Effective date: August 27, 2020

Last updated: October 2, 2026

1. About this Privacy Policy

JORI International Ltd., JORI Logistics LLC, 1208846 Alberta Inc., and their affiliated entities are collectively referred to as “JORI,” “we,” “us,” or “our.”

JORI provides customs brokerage, freight forwarding, warehousing, fulfillment, trade consulting, logistics technology, training, and related services. We are committed to handling personal information responsibly and transparently.

This Privacy Policy explains:

• what personal information we collect;
• where we obtain it;
• why and how we use it;
• when and with whom we disclose it;
• how we protect and retain it;
• how international processing may affect it; and
• the privacy rights and choices available to individuals.

This Privacy Policy applies to personal information that we process through:

• jorilogistics.com and other JORI websites that link to this Privacy Policy;
• JORI customer portals, applications, and online services;
• customs brokerage, freight forwarding, warehousing, fulfillment, consulting, training, and related services;
• communications with customers, prospective customers, carriers, vendors, business partners, and other individuals;
• marketing activities, events, surveys, and newsletters; and
• recruitment activities, unless a separate applicant or employee privacy notice applies.

This Privacy Policy does not govern a third party’s independent handling of personal information. When you interact directly with a government agency, carrier, payment provider, external website, or other third party, its own privacy policy may also apply.

2. What Personal Information Means

“Personal information” means information about an identifiable individual or information that can reasonably be linked to an individual. It does not generally include information that has been anonymized so that it cannot reasonably be associated with an individual.

The meaning of personal information may vary under applicable law.

3. JORI’s Role

Depending on the circumstances, JORI may act as:

• an organization or controller that determines why and how personal information is processed; or
• a service provider or processor acting for a customer and processing personal information according to that customer’s instructions.

For example, when JORI processes shipment, importer, consignee, driver, or delivery information to provide services for a business customer, the customer may be responsible for determining the purposes of the processing. Requests concerning such information may need to be directed to that customer. JORI will assist its customers with privacy requests where required by law or contract.

4. Personal Information We Collect

The information we collect depends on how an individual interacts with JORI and which services are provided.

Contact and business information

We may collect:

• name;
• business name and industry;
• job title or role;
• business and personal contact information;
• mailing, billing, pickup, and delivery addresses;
• preferred language and communication preferences; and
• customer, vendor, carrier, or partner relationship information.

Account and portal information

We may collect:

• username and account identifiers;
• authentication and security information;
• account permissions and authorized-user information;
• portal activity and access logs; and
• settings and preferences.

We do not ask individuals to send passwords or authentication codes through ordinary email or contact forms.

Customs, shipping, and logistics information

To provide customs, transportation, warehousing, fulfillment, and consulting services, we may process:

• importer, exporter, shipper, consignee, purchaser, seller, and manufacturer information;
• customs, tax, business, and account identifiers;
• powers of attorney, agency agreements, and authorization records;
• commercial invoices, certificates of origin, permits, licences, and customs documentation;
• bills of lading, waybills, manifests, packing lists, and shipping instructions;
• product descriptions, tariff classifications, values, countries of origin, and shipment contents;
• pickup, delivery, routing, tracking, and location information;
• vehicle identification numbers, licence plate information, and vehicle records;
• carrier, driver, warehouse, and delivery-contact information;
• signatures and proof-of-delivery information;
• claim, loss, damage, and insurance information; and
• records of instructions, approvals, transactions, and communications relating to a shipment or service.

Identity and compliance information

Where necessary to provide services, verify authority, or comply with legal requirements, we may collect:

• signatures;
• dates of birth;
• passport, driver’s licence, or other government identification information;
• customs and tax identifiers;
• ownership, control, or authorized-representative information;
• sanctions, restricted-party, and trade-compliance screening results; and
• other information required by customs, transportation, trade, tax, security, or law-enforcement authorities.

We limit the collection of sensitive identification information to circumstances in which it is reasonably necessary or permitted by law.

Financial and transaction information

We may collect:

• billing and invoicing information;
• payment and remittance details;
• bank or credit information where necessary;
• transaction history;
• creditworthiness or credit-reference information;
• duties, taxes, fees, disbursements, and account balances; and
• records required for financial, accounting, and audit purposes.

