Legal
Privacy Policy
Last updated: July 14, 2026
Aurora Customs Brokerage LLC ("Aurora Customs," "Company," "we," "us," or "our") respects your privacy and is committed to protecting the personal information and business data you entrust to us. This Privacy Policy describes how we collect, use, store, share, and protect your information when you use our website at auroracustomsbrokerage.com (the "Site"), our online tools, client portal, or engage us for customs brokerage services (collectively, the "Services").
By using the Services, you consent to the practices described in this Privacy Policy. If you do not agree with the practices described herein, you should not use the Services or provide any personal information to us.
1. Information We Collect
1.1 Information You Provide Directly
We collect information that you voluntarily provide to us, including:
- Account Information: Name, email address, phone number, company name, job title, and password when you create an account on our client portal or sign up through our login page.
- Power of Attorney Data: Full legal name, business entity type, IRS/EIN number, importer of record number, physical address, signature, and government-issued photo identification, as required to execute customs Power of Attorney (POA) documents with U.S. Customs and Border Protection (CBP).
- Customs & Trade Data: Commercial invoices, bills of lading, packing lists, certificates of origin, import/export documentation, HTS classification data, bond information, entry summaries, ISF filings, and other documents necessary for customs clearance.
- Payment Information: Invoice number, payment amount, and email address for payment processing. Credit card information is transmitted directly to Stripe and is never stored on our servers.
- Communication Data: Emails, phone calls, messages, and other correspondence you send to or receive from us.
- Contact & Quote Form Submissions: Name, email, phone number, company name, shipment details, commodity information, and any additional information you provide through our contact, quote request, or onboarding forms.
- Shipment Tracking Inquiries: Entry numbers, bill of lading numbers, or other identifiers you submit to look up shipment status.
1.2 Information Collected Automatically
When you visit the Site, we may automatically collect certain information, including:
- Device & Browser Information: IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
- Usage Data: Pages visited, time spent on pages, links clicked, referring URLs, date/time of access, search queries, and navigation patterns.
- Cookies & Similar Technologies: We use cookies, web beacons, and similar technologies to enhance your experience, remember preferences, and maintain session security. See Section 8 (Cookies & Tracking Technologies) for details.
- Log Data: Server logs recording requests made to our website, including access times, error logs, and request parameters.
1.3 Information from Third Parties
We may receive information about you from third-party sources, including:
- Government Agencies: CBP, FDA, USDA, EPA, and other Partner Government Agencies (PGAs) may provide information related to your customs entries, including entry status, examination results, liquidation notices, and compliance actions.
- Business Partners: Freight forwarders, carriers, and other logistics providers may share shipment-related information necessary for customs clearance.
- Payment Processors: Stripe provides us with transaction confirmation, payment status, and fraud detection information.
2. How We Use Your Information
We use the information we collect for the following purposes:
| Purpose | Examples |
|---|---|
| Providing Brokerage Services | Filing customs entries, ISFs, and PGA data with CBP and other agencies; classifying merchandise; calculating duties and taxes; managing your customs bond |
| Processing Transactions | Generating invoices, processing payments through Stripe, advancing government charges on your behalf |
| Account Management | Creating and maintaining your account, authenticating access, managing user permissions |
| Communications | Sending shipment status updates, CSMS alerts, invoice notifications, bond renewal reminders, regulatory updates, and responding to your inquiries |
| Legal Compliance | Meeting recordkeeping obligations under 19 CFR Part 163, responding to government inquiries, complying with sanctions screening requirements |
| Improving Services | Analyzing usage patterns, improving our website and tools, developing new features, training internal staff |
| Security | Detecting and preventing fraud, unauthorized access, and other security incidents |
| Marketing | Sending trade compliance updates, industry newsletters, and service announcements (only with your consent or as permitted by law; you may opt out at any time) |
3. Legal Bases for Processing
We process your personal information on the following legal bases:
- Performance of a Contract: Processing necessary to perform our customs brokerage services and fulfill our obligations under our service agreement and Power of Attorney.
- Legal Obligation: Processing required to comply with applicable laws, including customs regulations (19 CFR), tax laws, and government reporting requirements.
- Legitimate Interests: Processing necessary for our legitimate business interests, such as improving services, securing our systems, and conducting marketing, provided these interests are not overridden by your rights.
- Consent: Where required by law, we obtain your consent before processing, such as for certain marketing communications or the use of optional cookies.
5. Data Retention
5.1 Customs Records
Pursuant to 19 CFR § 163.4, customs brokers are required by law to maintain records relating to each customs transaction for a minimum of five (5) years from the date of entry. This includes entry summaries, commercial invoices, bills of lading, classification records, and related correspondence. We are legally obligated to retain these records even after you terminate your relationship with us.
