What we collect, why, and what you can ask us to do about it.

What information do you collect?

Three kinds, and they are worth separating because they carry very different weight.

1. What you send us on purpose

The contact form collects your name, email address, phone number, company, the topic you picked and your message. The new-client intake and power-of-attorney forms collect considerably more, because CBP requires it: legal company name, DBA, importer of record number or EIN, U.S. and foreign business addresses, resident agent details, parent company or ultimate owner, and the names of the people who will act for the business.

Your EIN is encrypted before it is stored (AES-256-GCM), with a separate one-way index used only so we can find your record without decrypting it. If you are a sole proprietor using your Social Security number as your taxpayer ID, treat that field as sensitive personal information — it is handled as such.

2. What your browser sends automatically

When you submit the contact form we record your IP address, browser user-agent string and the page that referred you, alongside the message. This is not analytics. It is what lets us rate-limit submissions and identify abuse, and it is stored with the enquiry record.

3. Product photos you upload to the classifier

The HTS photo classifier sends your image to an AI model to produce a description, and the image and its resulting classification are retained to improve the tool. Do not upload anything you would not want kept. Nothing about the classifier requires you to identify yourself, and we do not attach your identity to it.

Do you use cookies?

We set no cookies of our own. The site has no login, no session and no tracking of its own.

We do run the Google Ads tag, which sets cookies to measure which advertisements bring people to the site and to build remarketing audiences. Those cookies are off until you accept them. If you decline, or if your browser sends a Global Privacy Control signal, they are never set — and we treat GPC as a binding opt-out, not a preference.

Who else sees this information?

We do not sell personal information. These are the services that process it on our behalf in order to do the work:

• Netlify — hosting; serves the site and keeps standard server logs
• Our database provider — stores enquiries, intake submissions and review history
• Resend — delivers the notification emails your submissions generate
• PayDuties — calculates duty and landed cost for the classifier
• OpenAI — produces the description of an uploaded product photo
• Stripe — processes payment if you buy a customs bond online
• Google — advertising measurement, only after you accept

We also disclose information to U.S. Customs and Border Protection and other federal agencies when filing your entries. That is the entire purpose of engaging a customs broker, and it is not optional.

How long do you keep it?

Customs brokers are required by 19 CFR Part 163 to retain records relating to an entry for five years from the date of entry. That obligation governs most of what we hold and overrides a deletion request for records connected to a filing.

Enquiries that never became a customer relationship are not covered by that rule. We can redact the message text of an enquiry on request, and we will.

If you are in California

Under the California Consumer Privacy Act as amended by the CPRA, you have the right to know what personal information we have collected, to have it corrected, to have it deleted, to opt out of its sale or sharing, and to limit our use of sensitive personal information. We will not treat you differently for exercising any of them.

We do not sell personal information. Running the Google Ads tag may constitute “sharing” for cross-context behavioural advertising under the CPRA. That is why it is off by default, why declining is one click, and why we honour Global Privacy Control automatically. Declining, or sending GPC, is a complete opt-out — there is nothing further to submit.

The categories we collect, in CPRA terms: identifiers (name, email, phone, IP address), commercial information (the services you enquire about), internet activity (user-agent, referring page), professional or employment information (your role at the importer), and — where a sole proprietor uses an SSN as a taxpayer ID — sensitive personal information. We use sensitive personal information only to perform the service and to meet our legal obligations, which are the uses the CPRA exempts from the right to limit.

How do I make a request?

Email sales@jfschb.com or call 855-888-0666 and say what you want. We will need enough information to be confident you are who you say you are before we act on a request about a specific record — for a customs filing, that verification matters more than the speed of the reply.

You can also ask an authorised agent to make a request for you.

Children

This is a business-to-business service. We do not knowingly collect information from anyone under 16, and we do not sell or share the personal information of minors.

Changes

When the way we handle data changes, this page changes with it, and the date at the top moves. It is written from what the software actually does rather than from a template, so a change in one is a change in the other.

Last updated 27 August 2026. Questions about anything here: get in touch.