Payment-card information may be processed by a payment-service provider. JORI may not retain complete payment-card details when the transaction is handled directly by that provider.

Communications and relationship information

We may collect:

• emails, telephone calls, messages, and other correspondence;
• customer-support inquiries and responses;
• quote and service requests;
• meeting notes;
• complaints and feedback;
• survey responses;
• event and training registrations; and
• marketing preferences.

Where permitted by law, calls or meetings may be recorded for training, quality, security, or record-keeping purposes. We will provide notice when required.

Website, device, and usage information

When an individual uses a JORI website, portal, or online service, we or our service providers may automatically collect:

• IP address;
• browser, operating system, and device information;
• device and advertising identifiers;
• approximate location derived from an IP address;
• referring and exit pages;
• pages, links, and features viewed or used;
• searches and interactions;
• date, time, and duration of visits;
• account login and session information;
• error, diagnostic, and security logs; and
• information collected through cookies, pixels, local storage, and similar technologies.

Recruitment information

When an individual applies to work with JORI, we may collect:

• contact information;
• résumé, employment, education, and professional history;
• qualifications, licences, and certifications;
• interview and assessment information;
• work-authorization and availability information;
• references; and
• other information voluntarily provided in an application.

Successful applicants and employees may receive a separate employee privacy notice.

5. Sources of Personal Information

We may collect personal information:

• directly from the individual;
• from a customer or its authorized representatives;
• from importers, exporters, shippers, consignees, carriers, drivers, warehouses, agents, suppliers, and other supply-chain participants;
• from customs, tax, transportation, port, security, and other government authorities;
• from payment processors, insurers, credit-reference services, and professional advisers;
• from publicly available records and databases;
• from social media and professional-networking platforms;
• from marketing, event, and lead-generation partners; and
• automatically through websites, portals, cookies, and similar technologies.

A customer that provides personal information about another individual is responsible for ensuring that it has appropriate authority to do so and, where required, has provided that individual with an appropriate privacy notice.

6. How We Use Personal Information

JORI may use personal information to:

• provide customs brokerage, freight forwarding, transportation, warehousing, fulfillment, consulting, training, and related services;
• prepare, submit, manage, and retain customs, shipping, regulatory, and trade documentation;
• communicate with customers, carriers, vendors, government authorities, and supply-chain participants;
• provide quotes, create and administer accounts, process instructions, and manage customer relationships;
• arrange transportation, storage, handling, delivery, insurance, inspections, and other requested services;
• verify identity, authority, account access, and transaction details;
• conduct sanctions, restricted-party, fraud, security, and compliance screening;
• process payments, duties, taxes, fees, refunds, credits, and account balances;
• provide customer support and respond to inquiries, requests, complaints, and claims;
• operate, secure, maintain, personalize, and improve our websites, portals, technology, and services;
• troubleshoot errors, monitor performance, and protect against fraud, misuse, cyber threats, and unauthorized access;
• conduct analytics, research, audits, forecasting, and business planning;
• send newsletters, service information, event invitations, and marketing communications in accordance with applicable law;
• organize events, webinars, surveys, and training;
• recruit and evaluate applicants;
• establish, exercise, or defend legal rights and claims;
• comply with contracts, court orders, subpoenas, legal processes, and regulatory requirements;
• cooperate with customs, tax, transportation, national-security, and law-enforcement authorities;
• conduct due diligence and support an actual or proposed merger, acquisition, financing, reorganization, or sale of assets; and
• carry out other purposes disclosed at the time of collection or authorized by the individual or by law.

7. Consent and Other Legal Grounds

Where consent is required, JORI may rely on express or implied consent depending on the sensitivity of the information, the individual’s reasonable expectations, and the circumstances.

Where permitted by applicable law, JORI may also process personal information when necessary:

• to enter into or perform a contract;
• to comply with a legal obligation;
• for legitimate business interests that are not overridden by the individual’s rights;
• to protect an individual’s vital interests;
• to establish, exercise, or defend legal claims; or
• for another purpose authorized by law.

An individual may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may prevent JORI from providing certain services.