5.2 Account Data
We retain your account information for as long as your account is active or as needed to provide Services. If you request account deletion, we will delete or anonymize your personal information within ninety (90) days, except for data we are legally required to retain (see Section 5.1) or data reasonably necessary to resolve disputes or enforce our agreements.
5.3 Payment Records
Payment and invoicing records are retained for a minimum of seven (7) years to comply with tax and accounting obligations.
5.4 Website Usage Data
Automatically collected usage data, including log files and analytics data, is generally retained for up to twenty-four (24) months and then deleted or aggregated such that it no longer identifies individuals.
6. Data Security
We implement and maintain administrative, technical, and physical safeguards designed to protect your information, including:
- Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher (HTTPS).
- Encryption at Rest: Sensitive data stored in our systems is encrypted at rest using industry-standard encryption algorithms.
- Access Controls: We restrict access to personal information to employees and contractors who need access to perform their duties. Employee access requires multi-factor authentication (MFA).
- Payment Security: Credit card processing is handled entirely by Stripe, a PCI DSS Level 1 certified payment processor. We never receive, process, or store full credit card numbers on our systems.
- Infrastructure Security: Our infrastructure providers maintain SOC 2 Type II or equivalent certifications and implement comprehensive security programs.
- Incident Response: We maintain an incident response plan and will notify affected individuals and relevant authorities of any data breach in accordance with applicable law.
Browser-Only Processing
Our IEEPA Tariff Refund Calculator processes CBP Form 7501 entry summaries entirely in your browser. Uploaded documents are never transmitted to or stored on Aurora servers. Similarly, Power of Attorney PDF generation occurs client-side in your browser; only the completed POA you choose to submit to us is retained as part of your brokerage records.
7. Your Rights & Choices
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request that we correct inaccurate or incomplete personal information.
- Deletion: Request that we delete your personal information, subject to our legal retention obligations (see Section 5).
- Portability: Request a copy of your personal information in a structured, commonly used, machine-readable format.
- Restriction: Request that we restrict the processing of your personal information in certain circumstances.
- Objection: Object to the processing of your personal information for direct marketing or where processing is based on legitimate interests.
- Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.
- Opt-Out of Marketing: You may opt out of marketing emails at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly.
To exercise any of these rights, please contact us at info@auroracustomsbrokerage.com. We will respond to your request within thirty (30) days. Please note that certain information may be exempt from such requests under applicable law, particularly records we are required to maintain under customs regulations.
9. California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information:
- Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share your information.
- Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions, including our legal recordkeeping obligations.
- Right to Correct: You have the right to request correction of inaccurate personal information.
- Right to Opt-Out of Sale/Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
To exercise your California privacy rights, please contact us at info@auroracustomsbrokerage.com. We may need to verify your identity before fulfilling your request.
10. International Data Transfers
Our Services are primarily directed at and intended for users and importers located in the United States. If you access the Services from outside the United States, you understand and agree that your information may be transferred to, stored, and processed in the United States, where our servers, service providers, and team are located. The data protection laws of the United States may differ from the laws of your jurisdiction.
If you are located in the European Economic Area (EEA), United Kingdom (UK), or another jurisdiction with data protection laws, by using the Services you consent to the transfer of your personal information to the United States. Where required by applicable law, we will implement appropriate safeguards for such transfers, such as standard contractual clauses or other legally approved transfer mechanisms.
11. Children's Privacy
The Services are intended for business use and are not directed at individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will promptly delete such information. If you believe we have collected information from a child under 18, please contact us immediately.
Please contact us at info@auroracustomsbrokerage.com if you have concerns about information collected from a minor.
12. Third-Party Links & Services
The Site may contain links to third-party websites and services, including but not limited to CBP.gov, GovDelivery (CSMS), the Federal Register, the U.S. International Trade Commission, and various government agency websites. These third-party sites have their own privacy policies and practices. We are not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will post the updated Privacy Policy on the Site and update the "Last Updated" date at the top of this page. For material changes, we may provide additional notice via email or a prominent notice on the Site. Your continued use of the Services after any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Aurora Customs Brokerage LLC Attn: Privacy 1722 Minters Chapel Rd. STE 100, Grapevine TX 76051 Email: info@auroracustomsbrokerage.com Website: auroracustomsbrokerage.com
For general customer service inquiries, please contact us at info@auroracustomsbrokerage.com or call 310-293-6301.
This Privacy Policy is provided for informational purposes and does not constitute legal advice. Aurora Customs Brokerage LLC recommends that you consult with a qualified attorney specializing in data privacy and customs law before relying on this document for compliance purposes.