Summary
Jet Express Freight ("we", "us", "our") is a freight forwarder operating across the United States, Spain, and Trinidad & Tobago. We collect the data we need to ship your cargo, run our warehouses, comply with customs authorities, and contact you back — nothing else. We never sell personal data. We keep it for the minimum time required by law and your service contract.
If you'd rather skip the details, here's the short version: name, address, phone, email, shipment data, and (when required) ID for customs. Used to ship and bill. Stored in encrypted systems. You can request a copy or deletion at any time by emailing [email protected].
Data we collect
Account data
When you open a BOX account or business account: full name, billing address, delivery address, phone, email, and (where applicable) a tax ID, passport or national ID number for customs clearance in the destination country.
Shipment data
For every parcel we move: tracking ID, weight, dimensions, declared value, contents description, sender/recipient details, customs documentation, photographs taken at receiving and delivery, and timestamps from each RFID gateway scan and zone movement.
Communications
Records of email, phone, and WhatsApp conversations with our team — kept for the lifetime of your account and 5 years after, for dispute resolution and regulatory audits.
Site & portal data
IP address, browser, language preference, and pages visited on jetexpressfreight.com and our customer portal. Detailed in Cookies.
How we use it
| Purpose | Lawful basis | Retention |
|---|---|---|
| Ship your cargo end-to-end | Contract | Life of account + 5 yrs |
| File customs declarations | Legal obligation | 7 years (US CBP, TT C&E, ES AEAT) |
| Bill and collect | Contract | 7 years (tax law) |
| Operate our warehouse & RFID tracking | Legitimate interest | Life of shipment + 2 yrs |
| Send service updates & receipts | Contract | Life of account |
| Send marketing (opt-in only) | Consent | Until you opt out |
| Fraud prevention & security | Legitimate interest | 2 years |
Sharing
We share the minimum data required, only with these categories:
- Customs authorities — US CBP, TT Customs & Excise, and the Spanish AEAT. Legally required for every cross-border shipment.
- Carriers & subcontractors — airlines, shipping lines, trucking partners. Only the data they need to move your cargo on their leg.
- Payment processors — for billing. We never store full card numbers; tokens only.
- Authorities under court order or law. We require a valid legal request and notify you when permitted.
We do not sell personal data. We do not share data with advertisers.
Cookies
We use three categories:
- Essential — language, login, cart state. Cannot be disabled (the site won't work).
- Analytics — we measure page views and visits with Umami, a tool we host ourselves. It uses no cookies, does not identify you and the data never leaves our servers.
- Marketing — only used to suppress ads to existing customers. Opt-in via the cookie banner.
You can change your choice anytime via the cookie banner footer link. A detailed list of the cookies we use and their durations is available on request from [email protected].
Your rights
Depending on where you live, you have the right to:
- Access — request a copy of all personal data we hold about you.
- Correction — fix anything that's wrong or out of date.
- Deletion — request erasure. Note: we may need to keep some data for legal reasons (e.g. customs, tax) for the periods above.
- Portability — get a machine-readable export (CSV/JSON).
- Objection — opt out of marketing or contest a legitimate-interest processing.
- Complain — with your local data protection authority. Spain: Agencia Española de Protección de Datos (AEPD). US residents: your state attorney general. Trinidad & Tobago: Office of the Information Commissioner.
To exercise any of these, email [email protected]. We reply within 30 days.
Data retention
We delete personal data when the longest applicable retention period ends — usually 7 years after the last shipment (customs and tax law in our jurisdictions). Shipment photographs are deleted after 24 months. Marketing data is deleted within 30 days of opt-out.
International transfers
Because we operate across three countries, your data may move between them. Transfers between our Spanish (EU) entity and our non-EU entities (United States, Trinidad & Tobago) rely on the EU Standard Contractual Clauses 2021/914. We have also adopted the EU-US Data Privacy Framework where applicable.
Security
Industry-standard encryption (TLS 1.3 in transit, AES-256 at rest). Customer portal protected by multi-factor authentication. Warehouse systems are network-isolated from public internet. Annual third-party penetration tests. Incident response within 72 hours per GDPR requirements.
Children
Our services are not directed to children under 16. We do not knowingly collect data from minors. If you're a parent and believe we have data about your child, contact us and we'll delete it.
Changes to this policy
We update this page when our practices change. The version number and effective date at the top reflect the current version. Material changes are emailed to active account holders 30 days before they take effect.
Contact
Data Protection Officer · [email protected]
Postal address — choose any of our hubs:
- Jet Express Freight HQ, 9325 NW 101st St, Medley, FL 33178, USA
- C/ Real 14, oficina 13, 28430 Alpedrete, Spain
- 60A Boundary Rd Ext, San Juan, Trinidad
Previous versions available on request from [email protected]