JORI will not require consent to collect, use, or disclose personal information beyond what is reasonably necessary to provide a requested product or service, unless the additional processing is optional and an appropriate choice is provided.

8. How We Disclose Personal Information

JORI may disclose personal information to the following recipients when reasonably necessary for the purposes described in this Privacy Policy.

Customers and account administrators

We may disclose information to the customer for whom we provide services and to its authorized employees, account administrators, agents, and representatives.

Customs and government authorities

We may disclose information to:

• the Canada Border Services Agency;
• U.S. Customs and Border Protection;
• customs, tax, transportation, port, trade, agriculture, health, security, and other authorities in relevant countries; and
• courts, regulators, law-enforcement agencies, and other government entities where required or permitted by law.

Supply-chain and service partners

We may disclose information to:

• air, ocean, rail, motor, courier, and other carriers;
• customs brokers and freight forwarders;
• warehouses, terminals, ports, consolidators, and handling agents;
• importers, exporters, shippers, consignees, manufacturers, purchasers, and sellers;
• inspection, insurance, claim, and risk-management providers; and
• other parties involved in arranging, transporting, clearing, storing, tracking, or delivering goods.

Vendors and professional advisers

We may use vendors that provide:

• website and application hosting;
• cloud storage and software;
• customer relationship and communications systems;
• payment and billing services;
• cybersecurity, fraud prevention, authentication, and technical support;
• data analytics and website measurement;
• marketing and email delivery;
• document management and electronic signatures;
• auditing, legal, tax, insurance, and professional services; and
• records storage and secure destruction.

These providers are authorized to process personal information only for defined purposes and are expected to protect it appropriately.

Affiliates and international offices

We may disclose information among JORI entities, offices, and authorized personnel when necessary to provide services, administer our business, support customers, or comply with legal requirements.

Business transactions

Personal information may be disclosed in connection with a proposed or completed financing, merger, acquisition, reorganization, sale, transfer, insolvency proceeding, or similar corporate transaction. We will use appropriate protections and provide notice where required by law.

Legal, safety, and compliance purposes

We may disclose information when we reasonably believe disclosure is necessary to:

• comply with applicable law or legal process;
• respond to a lawful request from an authority;
• enforce an agreement;
• investigate fraud, illegal activity, security incidents, or misuse;
• protect JORI, our customers, an individual, or the public; or
• establish, exercise, or defend legal claims.

JORI does not sell personal information for monetary consideration. Certain disclosures involving analytics or advertising technologies may be treated as “sharing,” “targeted advertising,” or a “sale” under some privacy laws even when no money is exchanged. Where those laws apply, JORI provides the required notice and choices.

9. International Processing and Transfers

JORI operates internationally and uses personnel and service providers located inside and outside Canada. Personal information may therefore be accessed, stored, or processed in Canada, the United States, the Philippines, and other countries in which JORI or its service providers operate.

These countries may have privacy laws that differ from those in the individual’s home jurisdiction. Personal information processed in another country may be accessible to courts, law-enforcement agencies, national-security authorities, or regulators in accordance with that country’s laws.

JORI remains responsible for personal information under its control. Where appropriate or required, we use contractual, organizational, and technical measures intended to provide an appropriate level of protection for information accessed or processed outside its country of origin.

Individuals may contact the Privacy Officer to ask questions about JORI’s use of service providers outside Canada, the countries in which those providers process personal information, or the safeguards used for an international transfer.

10. Cookies, Analytics, and Similar Technologies

JORI websites and online services use cookies and similar technologies. These technologies may include pixels, tags, scripts, local storage, software development kits, and device identifiers.

They may be used to:

• operate websites and portals;
• maintain sessions and authentication;
• remember preferences;
• protect security and prevent fraud;
• understand website use and performance;
• identify and resolve errors;
• measure communications and campaigns; and
• provide or measure relevant advertising, where permitted.

JORI’s cookie categories may include:

• Strictly necessary cookies: Required for security, navigation, account access, and essential functionality.
• Functional cookies: Remember choices and provide enhanced features.
• Analytics cookies: Help us understand how websites and services are used.
• Advertising cookies: Help measure campaigns or provide relevant advertising.

