Privacy Policy

★ LEGAL

Star World Holdings is committed to protecting your privacy. This Policy explains what personal information we collect, how we use it, and what rights you have in relation to it.

⎯ SECTION 01

Who We Are

Star World Holdings, Lda. is a 100% Timorese-owned multi-sector enterprise founded in Dili, Timor-Leste in 2010. We operate across six business divisions: Logistics & Transport, Electrical Installation, Construction, Mining Exploration, Shophouse Leasing, and Procurement & Supply. Our boutique brand, Clarita Boutique, also operates under the Star World Holdings group.

For the purposes of this Privacy Policy, “Star World Holdings,” “we,” “us,” or “our” refers to Star World Holdings, Lda., the data controller responsible for your personal information.

⎯ SECTION 02

Information We Collect

We collect personal information only when it is necessary to provide our services or respond to your enquiries. The types of information we may collect include:

Information You Provide Directly

Full name, company name, and job title
Email address and phone number
Postal or physical address (for quotations, deliveries, or contracts)
Details of the service or enquiry you submit through our Contact or Quote request forms
Shipment tracking reference numbers submitted through our WPCargo tracking form
Any other information you voluntarily include in a message or document sent to us

Information Collected Automatically

IP address and approximate geographic location
Browser type, device type, and operating system
Pages visited on our website, time spent, and navigation paths
Referring website or search terms that led you to our site
Cookie identifiers and session data (see Section 6)

Information from Third Parties

We may receive information about you from third parties such as business referral partners, government agencies (in relation to permits and contracts), or logistics partners, when relevant to a service engagement. We handle all such data under the same standards as this Policy.

⎯ SECTION 03

How We Use Your Information

We use personal information for the following purposes:

To respond to enquiries, contact form submissions, and service requests
To prepare and deliver quotations, contracts, invoices, and related business documents
To provide logistics and shipment tracking services via our WPCargo system
To communicate updates, news, or service-related information relevant to your engagement with us
To comply with legal, regulatory, or contractual obligations under Timorese law
To improve the functionality, performance, and content of our website
To detect, prevent, and respond to security threats or fraudulent activity
To maintain accurate business and client records

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects on you.

⎯ SECTION 04

Legal Basis for Processing

We process your personal information on the following legal grounds:

Contractual necessity — to fulfil a contract or to take steps at your request prior to entering a contract
Legitimate interests — to operate our business, respond to enquiries, improve our services, and maintain our website, where these interests are not overridden by your privacy rights
Legal obligation — to comply with applicable laws, regulations, and government requirements in Timor-Leste
Consent — where you have clearly given consent for a specific purpose, such as receiving marketing communications (you may withdraw consent at any time)

⎯ SECTION 05

Sharing Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

Service providers and partners: Trusted third-party vendors who assist us in operating our website or conducting our business (such as web hosting, email services, logistics platforms like WPCargo), subject to confidentiality obligations
Business and joint-venture partners: Where a service engagement involves a partner organisation (for example, our joint venture with Gengo for mining exploration), only information necessary for that engagement will be shared
Government and regulatory bodies: When required by law, court order, or government authority in Timor-Leste
Professional advisors: Lawyers, accountants, or auditors when necessary for legal or compliance purposes
Business transfer: In the event of a merger, acquisition, or sale of company assets, personal data may be transferred as part of that transaction, subject to equivalent privacy protections

Any third party who receives personal data from us is required to keep it confidential and use it only for the purpose for which it was shared.

⎯ SECTION 06

Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and to understand how visitors use the site. Cookies are small text files stored on your device.

Types of Cookies We Use

Essential cookies: Required for basic site functionality, including navigation and form submissions. The site cannot function properly without these.
Analytics cookies: Help us understand visitor behaviour, page performance, and site traffic patterns (e.g. Google Analytics or equivalent). Data collected is aggregated and anonymised where possible.
Functional cookies: Remember your preferences and settings to improve your experience on return visits.
WPCargo cookies: Used to support the shipment tracking functionality integrated into our website.

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. Please note that disabling certain cookies may affect the functionality of our website. For more information on managing cookies, visit www.allaboutcookies.org

⎯ SECTION 07

Data Retention

We retain your personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our general retention guidelines are:

Contact and enquiry records: Up to 2 years from the date of the last interaction, unless a contract or ongoing service relationship exists
Client and contractual records: Up to 7 years following the completion of a contract or service engagement, in accordance with Timorese commercial record-keeping requirements
Shipment tracking records: For the duration required by logistics and customs regulations
Website analytics data: Up to 26 months from collection, consistent with standard analytics platform retention settings

When personal data is no longer required, we securely delete or anonymise it.

⎯ SECTION 08

Data Security

Star World Holdings takes the security of your personal information seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, loss, or destruction. These measures include:

SSL/TLS encryption for all data transmitted between your browser and our website
Access controls ensuring that only authorised personnel can access personal data
Regular review and update of our website security practices
Use of reputable hosting and service providers with established security standards

While we take every reasonable precaution, no method of transmission over the internet or electronic storage is completely secure. If you become aware of any security concern related to your data, please contact us immediately at info@starworld-timorleste.tl

⎯ SECTION 09

Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by Star World Holdings:

Right to access: You may request a copy of the personal data we hold about you.
Right to correction: You may request that we correct inaccurate or incomplete personal data.
Right to deletion: You may request that we delete your personal data, subject to our legal obligations to retain certain records.
Right to object: You may object to our processing of your personal data where we rely on legitimate interests as the legal basis.
Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
Right to data portability: You may request that we provide your personal data in a structured, commonly used format, where technically feasible.

To exercise any of these rights, please contact us using the details in Section 13. We will respond to your request within a reasonable timeframe and in compliance with applicable legal obligations.

⎯ SECTION 10

Third-Party Links

Our website may contain links to external websites, including partner organisations, government portals, and social media platforms. This Privacy Policy applies only to www.starworld-timorleste.tl. We are not responsible for the privacy practices or content of any third-party websites.

We encourage you to review the privacy policies of any external websites you visit through links on our site. The inclusion of a link does not imply our endorsement of that site’s privacy or data practices.

⎯ SECTION 11

Children's Privacy

Our website and services are directed at business clients, professionals, and adults. We do not knowingly collect personal information from individuals under the age of 18. If you believe that a child has provided personal data to us, please contact us immediately and we will take prompt steps to delete such information from our records.

⎯ SECTION 12

Changes to This Policy

Star World Holdings reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will update the “Last Updated” date at the top of this page and, where appropriate, notify you via email or a notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website after any changes are posted constitutes your acceptance of the updated Policy.