Privacy Policy

Effective Date: September 27, 2026
Last Updated: September 27, 2026 (this Privacy Policy is reviewed and, if necessary, updated at least annually)

1. Scope and Applicable Laws

This Privacy Policy explains how AAT Forwarding LLC, a Florida, USA limited liability company (“we”, “us”, “our”), collects, uses, stores, discloses, and protects personal information in connection with our website, customer and courier interactions, operational services, portals, and related internal systems.

This Privacy Policy applies to personal information processed through aatforwarding.com, related websites or portals, and our operational systems, including the Amalberan Business Group Assistant (ABGA) platform and its applicable company-specific modules and services.

Depending on the individual, activity, and applicable law, processing may be subject to U.S. federal and state privacy laws and, where applicable, the GDPR, UK GDPR, or other data-protection laws.

2. Data We Collect

Depending on the relationship and service involved, we may collect:

Information provided directly by you

• Name and contact details
• Email address and telephone number
• Company and business information
• Billing and payment information
• Delivery, shipment, and operational information
• Information submitted through website forms, inquiries, requests, or portals
• Communications with us

Courier and operational information

Where required for operational qualification or assignment, we may collect:

• Passport and travel-document information
• Nationality and travel eligibility information
• Visa and entry documentation
• Courier qualification and compliance documents
• Availability and assignment information
• Travel and accommodation information
• Information required to satisfy customer, destination, or regulatory requirements
• Health-related information where specifically required for travel or compliance, such as Yellow Fever documentation

Automatically collected information

We may collect limited technical information such as:

• IP address
• Browser and device information
• Operating system
• Access times
• Referring pages
• Security and technical logs
• Information necessary to maintain website and system security

We do not intentionally collect more personal information than reasonably necessary for the relevant purpose.

3. Purposes and Lawful Grounds

We may process personal information for purposes including:

• Responding to inquiries and service requests
• Providing and coordinating logistics and courier services
• Creating and managing cases, orders, and operational records
• Assessing feasibility and operational requirements
• Matching couriers or operational resources to assignments
• Verifying qualification and compliance requirements
• Managing travel arrangements and related services
• Processing payments, billing, and accounting
• Communicating with customers, couriers, partners, and service providers
• Maintaining operational, security, and audit records
• Conducting research and business development activities
• Improving our website, services, workflows, and internal operations
• Complying with legal, regulatory, contractual, and security obligations
• Protecting our rights, property, systems, personnel, customers, and other parties

Where GDPR, UK GDPR, or another law requiring a defined legal basis applies, we may rely on applicable grounds including performance of a contract, legitimate interests, compliance with legal obligations, consent, or other lawful grounds available under applicable law.

4. Data Flows and System Integration

When you submit data via the website or portals, that data may be transmitted to our internal systems and the Amalberan Business Group Assistant (ABGA) platform and its company-specific modules and services for order management, dispatch, courier management, and operational coordination.

ABGA provides shared technical and workflow infrastructure. Company-specific data remains associated with the relevant company module and is not made available to another company merely because those companies use the same platform.

Depending on the service and workflow, data may be processed through:

• ABGA Assistant Workspace
• The applicable company-specific module
• Order and case management
• Dispatch and operational workflows
• Customer and courier records
• Classification and feasibility workflows
• Courier matching and requirement checks
• Research and data-enrichment functions
• Operational recommendation and workflow-support functions
• Reporting, communication, and audit functions

Access to personal information within these systems is intended to be limited according to operational need, system configuration, and applicable access controls.

5. International Data Transfers

Because our operations and service providers may operate across different jurisdictions, personal information may be transferred to and processed in countries other than the country in which it was originally collected.

Where applicable law requires safeguards for international transfers, we intend to use appropriate mechanisms and safeguards, such as contractual protections or other legally recognized transfer mechanisms.

6. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including contractual, operational, legal, accounting, dispute-resolution, security, and compliance requirements.

