Privacy policy

Blink is the same-day courier brand of Aboutalib Logistics, based in Egypt. In this policy, “Blink,” “we,” “us,” and “our” mean Aboutalib Logistics operating as Blink.

Questions about this policy or your personal data: support@blink-shipping.com.

This policy describes how we collect, use, share, and retain personal data when you use Blink services, including:

• This website, public tracking, and contact forms
• The Partner portal, Admin console, Operations tools, and Courier app
• The Blink shipping API used by brands, Shopify, and other integrators
• The Blink Shopify app that sends eligible store orders to Blink

It does not cover websites, checkout, or marketing run by the brands you buy from. Those brands have their own privacy policies for how they take your order.

Blink is the controller for data we collect directly to run our own services: website inquiries, partner and staff accounts, courier operations, settlements, and public tracking requests.

When a brand (including a Shopify merchant) sends us a shipment, that brand is typically the controller of its customer relationship. Blink processes the delivery details they provide so we can pick up, move, and deliver the parcel. We also use that data as an independent courier to operate the last mile, prevent fraud, handle claims, and meet legal duties.

If you ordered from a local brand, start with that brand for most customer-data requests. We will help when the request is about data Blink holds for delivery.

We collect only what we need to deliver, support, bill, and secure the service. The mix depends on how you use Blink.

Website visitors. If you contact us, we receive your name, email address, and message. The form on this site opens your email client; the message is sent to our support inbox. Server logs for this site and our APIs may include IP address, browser type, referring URL, and request time.

People receiving a delivery. Brands send us what we need to complete the job: recipient name, phone (and backup phone if provided), email if provided, delivery address (street, building, city, area, landmark), order reference, package description, item count, cash-on-delivery amount, and whether the package may be opened. We generate a tracking number, order code, status timeline, attempt reasons, and AWB records.

Public tracking. Anyone with a tracking number can see status, city and area, brand name, courier name, timestamps, and attempt reasons. We do not publish the full street address, phone number, or email on the public tracking page.

Brands and partner users. We hold company name, contact email and phone, pickup and return addresses, hashed API keys, webhook URL and secret, login name and email, password hash, shipment history, delivery fees, COD totals, and payout records (including proof of payment we store for settlements).

Shopify merchants. The Shopify app stores the shop domain, staff session needed to keep the app signed in, encrypted Blink API key, shipping settings, and operational order records (Shopify order ID and name, Blink shipment ID, tracking number, status, COD amount, fulfillment ID, and error text). The app does not keep shopper email, phone, or street address in its own database. Those fields are read from the Shopify order at send time and passed to the Blink shipping API to create the delivery.

Couriers and operations staff. We hold name, phone, email, role, assigned city and areas, vehicle details, and — while a courier is working — location updates used to assign and complete stops.

We do not sell personal data. We do not use your delivery details to build advertising profiles.

We use personal data to:

• Create, route, pick up, deliver, attempt, return, or exchange shipments
• Issue tracking numbers, AWBs, and status updates, including the public tracking page
• Notify the brand via authenticated webhooks when status changes
• Collect COD, calculate fees, and pay merchants
• Authenticate API keys and portal logins, and keep tenants isolated from each other
• Prevent abuse, debug failures, and keep the service secure
• Answer support requests from brands and, where appropriate, recipients
• Meet legal, tax, and accounting duties in Egypt
• Onboard new brands who contact us through this website

We process personal data under Egypt’s Personal Data Protection Law No. 151 of 2020 and, where it applies (for example Shopify merchants or shoppers in the EEA/UK), the GDPR or UK GDPR.

• Contract: delivering a shipment, running a partner or staff account, or providing the Shopify app and shipping API
• Legitimate interests: securing the platform, preventing fraud, improving operations, and providing public tracking to anyone who has the number
• Legal obligation: records we must keep for tax, complaints, or lawful requests
• Consent: where we ask for it (for example optional marketing email). You can withdraw consent without affecting delivery of an existing order

We share personal data only as needed to run the service:

• The brand that created the shipment, including through their dashboard, API, and webhooks
• Couriers and operations staff assigned to the job
• Infrastructure providers that host our databases, cache, files, and websites (for example cloud hosting, object storage for payout proof, and the Shopify app host)
• Shopify, when a merchant uses our app, so tracking and fulfillment can be written back to the store
• Professional advisers and authorities when required by law or to defend a claim

We require processors to use data only on our instructions and to protect it. We do not sell personal data to data brokers or advertisers.

