Privacy Policy
1. Who we are
BorderFlow LLC ("BorderFlow", "we", "us", "our") is a US-Mexico customs brokerage and freight platform. We are the data controller for personal data collected through this website.
- Legal name: BorderFlow LLC
- US office: 410 Nafta Blvd, Laredo, TX 78045
- MX office: Bosque de Radiatas 50, Bosques de las Lomas, Cuajimalpa de Morelos, C.P. 05120, Ciudad de México, CDMX
- Privacy contact: thelab@logi-cargo.com
2. Data we collect
2a. Information you provide
When you submit a contact form, quote request, or inquiry on our site:
- Full name
- Business email address
- Company name (if provided)
- Phone number (if provided)
- Message content, including shipment or freight details you voluntarily share
2b. Business and shipment data (customs clients)
When you engage us as a customs broker or freight service provider (separate from this website), we may process:
- Importer/exporter of record information
- Commodity descriptions and HS/tariff classification codes
- Commercial invoice and packing list data
- Customs bond and duty payment information
- Federal tax IDs (EIN, RFC)
This data is governed by our service agreement and applicable customs regulations (CBP in the US; SAT/Aduanas in Mexico).
2c. Data collected automatically
When you visit our website, we and our service providers automatically collect:
- Log data: IP address, browser type, operating system, referring URL, pages visited, time and date of visit, time spent on pages
- Device data: screen resolution, language settings, device type
- Usage data: clicks, scroll depth, navigation paths
- Approximate location: derived from IP address (country/city level only — we do not collect precise geolocation)
- Cookies and similar technologies: see Section 5
We do not collect payment card numbers, Social Security numbers, or government ID numbers through this website.
3. How we use your data
- Respond to your inquiry, quote request, or customer support question
- Provide and fulfill customs brokerage, freight, and logistics services
- Comply with US Customs and Border Protection (CBP) and Mexican SAT/Aduanas legal requirements
- Analyze website traffic and usage patterns to improve our site (via Google Analytics)
- Detect, prevent, and investigate fraud, security incidents, or misuse
- Meet legal obligations and respond to lawful government requests
- Communicate service updates or changes (not marketing — we do not send promotional emails without your express opt-in)
We do not sell, rent, or trade your personal data. We do not use your data for automated profiling that produces legal or similarly significant effects.
4. Legal bases for processing
- Contract: Processing necessary to respond to your inquiry or provide requested services
- Legitimate interests: Operating and improving our website, detecting fraud, managing our business
- Legal obligation: Compliance with CBP, SAT, LFPDPPP, and other applicable law
- Consent: Where you have provided consent (e.g., form submission, cookies where required)
5. Cookies
We use the following cookies on borderflow.co:
| Cookie / Service | Type | Purpose | Duration |
|---|---|---|---|
| _ga | Analytics | Google Analytics — distinguishes users | 2 years |
| _ga_* | Analytics | Google Analytics 4 — maintains session state | 2 years |
| _gid | Analytics | Google Analytics — distinguishes users (short-lived) | 24 hours |
We do not use advertising cookies, retargeting pixels, or any tracking beyond Google Analytics.
To opt out of Google Analytics across all websites, install the Google Analytics Opt-out Browser Add-on.
To manage cookies in your browser: Chrome — Settings > Privacy and Security > Cookies. Firefox — Preferences > Privacy. Safari — Preferences > Privacy. Disabling analytics cookies does not affect your ability to use this site.
6. Third-party service providers
We share data with the following third parties only to the extent necessary to operate our website and services:
- Google LLC (Google Analytics 4) — website usage analytics. Google may transfer data to the US. Governed by Google's Privacy Policy and Data Processing Terms.
- FormSubmit.co — contact form delivery. Your form submission is routed to our email via this service. We do not store submissions on their servers beyond transmission.
- Google Fonts — web font delivery via Google CDN. Your browser connects to Google servers; your IP may be logged per Google's policy.
- Unsplash / Coverr — image and video CDN. Your IP may be logged by these providers when media is loaded.
- US Customs and Border Protection (CBP) / SAT Mexico — for customs clients, we are legally required to transmit shipment data to government customs authorities.
We do not authorize these providers to use your data for their own marketing purposes.
7. Your rights — general
Regardless of where you are located, you may contact us at thelab@logi-cargo.com to:
- Request access to the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal retention obligations)
- Object to or restrict certain processing
- Lodge a complaint with a relevant data protection authority
We will respond to verifiable requests within 30 days (or sooner as required by applicable law).