Specific retention periods may vary by category of information and are governed by our internal data-retention requirements. These categories may include:

• Leads and inquiries
• Cases and orders
• Billing and payment records
• Courier qualification and compliance records
• Portal accounts
• Security and access logs
• Operational communications
• Research and marketing records

Retention periods are reviewed periodically and adjusted where required by applicable law or business requirements. This Privacy Policy is reviewed and, if necessary, updated at least annually.

7. Security Measures

We use organizational, technical, and operational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, or destruction.

Depending on the system and information involved, these measures may include:

• Access controls
• Authentication and authorization mechanisms
• Encryption
• Security and audit logging
• Multi-factor authentication where implemented
• Controlled access to sensitive information
• Incident-response procedures
• Security monitoring and operational safeguards

No method of transmission or storage can be guaranteed to be completely secure.

8. Your Rights

Depending on your location and applicable law, you may have rights concerning your personal information.

These may include rights to:

• Access personal information
• Request correction of inaccurate information
• Request deletion
• Request portability
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Opt out of certain processing where required by applicable law
• Appeal certain privacy decisions where applicable

For requests relating to your personal information, contact:

AAT Forwarding LLC
Email: legal@aatforwarding.com

We may need to verify your identity before completing a request. Requests will be handled according to the procedures, exemptions, response periods, and other requirements applicable under the relevant law. Where applicable U.S. state privacy laws provide additional rights, including rights to appeal or opt out of certain processing, we will honor those rights as required by the applicable law.

9. Cookies, Tracking, and Analytics

As of the effective date of this Privacy Policy, aatforwarding.com does not intentionally use third-party analytics or marketing cookies for behavioral advertising. We do not sell or share personal information for targeted advertising.

We may use technical cookies or similar technologies where necessary for website functionality, security, authentication, or other essential purposes.

We may use Google Search Console to understand search performance of our website. Google Search Console provides search-performance information and does not itself place tracking cookies on website visitors’ devices.

The ABGA Website Agent may technically or structurally analyze publicly accessible website content for purposes such as SEO review, content analysis, and search-visibility research. Such analysis of public website content does not by itself constitute visitor tracking.

If we introduce non-essential cookies, analytics, advertising technologies, or similar tracking technologies in the future, we will update this Privacy Policy and obtain consent where required by applicable law.

10. Automated Processing and Decision-Making

We may use automated systems, algorithms, and AI-assisted functions within our internal operations and through the ABGA Assistant Workspace and applicable company-specific modules.

These functions may support activities such as:

• Classification
• Feasibility assessment
• Courier matching and recommendations
• Requirement checks
• Research and data enrichment
• Distributor suggestions
• Operational recommendations
• Scenario analysis
• Workflow support
• Reporting and information analysis

These systems are intended to provide recommendations, classifications, information, or operational support. They are not intended to make solely automated decisions that produce legal or similarly significant effects on individuals. Final operational, commercial, qualification, assignment, and other consequential decisions are subject to human review where required by applicable law and our operational procedures.

Where applicable law provides specific safeguards concerning automated decision-making, we will apply those safeguards.

11. Sensitive Personal Information

Certain operational activities may require the processing of information that is considered sensitive or special-category personal data under applicable law.

Depending on the circumstances, this may include:

• Passport or travel-document information
• Nationality
• Yellow Fever or other health-related travel documentation
• Qualification and compliance documentation

Where GDPR, UK GDPR, or similar laws apply, special-category data will only be processed where an applicable legal basis and additional condition permit such processing, together with appropriate safeguards.

We do not sell sensitive personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, systems, legal requirements, or data-processing practices.

When we make material changes, we may update the effective date and provide additional notice where required by applicable law. This Privacy Policy is reviewed and, if necessary, updated at least annually.

13. Contact

For questions, requests, or concerns regarding this Privacy Policy or our handling of personal information, please contact:

AAT Forwarding LLC
Florida, USA
Email: legal@aatforwarding.com

Legal Notice / Imprint