Privacy policy

Last updated
October 29, 2026

Who we are

This Privacy Policy applies to Border Buddy Technologies Inc., which provides Canadian customs brokerage services, and Border Buddy Technologies USA Inc., which provides U.S. customs brokerage services, both operating as BorderBuddy Customs Brokers (together, "BorderBuddy", "we" and "us"). For detailed information on the technical and organizational measures we use to protect your data, please see our Data Protection Policy, available upon request.

Information Collection

We collect personal information that is necessary to provide our customs brokerage services and to comply with applicable legal and regulatory requirements. Depending on the nature of the services provided, this may include:

Contact Information: Name, address, email address, and phone number, as required for customs declarations and as the Importer of Record.

Tax Identification Numbers: Employer Identification Number (EIN) or, where required, Social Security Number (SSN), as mandated by U.S. Customs and Border Protection (CBP) under applicable regulations.

Government-Issued Identification: Driver’s license, passport, or other government-issued identification, where required for identity verification in connection with Power of Attorney or similar authorizations.

Business Information: Company name, officer name, title, and signature for General Agency Agreements and Power of Attorney documents.

Shipment Information: Goods descriptions, declared values, and tariff classification codes for customs entry processing.

We collect this information by fair and lawful means, with your knowledge and consent, and we will inform you why we are collecting it and how it will be used.

How we use and share information

We use personal information to provide customs brokerage and related services, to meet our legal obligations to CBSA, CBP and other government agencies, to bill and collect, to secure our systems, and to tell you about our services. We share it only with: government agencies as required by law; the surety on your bond or entry; service providers who process it for us under contract (listed below); and other parties you authorize. We do not sell personal information. Website visitor data is also shared with advertising and analytics partners as described in "Cookies and tracking". Customs client records are never used for advertising.

Third-Party Services

We use trusted third-party services to assist in providing our services. These include government customs authorities (CBSA and CBP), customs entry filing systems, customer relationship management tools, communication platforms, and payment processing (Stripe, PCI DSS Level 1 certified). Payment card data is processed exclusively by Stripe and never stored on or transmitted through BorderBuddy systems. Additionally, our online platform and underlying service technology are powered by our partner, Zipments (zipments.io).‍

Third-party service providers are contractually required to implement appropriate safeguards to protect personal information and are only provided with the information necessary to perform their specific functions. However, we are not responsible for the privacy or security practices of third-party providers.

Cookies and tracking

Our website uses cookies, pixels and similar technologies. Strictly necessary cookies run the site and remember your choices. With your consent where required, we also use: analytics (Google Analytics and Microsoft Clarity, which records page interactions such as clicks and scrolling); advertising (Meta Pixel and LinkedIn Insight Tag, which measure ad performance and build audiences, and may track activity across sites); and visitor identification (Vector, which may match business visitors to company or professional profiles). You can accept, reject or change these choices at any time through the "Cookie settings" link in the site footer, or block cookies in your browser. Rejecting non-essential cookies won't affect your use of our services.

U.S. Customs Broker Confidentiality

As a licensed U.S. customs broker, BorderBuddy is subject to the confidentiality requirements of 19 CFR §111.24. Records pertaining to the business of our clients are confidential. We will not disclose those records or the information they contain to any person other than:

  • The client itself;
  • The surety on a particular entry;
  • Representatives of the U.S. Department of Homeland Security or other duly accredited officers or agents of the United States; or
  • Persons authorized by court order, subpoena, or written authorization from the client.

This confidentiality obligation applies to disclosures to other corporate entities, including affiliated or commonly-owned companies that are separate legal entities from the licensed broker. Where we wish to share U.S. customs client information with affiliated brands, business partners, or non-customs service lines, we will obtain written authorization from the client through the Power of Attorney or a separate consent.

Cross-Border and Out-of-Jurisdiction Processing

Because we operate on both sides of the Canada–U.S. border and use service providers based in Canada, the United States, and other jurisdictions, personal information may be stored or processed outside your province, territory, or country of residence. In that case, the information is subject to the laws of the jurisdiction in which it is stored or processed, including lawful access by foreign courts, law enforcement, and national security authorities. Before transferring Quebec residents' personal information outside Quebec, we assess whether it will receive adequate protection.

Data Protection

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification.  BorderBuddy utilizes cloud-hosted infrastructure to store and process customer data. All customer data is protected using industry-standard security measures, including:

Encryption in Transit: All data transmitted between our systems and to/from customers is encrypted using TLS 1.2 or higher.

Encryption at Rest: Customer data stored within our cloud platforms is encrypted using AES-256 or equivalent encryption standards.

Access Controls: Access to customer data is restricted through role-based permissions and multi-factor authentication (MFA). Only authorized personnel directly involved in customs processing have access to personally identifiable information.

