LincQ Privacy Notice

1. Who this notice covers

This notice explains how LincQ collects, uses, shares and protects personal data when you use the app as a sender, traveller or sea-freight carrier. It works alongside the Terms & Conditions. LincQ is operated by NGARI TECH LTD (company number 17423289), a company registered in England and Wales with its registered office at 852 Brighton Road, CR8 2FD, reachable at info@lincq.app. Production use still requires a data protection officer or UK/EU representative to be added below, if required.

2. Information we collect

Account details (name, email, password, profile photo); identity verification information where checks are required (the identity document you upload, its verification status, and any notes from our review team); booking and shipment details (pickup and delivery addresses, item description, weight, value, trip and route information); messages exchanged between booking participants; payment status and references (never full card numbers or mobile-money credentials, which are handled directly by our payment providers); evidence such as photos or notes attached to a booking; support requests; device and usage information needed to operate and secure the app; and, where you allow it, push-notification delivery information.

3. Why we use your information

The lawful basis we rely on depends on the specific purpose (subject to final legal confirmation):

• Create and manage your account — performance of our contract with you.
• Manage a booking, from request to completion — performance of our contract with you.
• Fraud prevention and platform security, including detecting abuse — our legitimate interest in running a safe marketplace.
• Legal, customs, tax and safety compliance — compliance with a legal obligation that applies to us.
• Marketing communications — your consent, or our legitimate interest, depending on the channel used and subject to applicable electronic-communications rules (PECR).

Processing payments, deposits, balances and refunds through our payment providers, and enabling in-app communication between booking participants and customer support, are both necessary to perform our contract with you.

4. Payments

Card, PayPal and mobile-money payments are processed by our payment partners: Stripe, PayPal, pawaPay and Modem Pay. Not every payment method is available at all times — the app shows what is currently offered. LincQ never receives or stores your full card number, mobile-money PIN, PayPal password, or equivalent credentials. We keep a record of payment status, provider references and amounts so bookings, deposits, balances and refunds can be tracked and disputed if needed.

5. Identity verification

Where identity checks are required, identity documents are reviewed by authorised LincQ personnel rather than by an external identity-verification provider — a member of our team reviews the document you upload by hand, and records the verification outcome and any review notes. LincQ may use contracted technology providers to host, store or secure this information on its behalf (see section 6), subject to appropriate data-protection terms, but the review decision itself is always made by our own staff, never an outside company. We keep the document for as long as needed for safety, fraud-prevention and legal compliance purposes, and delete it when it is no longer needed for those purposes.

6. Who we share information with

The other participant in a booking (for example, a sender and the traveller or carrier they are matched with) sees the information needed to complete that booking, such as a name, route, and — where a handover method requires it — a collection or delivery address. We also share information with the specific companies who help us run the service: our payment providers (Stripe, PayPal, pawaPay and Modem Pay) to process payments; Supabase to host our database, sign-in and file storage; Google Firebase to deliver push notifications; Sentry to monitor and fix errors; PostHog to understand how the app is used; Resend to send account and transactional emails; and Vercel to host our guest checkout page. Identity documents are reviewed by our own staff, not an outside verification company. Where legally required, we also share information with regulators, law enforcement or professional advisers. We do not sell personal data.

7. International transfers

Some of the companies we work with are based outside the UK and EEA, including PayPal, Google (for push notifications) and Resend (for email) in the United States. Others we use — Supabase, Sentry and PostHog — process data within the EU. We are completing a provider-by-provider review to confirm, for each one: the Article 28 data-processing terms that apply, and — where a restricted transfer occurs — the correct UK transfer mechanism, which may be an adequacy regulation, the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses, as applicable to that specific provider. We do not rely on a generic reference to “standard contractual clauses” alone. This section will be updated with the confirmed position, provider by provider, once that review is complete.

8. How long we keep information

We keep financial and booking records for around 6 years, in line with UK tax and accounting record-keeping requirements. If you ask us to delete your data, identity documents, in-app messages, support correspondence and core profile details are kept for 30 days after that request, to allow time to resolve anything already in progress, and are then deleted or anonymised. You can request deletion or an export of your data at any time from the “Your data” option in Account settings.

If you never make a deletion request, the same categories are still not kept indefinitely — they are reviewed against normal retention triggers such as account closure, the date of your last booking or activity on the platform, the expiry of any applicable dispute period, or a specific legal record-keeping period that applies to that category, whichever is relevant.

9. Keeping your information secure

Access to personal data is restricted by account-level permissions so that, in general, only the people involved in a booking — or staff handling a report, dispute or support request — can see it. Payment credentials are never handled or stored by LincQ directly. No system is completely secure, and we will disclose any notifiable data breach as required by law. If you believe you have found a security vulnerability, or suspect a data breach affecting LincQ, contact security@lincq.app.

10. Your rights

Subject to applicable law, you may ask to access, correct, delete or restrict the personal data we hold about you, object to certain processing, or request a portable copy of it. You can exercise most of these directly from your account, or by contacting support. You may also complain to your local data protection regulator (in the UK, the Information Commissioner's Office).

11. Children

LincQ is not intended for anyone under 18, consistent with the eligibility rules in the Terms & Conditions. We do not knowingly collect personal data from children.

12. Cookies and similar technology

The LincQ app itself does not use advertising cookies. A separate guest checkout web page, used only when someone without an account needs to pay for a delivery, uses the minimum technology needed to complete that payment securely and does not track visitors for advertising purposes.

13. Changes to this notice

We may update this Privacy Notice from time to time. Where a change is material, we will take reasonable steps to bring it to your attention. Any change to the purposes or lawful basis for processing personal information will be assessed in accordance with applicable data-protection law.

14. Contact us

LincQ is operated by NGARI TECH LTD (company number 17423289), registered office 852 Brighton Road, CR8 2FD. For support or to exercise your data rights, contact info@lincq.app. To report a security vulnerability or a suspected data breach, contact security@lincq.app.