Tracking numbers are not sequential. Anyone who has a number can look up that shipment. Treat the number like a receipt: share it with the recipient, not publicly.

The public page shows delivery progress (city and area, status, timeline, attempt reason). It does not show the full address or phone. We may rate-limit lookups to reduce automated scanning.

The Blink Shopify app is free. It reads orders and customer shipping details from Shopify so eligible Cairo/Giza same-day orders can be sent to Blink. It writes tracking and fulfillment events back to the store, and can mark COD orders paid when Blink reports delivered.

Shopify is the platform controller for store and checkout data. The merchant is the controller for their customer relationship. Blink is the courier that receives the shipping payload needed to deliver.

Mandatory Shopify privacy webhooks:

• customers/data_request — we log the request. The app does not store shopper contact or address records; Blink shipping records for those order IDs can be provided to the store owner on request
• customers/redact — we delete the app’s order-shipment rows for the listed order IDs
• shop/redact — we delete the shop’s config, sessions, and order-shipment rows after uninstall, within Shopify’s required window

Uninstalling the app removes the Shopify connection. Shipments already created in Blink remain in the courier system until retained under the periods below, unless a lawful deletion request applies.

This marketing and tracking website does not currently set advertising or analytics cookies. Pages may use local storage only where a form needs it in the browser. We may add privacy-friendly analytics later; if we do, this section will be updated before it goes live.

Signed-in Blink products (Partner, Admin, Operations, Courier) and the Shopify app use cookies or tokens that are necessary to keep you logged in, protect the session, and remember shop context. Those are not used for advertising.

We keep personal data only as long as needed for the purpose we collected it, including legal and accounting retention in Egypt:

• Website inquiries: while we handle the request, then as long as needed for follow-up or a related complaint
• Shipments, tracking history, AWBs, and COD/settlement records: for the life of the delivery plus the period we must keep commercial and tax records (typically several years under Egyptian bookkeeping rules)
• Partner, staff, and courier accounts: for the life of the account, then a short period after closure unless a longer legal hold applies
• Shopify app operational rows: until the merchant uninstalls and Shopify’s shop/customer redact webhooks run, or until the merchant asks us to delete records we can lawfully remove
• Security logs: for a limited period to investigate abuse

When we no longer need data, we delete it or irreversibly anonymise it.

We use technical and organisational measures appropriate to a courier platform: TLS in transit, hashed API keys and passwords, tenant-scoped queries, signed webhooks, and access limited to roles that need the data. No method of storage or transmission is perfectly secure. If we become aware of a breach that affects your personal data, we will notify you and the competent authority as required by law.

Blink is operated from Egypt. Some infrastructure (hosting, databases, file storage, the Shopify app) may process data in other countries. When we transfer personal data outside Egypt or, where GDPR applies, outside the EEA/UK, we use safeguards recognised by applicable law, such as contracts with our processors.

Subject to Egyptian PDPL (and GDPR/UK GDPR where they apply), you may ask us to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete data we no longer need to keep
• Restrict or object to certain processing
• Receive a copy of data you provided, in a usable format, where portability applies
• Withdraw consent where processing is based on consent

Email support@blink-shipping.com with “Privacy request” in the subject. Tell us which email, phone, tracking number, or shop the request relates to so we can find the right records. We may need to verify your identity. If you are a shopper, we may route the request through the brand or Shopify store that took your order.

You may also complain to Egypt’s Personal Data Protection Centre, or to your local data-protection authority if GDPR applies to you.

Blink services are built for businesses and adult recipients. We do not knowingly collect personal data from children to market to them. If you believe we have data about a child that we should not have, contact us and we will delete it where the law allows.

We will update this page when our practices or the law change. The effective date at the top is the current version. Material changes will be posted here; if we hold an account email for you, we may also notify you there.

Privacy and data-protection requests: support@blink-shipping.com. Aboutalib Logistics, operating as Blink, Egypt.