8. California residents — CCPA / CPRA
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
- Right to Know: Request disclosure of the categories and specific pieces of personal information we collect, use, disclose, or sell.
- Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions.
- Right to Correct: Request correction of inaccurate personal information.
- Right to Opt Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising.
- Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information beyond what is necessary to provide services.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
Categories of personal information collected in the past 12 months: identifiers (name, email, IP); commercial information (inquiry/service details); internet activity (site usage via analytics). No sale or sharing of personal information has occurred.
To submit a CCPA request: email thelab@logi-cargo.com with "CCPA Request" in the subject line. We may need to verify your identity before fulfilling your request.
9. Mexican residents — LFPDPPP (Aviso de Privacidad)
De conformidad con la Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) y su Reglamento, BorderFlow LLC es el responsable del tratamiento de sus datos personales.
Datos recabados
Nombre, correo electrónico, nombre de empresa, teléfono, y datos de envío o carga que usted proporcione voluntariamente.
Finalidades del tratamiento
- Finalidades primarias: Atender su solicitud de cotización o contacto; prestar servicios de agencia aduanal y logística cross-border.
- Finalidades secundarias: Mejorar nuestro sitio web mediante análisis de tráfico (Google Analytics).
Transferencias de datos
Sus datos personales podrán ser transferidos a Google LLC (Estados Unidos) para análisis de tráfico, y a autoridades aduaneras (CBP / SAT) cuando sea requerido por ley. No se realizarán transferencias distintas a las previstas sin su consentimiento.
Derechos ARCO
Usted tiene derecho a ejercer sus derechos ARCO:
Para ejercer sus derechos ARCO, envíe una solicitud escrita a thelab@logi-cargo.com con: (i) su nombre completo e información de contacto; (ii) descripción del derecho que desea ejercer; (iii) copia de su identificación oficial. Responderemos en un plazo máximo de 20 días hábiles.
También puede limitar el uso o divulgación de sus datos contactándonos en la misma dirección de correo.
10. Data retention
- Contact form submissions: Retained for up to 3 years to manage our business relationship and for record-keeping, then deleted or anonymized.
- Customs/brokerage records: Retained for the period required by CBP (minimum 5 years) and SAT regulations.
- Server logs: Retained for up to 90 days for security and debugging purposes.
- Google Analytics data: Retained per GA4 settings — up to 14 months for user-level data. Aggregated data may be retained longer.
11. Security
We implement reasonable technical and organizational measures to protect your data, including:
- HTTPS/TLS encryption on all pages
- Content Security Policy (CSP) headers
- Referrer and access controls
- Restricted access to personal data on a need-to-know basis
No method of transmission over the internet is 100% secure. In the event of a data breach that creates a risk to your rights, we will notify affected individuals and relevant authorities as required by applicable law (including LFPDPPP requirements in Mexico).
12. Third-party links
Our website may contain links to third-party websites (e.g., government portals, industry resources). We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any site you visit.
13. Do Not Track
Some browsers transmit Do Not Track (DNT) signals. Our website does not currently alter its data collection practices in response to DNT signals, as no uniform industry standard for DNT has been adopted. You can opt out of Google Analytics tracking via the Google Analytics Opt-out Add-on.
14. Children's privacy
Our services are directed at businesses and are not intended for individuals under 13 years of age (US) or under 18 years of age (Mexico). We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such information, contact us immediately at thelab@logi-cargo.com and we will delete it promptly.
15. International data transfers
BorderFlow operates in the United States and Mexico. If you are in Mexico, your personal data may be transferred to and processed in the United States, where data protection laws may differ from those in Mexico. By using our site or submitting a form, you acknowledge this transfer. We take steps to ensure appropriate safeguards are in place in accordance with LFPDPPP requirements.
16. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The "Last updated" date at the top of this page will indicate when the policy was last revised. We encourage you to review this page periodically. Continued use of our website after changes are posted constitutes acceptance of the updated policy.
17. Contact us
For privacy questions, to exercise your rights, or to file a complaint:
- Email: thelab@logi-cargo.com — Subject: "Privacy Request"
- US mailing address: BorderFlow LLC, 410 Nafta Blvd, Laredo, TX 78045
- MX mailing address: BorderFlow, Bosque de Radiatas 50, Bosques de las Lomas, Cuajimalpa de Morelos, C.P. 05120, Ciudad de México, CDMX
We aim to respond to all privacy requests within 30 days (20 business days for ARCO requests under LFPDPPP).