Where required, non-essential cookies are used only after consent. Individuals may use the cookie preference tool available on the website to accept, reject, or change non-essential cookie settings. Browser settings may also block or delete cookies, although some services may not operate properly as a result.

JORI may use tag-management and analytics tools, including Google Tag Manager and related services. A current description of cookie 

providers and purposes should be maintained in JORI’s cookie preference tool or a separate cookie notice.

Where required by law, JORI will process recognized browser-based opt-out preference signals, such as Global Privacy Control, as a request to opt out of covered cookie-based sharing or targeted advertising.

11. Marketing Choices

JORI may send information about services, trade developments, training, webinars, events, and other subjects that may be relevant to customers and subscribers.

Individuals may unsubscribe from marketing email by using the unsubscribe link in the message or by contacting JORI. An opt-out from marketing does not prevent JORI from sending service, security, account, billing, customs, shipment, or other transactional communications.

JORI will obtain consent for electronic marketing where required by applicable law.

12. Retention and Disposal

JORI retains personal information only for as long as reasonably necessary to:

• provide services and administer customer relationships;
• complete customs, logistics, financial, and operational transactions;
• meet customs, tax, accounting, employment, and other legal requirements;
• respond to access requests, complaints, audits, claims, and disputes;
• enforce agreements and protect legal rights; and
• maintain appropriate business and security records.

Retention periods vary depending on the information, the service, the jurisdiction, contractual requirements, and applicable limitation periods.

When personal information is no longer required, JORI will securely destroy it, delete it, or render it non-identifying, subject to legal and technical limitations. De-identified or aggregated information may be retained and used for legitimate business purposes where permitted by law.

13. How We Protect Personal Information

JORI uses reasonable administrative, technical, contractual, and physical safeguards designed to protect personal information against unauthorized access, collection, use, disclosure, copying, modification, loss, disposal, or destruction.

Safeguards are selected based on factors such as the sensitivity, amount, format, location, and intended use of the information. They may include:

• role-based access and authorization controls;
• authentication and account-management measures;
• network, endpoint, and system protections;
• encryption or other protective technologies where appropriate;
• physical security;
• confidentiality obligations;
• employee privacy and security training;
• vendor assessments and contractual protections;
• monitoring, backup, recovery, and incident-response processes; and
• secure retention and disposal procedures.

No system or transmission method can be guaranteed to be completely secure. Individuals should use unique passwords, protect account credentials, and promptly notify JORI of suspected unauthorized account activity.

JORI maintains procedures for assessing and responding to privacy and security incidents. Where an incident creates a legally defined risk or notification obligation, JORI will notify affected individuals and regulators as required by applicable law.

14. Privacy Rights and Choices

Depending on the applicable law and circumstances, an individual may have the right to:

• ask whether JORI holds or processes personal information about them;
• request access to personal information;
• obtain information about how personal information has been used and disclosed;
• request correction of inaccurate or incomplete information;
• withdraw consent;
• request deletion or erasure;
• request restriction of or object to certain processing;
• receive certain information in a portable format;
• opt out of direct marketing;
• opt out of certain targeted advertising, sharing, or sales;
• appeal a decision concerning a privacy request;
• make a complaint to JORI or an applicable privacy regulator; and
• receive equal service and pricing without unlawful discrimination for exercising a privacy right.

These rights are not absolute. JORI may retain information or decline a request where permitted or required by law, including where information is needed for customs, taxation, security, contractual, legal-claim, or record-retention purposes.

Submitting a request

Requests may be submitted through JORI’s Data Privacy Request form or to the Privacy Officer using the contact information below.

JORI may request information reasonably necessary to verify identity and authority before processing a request. If an authorized agent submits a request, JORI may require evidence of the agent’s authority and may contact the individual directly for verification.

JORI will respond within the period required by applicable law. JORI does not normally charge a fee, although a reasonable fee may be charged where permitted by law and appropriate advance notice is provided.

Where JORI processes information only on behalf of a business customer, we may refer the request to that customer and assist it as required.

