Privacy Policy
Last updated: February 24, 2026
Allied CHB Corp. (“Allied CHB,” “Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information and business data you entrust to us. This Privacy Policy describes how we collect, use, store, share, and protect your information when you use our website at alliedchb.com (the “Site”), our online tools, or engage us for customs brokerage services (collectively, the “Services”).
By using the Services, you consent to the practices described in this Privacy Policy. If you do not agree with the practices described herein, you should not use the Services or provide any personal information to us.
1. Information We Collect
1.1 Information You Provide Directly
We collect information that you voluntarily provide to us, including:
- Account Information: Name, email address, phone number, company name, job title, and password when you create an account on our platform.
- Power of Attorney Data: Full legal name, business entity type, IRS/EIN number, importer of record number, physical address, signature, and government-issued photo identification, as required to execute customs POA documents.
- Customs & Trade Data: Commercial invoices, bills of lading, packing lists, certificates of origin, import/export documentation, HTS classification data, bond information, entry summaries, and other documents necessary for customs clearance.
- Payment Information: Invoice number, payment amount, and email address for payment processing. Credit card information is transmitted directly to Stripe and is never stored on our servers.
- Communication Data: Emails, phone calls, messages, and other correspondence you send to or receive from us.
- Contact Form Submissions: Name, email, phone number, company name, and any additional information you provide through our contact or quote request forms.
1.2 Information Collected Automatically
When you visit the Site, we may automatically collect certain information, including:
- Device & Browser Information: IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
- Usage Data: Pages visited, time spent on pages, links clicked, referring URLs, date/time of access, search queries, and navigation patterns.
- Cookies & Similar Technologies: We use cookies, web beacons, and similar technologies to enhance your experience, remember preferences, and analyze Site usage. See Section 8 (Cookies & Tracking Technologies) for details.
- Log Data: Server logs recording requests made to our website, including access times, error logs, and request parameters.
1.3 Information from Third Parties
We may receive information about you from third-party sources, including:
- Government Agencies: CBP, FDA, USDA, EPA, and other government agencies may provide information related to your customs entries, including entry status, examination results, liquidation notices, and compliance actions.
- Business Partners: Freight forwarders, carriers, and other logistics providers may share shipment-related information necessary for customs clearance.
- Payment Processors: Stripe provides us with transaction confirmation, payment status, and fraud detection information.
- Analytics Providers: Third-party analytics services may provide aggregated website usage data.
2. How We Use Your Information
We use the information we collect for the following purposes:
| Purpose | Examples |
|---|---|
| Providing Brokerage Services | Filing customs entries, ISFs, and PGA data with CBP and other agencies; classifying merchandise; calculating duties and taxes; managing your customs bond |
| Processing Transactions | Generating invoices, processing payments through Stripe, advancing government charges on your behalf |
| Account Management | Creating and maintaining your account, authenticating access, managing user permissions |
| Communications | Sending shipment status updates, CSMS alerts, invoice notifications, bond renewal reminders, regulatory updates, and responding to your inquiries |
| Legal Compliance | Meeting recordkeeping obligations under 19 CFR Part 163, responding to government inquiries, complying with sanctions screening requirements |
| Improving Services | Analyzing usage patterns, improving our website and tools, developing new features, training internal staff |
| Security | Detecting and preventing fraud, unauthorized access, and other security incidents |
| Marketing | Sending trade compliance updates, industry newsletters, and service announcements (only with your consent or as permitted by law; you may opt out at any time) |
3. Legal Bases for Processing
We process your personal information on the following legal bases:
- Performance of a Contract: Processing necessary to perform our customs brokerage services and fulfill our obligations under our service agreement and Power of Attorney.
- Legal Obligation: Processing required to comply with applicable laws, including customs regulations (19 CFR), tax laws, and government reporting requirements.
- Legitimate Interests: Processing necessary for our legitimate business interests, such as improving services, securing our systems, and conducting marketing, provided these interests are not overridden by your rights.
- Consent: Where required by law, we obtain your consent before processing, such as for certain marketing communications or the use of optional cookies.
4. How We Share Your Information
We do not sell, rent, trade, or otherwise transfer your personal information to third parties for their marketing purposes. We may share your information only in the following circumstances:
4.1 Government Agencies
As your customs broker, we are required to transmit information to U.S. Customs and Border Protection (CBP) and other Partner Government Agencies (PGAs), including FDA, USDA/APHIS, EPA, CPSC, TTB, FWS, DOT/NHTSA, and other agencies, as necessary to process your customs entries and comply with applicable regulations. This is a core function of customs brokerage and is required by law.
4.2 Payment Processors
We share payment-related information with Stripe, Inc. to process invoice payments. Stripe operates as an independent data controller for payment data and is subject to its own privacy policy and PCI DSS Level 1 compliance obligations. We do not store your full credit card number on our servers.
4.3 Service Providers
We may share information with trusted third-party service providers who assist us in operating our business, including:
- Email Services: Resend (for transactional emails, notifications, and communications)
- Hosting & Infrastructure: Vercel (website hosting), Railway (backend API hosting), Supabase (database and authentication)
- Content Management: Sanity (blog and content management)
- Analytics: Aggregated website analytics to improve our services
These service providers are contractually obligated to use your information only as necessary to provide their services to us and to maintain appropriate security measures.
