Privacy Policy

§1. Scope of this Policy

This policy applies to personal data collected through:

• Our website, platforms, and customer portals
• Email and phone communications
• Online forms, quotes, and service requests
• Business transactions, billing, and documentation
• Third-party integrations (e.g., customs brokers, payment processors)

§2. Information We Collect

§3. Lawful Basis for Processing

We process personal data only when a lawful basis exists under Article 6 of the GDPR or equivalent regulation. These include:

• Contractual Necessity – To fulfill logistics, export/import, customs, or insurance agreements
• Legal Obligation – To comply with U.S. or international customs, AML, export control, tax, or reporting laws
• Legitimate Interests – To maintain and improve operational efficiency, site performance, and fraud prevention
• Consent – For optional marketing, cookie preferences, and other non-essential services (with opt-out/withdrawal mechanisms)

§4. How We Use Your Data

• Processing shipments, orders, and fulfillment
• Issuing invoices, confirmations, and customs documentation
• Conducting customer service and business communications
• Providing account access and system notifications
• Managing contracts with vendors, carriers, and customs partners
• Complying with regulatory and security obligations
• Improving platform functionality and user experience
• Enabling cookie-based analytics and usage insights

We do not sell personal data.

§5. Data Sharing and Disclosure

§6. Data Retention

We retain personal data only as long as:

• Required by contract or regulation (e.g., customs, tax, export law)
• Necessary for billing, audit, and legal defense purposes
• Required under logistics industry best practices

Once no longer needed, data is securely deleted, anonymized, or archived in accordance with NIST and ISO 27001 data lifecycle controls.

§7. Your Rights

Depending on your jurisdiction (EEA, UK, California), you may exercise the following rights:

• Right to Access – Obtain a copy of your personal data
• Right to Rectification – Correct inaccurate or incomplete data
• Right to Erasure – Request deletion of your data (subject to exemptions)
• Right to Restriction – Limit processing in specific circumstances
• Right to Data Portability – Receive your data in machine-readable format
• Right to Object – Object to data use for legitimate interest or marketing
• Right to Withdraw Consent – Revoke consent where previously granted

To exercise these rights, contact our Privacy Department (see §10). Verification may be required before fulfilling a request.

§8. International Data Transfers

If you reside outside the United States, please note that your data may be transferred to or processed in the U.S. or other jurisdictions. We implement the following safeguards:

• Standard Contractual Clauses (SCCs) for transfers from the EEA/UK
• Transfer Impact Assessments for high-risk destinations
• Encryption and strict access controls
• Regional data hosting when required by law

§9. Security of Personal Data

We implement layered technical and organizational measures aligned with ISO/IEC 27001, NIST SP 800-53, and industry best practices. These include:

• HTTPS/TLS encryption for all web traffic
• AES-256 encryption for sensitive data at rest
• Role-based access control (RBAC) and MFA
• Regular vulnerability assessments and security audits
• Data breach response protocols and staff training on data handling

§10. Contacting Us

If you have questions or would like to exercise your privacy rights, contact our Data Privacy Officer:

§11. Changes to This Policy

We may revise this Privacy Policy periodically to reflect changes in law, our operations, or technology. Updates will be posted on this page with the revised "Last Reviewed" date. Continued use of our services after such updates constitutes acceptance of the new policy.