Privacy Policy

Last updated: December 28, 2024

1. Introduction

Welcome to Tariffs.help. We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how Golden Planet ApS (“we”, “us”, “our”) collects, uses, shares, and protects your information when you use our service Tariffs.help.

Data Controller: Golden Planet ApS Company registration number: DK26991714 Address: Dalbygade 40 A, 6000 Kolding, Denmark Email: privacy@tariffs.help Phone: +45 51900694

2. What information do we collect?

2.1 Information you provide us

• Account Information: Name, email address, company name
• Payment Information: Billing address (credit card details are processed by our payment provider)
• Communication: Messages you send to our support

2.2 Information we collect automatically

• Usage Data: How you use the service, features you access, HS code searches
• Technical Information: IP address, browser type, device type, operating system
• Cookies and similar technologies: See our cookie policy below

2.3 Information from third parties

• Payment providers: Payment status and transaction history
• Authentication services: If you log in via a third party (e.g., Google)

3. How do we use your information?

We use your information to:

• Provide the service: Process your HS code inquiries, manage your account
• Improve the service: Analyze usage to develop new features and improvements
• Communicate with you: Send service updates, support notifications, and (with your consent) marketing
• Security and compliance: Protect against fraud, enforce our terms, comply with legal requirements
• Billing: Process payments and manage subscriptions

4. Legal basis for processing (GDPR)

We process your personal data based on:

• Contractual performance (GDPR Art. 6(1)(b)): Necessary to provide the service
• Legitimate interest (GDPR Art. 6(1)(f)): Service improvement, security, analytics
• Consent (GDPR Art. 6(1)(a)): Marketing, certain cookies
• Legal obligation (GDPR Art. 6(1)(c)): Compliance with tax legislation and accounting requirements

5. Sharing of information

We never share your information for commercial purposes. We only share with:

5.1 Service providers

• Cloud hosting: AWS/Google Cloud (EU-based servers)
• Payment processing: Stripe (GDPR-compliant)
• AI services: Google Gemini API (only for HS code classification, no personal data shared)
• Email: SendGrid/Postmark (for transactional emails)

5.2 Legal requirements

We may share information if required by law, court order, or government request.

5.3 Business transfer

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner.

6. International data transfer

We primarily store data within the EU/EEA. If data is transferred to countries outside the EU/EEA, we ensure:

• Standard Contractual Clauses (SCCs): Approved by the EU Commission
• Adequacy decisions: Transfer only to countries with an adequate level of protection
• Additional safeguards: Encryption, pseudonymization

7. Data protection and security

We implement comprehensive security measures:

• Encryption: TLS 1.3 for data in transit, AES-256 for data at rest
• Access control: Strict access management and authentication
• Regular audits: Security reviews and penetration tests
• Staff training: All employees are trained in data protection
• Incident response: Documented plan for data breaches

8. Retention period

We store your information only as long as necessary:

• Active accounts: Throughout the subscription period
• Inactive accounts: 12 months after last login, then deletion
• Billing data: 5 years (accounting requirements)
• Support communication: 3 years
• Marketing consent: Until you withdraw consent

9. Your rights under GDPR

You have the following rights:

9.1 Right of access (Art. 15)

You can request a copy of all personal data we hold about you.

9.2 Right to rectification (Art. 16)

You can request correction of inaccurate or incomplete information.

9.3 Right to erasure (Art. 17)

You can request deletion of your personal data (“right to be forgotten”).

9.4 Right to restriction of processing (Art. 18)

You can request temporary restriction of processing.

9.5 Right to data portability (Art. 20)

You can request your data in a structured, commonly used format.

9.6 Right to object (Art. 21)

You can object to processing based on legitimate interest or direct marketing.

9.7 Right not to be subject to automated decision-making (Art. 22)

You have the right not to be subject to decisions based solely on automated processing.

Exercise of rights: Contact us at privacy@tariffs.help or via your account settings. We will respond within 30 days.

10. Cookies

We use cookies to improve your experience:

10.1 Necessary cookies

• Session cookies: Keep you logged in (deleted upon logout)
• Security cookies: Protection against CSRF attacks

10.2 Functional cookies

• Language preferences: Remembers your chosen language
• UI settings: Your personal preferences

10.3 Analytical cookies (only with consent)

• Google Analytics: Anonymized usage statistics (IP anonymization enabled)

You can manage cookies via browser settings or our cookie banner upon first visit.

11. Children’s privacy

Tariffs.help is intended for business use. We do not knowingly collect information from individuals under 18 years of age. If you are a parent and discover that your child has provided us with information, please contact us.

12. Changes to this policy

We may update this policy from time to time. Significant changes will be communicated via:

• Email to registered users
• Notification upon login
• Update date at the top of this page

Continued use after changes constitutes acceptance of the new policy.

13. Complaints and supervision

If you are dissatisfied with our processing of your information, you have the right to complain to:

Datatilsynet Borgergade 28, 5. 1300 Copenhagen K Phone: +45 33 19 32 00 Email: dt@datatilsynet.dk Website: www.datatilsynet.dk

14. Contact us

If you have questions about this privacy policy or our data protection practices:

Email: privacy@tariffs.help Mail: Golden Planet ApS, Attn: Data Protection, Dalbygade 40 A, 6000 Kolding, Denmark Phone: +45 51900694

We strive to respond to all inquiries within 48 hours.

This Privacy Policy has been prepared in accordance with the EU General Data Protection Regulation (GDPR) and Danish data protection legislation.