Last updated: 18 October 2026
Who we are and how to contact us
M&M Logistics Services Limited is responsible for the personal information used to operate this website and provide our freight services between the United Kingdom and The Gambia. For privacy questions or requests, email mmlogistics2017s@gmail.com or use the details on our contact page.
Information we handle
When you contact us or arrange a shipment, we may receive your name, phone number, email address, collection or delivery address, messages, and sender or recipient details. Service records may include shipment references, cargo descriptions, delivery updates, invoices, and payment records. A sender may provide a recipient’s details so we can arrange delivery. Please only provide information needed for your enquiry or shipment.
If you create a customer app account, we process your name, verified email address, password authentication records, optional phone number and address, saved booking progress, and links to your bookings and shipments. Booking and service records may also contain cargo details and sender or recipient contact information.
Visiting the website also involves technical information such as your IP address, browser, requested pages, and request times being processed by our hosting services to deliver and protect the website.
Why we use information
We use information to answer enquiries, arrange and track shipments, communicate service updates, manage payments, and resolve problems. Where applicable, this processing is necessary to take steps at your request or perform our contract with you. We also process information to meet legal obligations, including accounting and customs requirements, and for legitimate interests in operating and securing our services and communicating with shipment recipients. Where we rely on consent, including for consent-based marketing, you can withdraw it at any time.
Who receives information
Information needed to provide the service may be handled by authorised staff, freight and delivery partners, hosting and database providers, and communication providers. Information may also be provided to customs authorities, regulators, or professional advisers where needed for legal obligations or claims. Shipment information may be shared with the sender or recipient to coordinate delivery.
Freight between the UK and The Gambia requires information to be used in those countries. Technology providers may also process information elsewhere. Contact us for details of the recipients, locations, and transfer arrangements relevant to your information.
Cookies, storage, and external services
Public information pages do not require an account. Staff sign-in uses browser storage to maintain authenticated access. The contact page embeds Google Maps, which receives technical information when the map loads and may use cookies or similar technologies. You can manage cookies and site storage through your browser settings.
The mobile app stores sign-in tokens and unfinished booking progress in secure device storage. Convex hosts the app database, backend functions, and customer authentication. Transactional email providers deliver verification and service messages. Expo may deliver signed app updates to installed versions of the app.
The app does not request GPS location. Addresses are details you type when completing a profile or arranging a collection. The current app does not include a separate advertising or product analytics SDK. Our service providers may still process technical information needed to operate, secure, diagnose, and update the service.
Following links to WhatsApp, Google Maps, or other external services brings you under those services’ privacy policies. Shipment tracking uses the reference you enter to find shipment updates. Keep your tracking reference private.
How long information is kept
When customer account deletion completes, we delete the app identity, authentication records, private profile, retained login email, account-to-shipment links, and unfulfilled app requests. Confirmed or completed logistics records, including relevant contact, cargo, payment, event, and communication records, may be retained separately where needed to complete the service, meet accounting or legal requirements, or resolve disputes.
Convex backups can temporarily contain information deleted from the live database. Convex documents manual and daily logical backups as available for 7 days and weekly logical backups for 14 days. Provider-controlled operational logs may also persist after live deletion; Convex does not publish a fixed hosted function-log retention duration in its public documentation.
We also keep our own encrypted disaster recovery copies of the whole database, taken every week. We keep 12 weekly, 12 monthly, and 7 yearly copies, so information deleted from the live database can remain in these encrypted copies for up to 7 years until the copy that holds it is removed. They are used only to recover the service after a serious failure. We do not use backups to restore a deleted customer account in ordinary operation.
Your privacy rights
Depending on applicable law and the circumstances, you may request access to, correction of, or deletion of your personal information, restriction of its use, or a portable copy. You may also object to processing, including direct marketing, and withdraw consent where processing is based on it. Withdrawing consent does not affect earlier lawful processing. Contact us using the details above; we may need to verify your identity before responding.
For customer app deletion instructions, visit the account deletion page.
You can also raise a concern with the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint, or the relevant data protection authority where you live.
Changes to this policy
We may update this policy as our services or requirements change. The date above shows when this version was last updated.