries. We say plainly that India is a routine processing location, because our engineering and support teams are based there — buyers in the UK and the EU will want to know this, and we would rather state it than be asked.

Where personal data protected by UK or EU law leaves that jurisdiction, we rely on:

• an adequacy decision, where one covers the destination;
• the EU–US Data Privacy Framework and its UK Extension, where the recipient is certified under it;
• otherwise the European Commission’s Standard Contractual Clauses, or the UK International Data Transfer Agreement or Addendum, supported by a transfer risk assessment and any additional safeguards it identifies.

For transfers governed by the law of another country, we use the mechanism that law provides — an approved set of contractual clauses, a recognised certification, or your consent. Ask us and we will send you the safeguard that applies to your data.

06How long we keep it, and how we protect it

Data	Retention
Enquiries that do not lead to a relationship	Up to 24 months from last contact
Client and supplier contract records	The term of the contract, then as tax and company law requires — generally six to eight years
Business development contacts	Until you ask us to stop, reviewed periodically
Unsuccessful job applications	12 months, unless you ask us to keep them on file
Server logs and cookie consent record	A short rolling period; consent record 12 months, then we ask again

When a retention period ends we delete the data, or anonymise it so it can no longer identify anyone.

Security measures

Security is a design constraint in our products, not an afterthought, and we hold ourselves to the same standard. Our measures include:

• encryption of data in transit, and at rest where the platform supports it;
• access granted on a least‑privilege basis, reviewed periodically, and removed when someone leaves or changes role;
• multi‑factor authentication on our business and cloud systems;
• logging of integration activity, so access can be traced;
• separation between client environments, with no shared data store across clients;
• written security commitments from our providers, and a review of any provider before we adopt it.

No system is perfectly secure. If a personal data breach occurs that is likely to present a risk, we will notify the relevant authority within the time its law allows — 72 hours under the UK and EU GDPR — and tell the people affected where the law requires it.

07Your rights

Most data protection laws give you a similar set of rights. Where the law that applies to you provides them, you may ask us to:

• tell you what personal data we hold about you and why, and give you a copy;
• correct it if it is wrong, or complete it if it is missing something;
• delete it, in the circumstances the law allows;
• pause our use of it while a concern is looked into;
• send it to you, or to someone else, in a portable machine‑readable form;
• stop using it where we rely on legitimate interests, and stop sending you marketing at any time;
• withdraw a consent you gave — which does not affect anything we did beforehand.

How to exercise a right. Email secretary@valueallies.com. We may ask for information to confirm who you are. We respond within the period your law allows — one month under the UK and EU GDPR, 45 days under US state privacy laws — and without undue delay everywhere else. There is no charge, unless a request is manifestly unfounded or excessive.

If you are not satisfied, please come to us first; most concerns are settled quickly. You can also complain to the data protection authority where you live or work. Section 08 names the authority for several regions.

08Regional information

The blocks below add the detail that particular regions require. Where a block below conflicts with anything above it, the block applies to you.

United Kingdom, European Economic Area and Switzerland

Controller: Value Allies Ltd. The applicable laws are the UK GDPR and Data Protection Act 2018, the EU GDPR, and the Swiss Federal Act on Data Protection. The rights in section 07 apply in full, including the right to lodge a complaint with a supervisory authority: the Information Commissioner’s Office (ico.org.uk) in the UK, the authority of the country where you live or work in the EEA, or the Federal Data Protection and Information Commissioner in Switzerland.

India

Data fiduciary: Value Allies Software Pvt. Ltd. Under the Digital Personal Data Protection Act, 2023 you may obtain a summary of your personal data and our processing of it, have it corrected, completed, updated or erased, and nominate another person to exercise your rights if you die or become incapacitated.

United States

Where a state privacy law applies to us — and as a matter of practice whether or not it does — you may ask what personal information we hold and why, request a copy, ask us to correct or delete it, and exercise these rights without being treated differently for doing so. We do not sell or share personal information as those terms are defined under California law, and we do not use it for cross‑context behavioural advertising, so there is nothing for you to opt out of. You may use an authorised agent; we will ask for proof of their authority. You may also complain to your state Attorney General.

Everywhere else

We do business across the Middle East, Africa, Asia‑Pacific and the Americas, and we apply this statement as our global baseline in all of them. Where a local law gives you additional rights or requires a particular mechanism — Brazil’s LGPD, Canada’s PIPEDA, Singapore’s PDPA, Australia’s Privacy Act, Japan’s APPI, South Africa’s POPIA, the UAE and DIFC data protection laws, or Saudi Arabia’s PDPL among them — that law applies and we honour it. Write to us and we will tell you which law we are applying to your data, which Value Allies company is responsible, and how to complain to the regulator in your country.

09Cookies, children, changes and contact

We ask for your consent before setting any cookie that is not strictly necessary, and you can change your choice at any time using the Cookie Settings link in the footer of every page. Our Cookie Policy lists each one. This site loads typefaces from Google Fonts, which sends your IP address to Google; you can block third‑party resources in your browser, and we are working to self‑host these fonts.

This is a business website. It is not directed at children, and we do not knowingly collect personal data from anyone under 18, or under the higher age your local law may set. If you believe a child has given us personal data, tell us and we will delete it.

We review this statement when our processing changes and at least once a year. The version and date at the top tell you which version you are reading, and if a change materially affects how we handle your data we will say so prominently on this page. Earlier versions are available on request.

Questions, or to exercise a right: secretary@valueallies.com.

Value Allies Software Pvt. Ltd.  ·  Registered in India  ·  CIN U62091TN2023PTC162023  ·  GST 33AAJCV5276D1Z9
Value Allies Ltd  ·  Registered in England and Wales, company number 14808534  ·  VAT 529455759

← Back to valueallies.com