Endpoint Security: We maintain internal security policies and technical controls requiring full-disk encryption, endpoint protection software, and automatic screen lock policies across our managed device fleet.

Vendor Security: Our operations are built on platforms that maintain independent SOC 2 Type II and/or ISO 27001 certifications. We audit critical vendors periodically.

While we implement safeguards designed to protect personal information, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. For complete details on our technical and organizational security measures, please refer to our Data Protection Policy, available upon request. 

Data Breach Notification

In the event of a breach of security safeguards involving personal information under our control, we will assess the incident and notify affected individuals and relevant authorities as required by applicable law. Our internal incident response goal is to provide such notification within 72 hours of confirming a reportable breach.

Commercial Electronic Messages (CASL)

Where we send commercial electronic messages — such as newsletters, regulatory updates, marketing emails, or service communications that promote our products or services — to recipients in Canada, we do so in accordance with Canada’s Anti-Spam Legislation (CASL). This means we:

  • Obtain express or implied consent, as applicable, before sending commercial electronic messages;
  • Identify BorderBuddy Technologies Inc. as the sender and provide our mailing address and a means of contact;
  • Include a clear and easy-to-use unsubscribe mechanism in every commercial electronic message; and
  • Give effect to unsubscribe requests as soon as possible, and in any event within 10 business days.

To unsubscribe from our commercial electronic messages, use the unsubscribe link in any message or contact us at privacy@getborderbuddy.ca.

BorderBuddy Shopify App Privacy Policy

The BorderBuddy’s Shipping to Canada No Fees App (“the App”) provides shipping services to Canada (“the Service”) for merchants using Shopify. This Privacy Policy outlines how personal information is collected, used, and shared when you install or use the App in connection with your Shopify-supported store.

Personal Information the App Collects

Upon installation, the App automatically accesses specific information from your Shopify account, including:

  • Read/write products
  • Read/write orders
  • Write shipping rates
  • Read inventory
  • Write script tags for error logs
  • Read/write managed fulfillment orders
  • Read/write draft orders
  • Additionally, we collect personal information such as:
  • Name, email address, phone number, and billing address

How We Use Your Personal Information

The personal information collected is used to:

  • Provide and operate the Service
  • Communicate with you
  • Optimize or improve the App
  • Provide information or advertising related to our products or services

Sharing Your Personal Information

We may share your personal information to comply with legal obligations, respond to lawful requests, or protect our rights. We do not sell your personal information to third parties.

Advertising

We may use contact details of merchants who install the App to send information about BorderBuddy services, in line with CASL, and to build advertising audiences on platforms such as Meta and LinkedIn. You can opt out at any time by emailing privacy@getborderbuddy.ca or using the unsubscribe link in any message. We do not use your store's customer or order data for advertising.

Your Rights

Depending on where you live, you may have the right to: know what personal information we hold about you and how it's used; get a copy of it, including in a portable format; correct it; withdraw consent; ask us to delete it (subject to the customs record-keeping rules described below); opt out of targeted advertising; and not be discriminated against for exercising these rights. Quebec residents may also ask to be informed when a decision is made about them exclusively by automated processing. To make a request, email privacy@getborderbuddy.ca. We'll verify your identity and respond within 30 days, or sooner where the law requires. An authorized agent may act for you with written permission.

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, regulatory, tax, accounting, or reporting requirements.

Customs records and related documentation are generally retained for a minimum of six (6) years, in accordance with applicable CBSA and CBP record-keeping requirements.

Where personal information is no longer required and is not subject to legal retention obligations, it will be securely deleted or anonymized in accordance with our data retention practices.

For our Shopify app, data is retained until you uninstall the app, after which it is deleted in accordance with our standard data disposal procedures, provided such data is not subject to the legal and regulatory retention requirements described above.

Changes

This privacy policy may be updated to reflect changes to our practices or for other operational, legal, or regulatory reasons.

Accountability and complaints

Privacy Officer. Border Buddy Technologies Inc. and Border Buddy Technologies USA Inc. have designated a Privacy Officer who is responsible for our compliance with this policy and applicable privacy laws, and who is the person in charge of the protection of personal information under Quebec law. Contact: Privacy Officer, privacy@getborderbuddy.ca, Suite 100 (15-119), 555 Burrard Street, Vancouver, BC V7X 1M8. If you're not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca), the Commission d'accès à l'information du Québec (cai.gouv.qc.ca), or the privacy regulator in your province or state.

Contact Us

Additional information regarding our security practices may be made available upon reasonable request, subject to confidentiality and security considerations.

We do not use personal information for purposes other than those for which it was collected, except as permitted or required by law.

BorderBuddy Technologies Inc.
Suite 100 (15-119), 555 Burrard Street
Vancouver, BC V7X 1M8
privacy@getborderbuddy.ca

For questions about our services, contact help@getborderbuddy.ca.