4.4 Legal Requirements
We may disclose your information if required to do so by law, regulation, legal process, subpoena, court order, or governmental request, or when we believe in good faith that disclosure is necessary to: (a) comply with applicable law; (b) protect the rights, property, or safety of Allied CHB, our users, or the public; (c) detect, prevent, or address fraud, security, or technical issues; or (d) respond to a government investigation or audit.
4.5 Business Transfers
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.
5. Data Retention
5.1 Customs Records
Pursuant to 19 CFR § 163.4, customs brokers are required by law to maintain records relating to each customs transaction for a minimum of five (5) years from the date of entry. This includes entry summaries, commercial invoices, bills of lading, classification records, and related correspondence. We are legally obligated to retain these records even after you terminate your relationship with us.
5.2 Account Data
We retain your account information for as long as your account is active or as needed to provide Services. If you request account deletion, we will delete or anonymize your personal information within ninety (90) days, except for data we are legally required to retain (see Section 5.1) or data reasonably necessary to resolve disputes or enforce our agreements.
5.3 Payment Records
Payment and invoicing records are retained for a minimum of seven (7) years to comply with tax and accounting obligations.
5.4 Website Usage Data
Automatically collected usage data, including log files and analytics data, is generally retained for up to twenty-four (24) months and then deleted or aggregated such that it no longer identifies individuals.
6. Data Security
We implement and maintain administrative, technical, and physical safeguards designed to protect your information, including:
- Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher (HTTPS).
- Encryption at Rest: Sensitive data stored in our database is encrypted at rest using industry-standard encryption algorithms.
- Access Controls: We restrict access to personal information to employees and contractors who need access to perform their duties. Employee access requires multi-factor authentication (MFA).
- Payment Security: Credit card processing is handled entirely by Stripe, a PCI DSS Level 1 certified payment processor. We never receive, process, or store full credit card numbers on our systems.
- Infrastructure Security: Our infrastructure providers (Vercel, Railway, Supabase) maintain SOC 2 Type II or equivalent certifications and implement comprehensive security programs.
- Incident Response: We maintain an incident response plan and will notify affected individuals and relevant authorities of any data breach in accordance with applicable law.
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee the absolute security of your information.
7. Your Rights & Choices
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request that we correct inaccurate or incomplete personal information.
- Deletion: Request that we delete your personal information, subject to our legal retention obligations (see Section 5).
- Portability: Request a copy of your personal information in a structured, commonly used, machine-readable format.
- Restriction: Request that we restrict the processing of your personal information in certain circumstances.
- Objection: Object to the processing of your personal information for direct marketing or where processing is based on legitimate interests.
- Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.
- Opt-Out of Marketing: You may opt out of marketing emails at any time by clicking the “unsubscribe” link in any marketing email or by contacting us directly.
To exercise any of these rights, please contact us at privacy@alliedchb.com. We will respond to your request within thirty (30) days. Please note that certain information may be exempt from such requests under applicable law, particularly records we are required to maintain under customs regulations.
8. Cookies & Tracking Technologies
8.1 What Are Cookies?
Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work efficiently and to provide information to site operators.
8.2 How We Use Cookies
We use the following types of cookies:
- Strictly Necessary Cookies: Required for the Site to function properly, including session management, authentication, and security. These cannot be disabled.
- Functional Cookies: Remember your preferences and settings to enhance your experience (e.g., language preferences, tariff calculator inputs).
- Analytics Cookies: Help us understand how visitors interact with the Site by collecting usage data in an aggregated and anonymous form.
8.3 Managing Cookies
Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or to alert you when cookies are being sent. However, disabling cookies may limit your ability to use certain features of the Site.
8.4 Do Not Track
Our Site does not currently respond to “Do Not Track” (DNT) signals sent by web browsers. There is no accepted industry standard for how to handle DNT signals at this time.
9. California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information:
- Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share your information.
- Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions, including our legal recordkeeping obligations.
- Right to Correct: You have the right to request correction of inaccurate personal information.
- Right to Opt-Out of Sale/Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
To exercise your California privacy rights, please contact us at privacy@alliedchb.com. We may need to verify your identity before fulfilling your request.
10. International Data Transfers
Our Services are primarily directed at and intended for users and importers located in the United States. If you access the Services from outside the United States, you understand and agree that your information may be transferred to, stored, and processed in the United States, where our servers, service providers, and team are located. The data protection laws of the United States may differ from the laws of your jurisdiction.
If you are located in the European Economic Area (EEA), United Kingdom (UK), or another jurisdiction with data protection laws, by using the Services you consent to the transfer of your personal information to the United States. Where required by applicable law, we will implement appropriate safeguards for such transfers, such as standard contractual clauses or other legally approved transfer mechanisms.
11. Children's Privacy
The Services are intended for business use and are not directed at individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will promptly delete such information. If you believe we have collected information from a child under 18, please contact us immediately at privacy@alliedchb.com.
12. Third-Party Links & Services
The Site may contain links to third-party websites and services, including but not limited to CBP.gov, GovDelivery (CSMS), the Federal Register, the U.S. International Trade Commission, and various government agency websites. These third-party sites have their own privacy policies and practices. We are not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will post the updated Privacy Policy on the Site and update the “Last Updated” date at the top of this page. For material changes, we may provide additional notice via email or a prominent notice on the Site. Your continued use of the Services after any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Allied CHB Corp.
Attn: Privacy
Email: privacy@alliedchb.com
Website: alliedchb.com
For general customer service inquiries, please contact us at info@alliedchb.com.