15. Additional Information for Canadian Residents

JORI’s Canadian operations may be subject to Alberta’s Personal Information Protection Act, the federal Personal Information Protection and Electronic Documents Act, and other applicable Canadian privacy laws.

Canadian residents may request access to their personal information, information concerning its use or disclosure, and correction of inaccurate information. They may also withdraw consent, subject to legal or contractual restrictions and reasonable notice.

Individuals who are dissatisfied with JORI’s response may contact the Office of the Information and Privacy Commissioner of Alberta, the 

Office of the Privacy Commissioner of Canada, or another regulator with jurisdiction.

16. Additional Information for Residents of Certain U.S. States

Residents of California and certain other U.S. states may have additional rights where the relevant law applies to JORI.

For purposes of those laws, the categories of personal information described in this Privacy Policy may include:

• identifiers and contact information;
• customer-record information;
• commercial and transaction information;
• internet and electronic-network activity;
• approximate geolocation information;
• professional and employment information;
• education information;
• inferences and preferences; and
• sensitive personal information, such as government identification, account credentials, or information required for certain customs or logistics services.

JORI collects these categories from the sources described in Section 5, uses them for the purposes described in Section 6, and may disclose them to the recipients described in Section 8.

JORI does not sell personal information for monetary consideration. If JORI uses advertising or analytics technologies that applicable law defines as sharing, targeted advertising, or a sale, residents may exercise the applicable opt-out right through the website’s cookie preference tool, a recognized opt-out preference signal, or the Data Privacy Request form.

JORI does not knowingly sell or share for targeted advertising the personal information of individuals under 16 years of age.

Where required, U.S. residents may request access, correction, deletion, portability, or an opt-out, and may appeal a decision concerning a request. JORI will not unlawfully discriminate against an individual for exercising these rights.

17. Additional Information for Individuals in the EEA, United Kingdom, or Switzerland

Where European data-protection law applies, the JORI entity responsible for the relevant relationship will normally act as the controller. 

JORI may also act as a processor for a customer.

JORI’s legal grounds may include:

• performance of a contract or steps requested before entering into a contract;
• compliance with legal obligations;
• legitimate interests in providing, securing, improving, and administering our services;
• consent; and
• establishment, exercise, or defence of legal claims.

Applicable rights may include access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and the right to complain to a supervisory authority.

Where personal information is transferred internationally, JORI will use an appropriate transfer mechanism where required, which may include an adequacy decision, approved contractual clauses, or another legally recognized safeguard.

18. Children’s Information

JORI’s websites and services are directed to businesses and are not intended for children under 16. JORI does not knowingly collect personal information directly from children under 16 through its websites for marketing or account-registration purposes.

Information about a minor may occasionally appear in customs, shipping, employment-benefit, or other documentation supplied by a customer. JORI processes that information only as necessary to provide services or comply with law.

If a parent or guardian believes that a child provided personal information directly to JORI without appropriate authorization, the parent or guardian should contact the Privacy Officer.

19. Third-Party Websites and Services

JORI websites may contain links, embedded content, social-media features, maps, videos, payment tools, or other services operated by third parties.

A third party may collect information directly from an individual, use cookies, or track interactions according to its own privacy practices. 

JORI encourages individuals to review the privacy policies of third-party services before providing information.

20. Changes to this Privacy Policy

JORI may update this Privacy Policy to reflect changes in our services, practices, technology, or legal obligations.

The effective and last-updated dates will appear at the beginning of the policy. If a change materially affects how personal information is handled, JORI will provide additional notice and obtain consent where required by law.

21. Contacting JORI

Questions, complaints, requests to exercise privacy rights, and questions concerning international service providers may be directed to:

Privacy Officer
JORI International Ltd.
10-1323 44 Avenue NE
Calgary, Alberta T2E 6L5
Canada

Email: cybersecurity@jorilogistics.com
Telephone: 403-571-3200
Online request form: submit here

For matters involving JORI Logistics LLC in the United States:

JORI Logistics LLC
15355 Vantage Parkway West, Suite 110
Houston, Texas 77032
United States

JORI will investigate privacy complaints and respond in accordance with applicable law. If a complaint is not resolved, an individual may 

contact the privacy or data-protection regulator with jurisdiction.