Privacy Policy

Who We Are

CTL Import ("we," "us," or "our") is a package forwarding and logistics service based in Costa Rica. We operate the website ctlimport.com and the client portal available at that domain.

We receive packages on behalf of our clients at our Miami warehouse address and ship them to Costa Rica. This privacy policy explains what personal data we collect, how we use it, and your rights over it.

What Information We Collect

When you create a CTL Import account, we collect:

• Full name — used to identify your packages and personalise communications
• Email address — used to send your login link and shipment updates
• Phone number — used for WhatsApp delivery notifications
• Costa Rica delivery address — used to ship your packages to you
• Tracking numbers — submitted by you to track your incoming shipments
• Registration date — recorded when your account is created

We do not collect payment card information, government ID numbers, or passwords.

How We Use Your Information

• To create and manage your client account
• To send you a secure magic login link via email
• To receive, track, and ship your packages from Miami to Costa Rica
• To notify you via WhatsApp when your packages arrive
• To respond to your support requests

We do not use your information for advertising, sell it to third parties, or use it for any purpose other than providing our shipping service.

Third-Party Services We Use

To operate our service, your data is shared with the following processors:

All processors are required to handle your data securely and in accordance with applicable data protection laws.

Cookies & Local Storage

We do not use tracking cookies or advertising cookies. Our client portal stores a secure session token in your browser's localStorage to keep you logged in. This token expires after 7 days and contains only your account identifier — no personal data.

No third-party tracking scripts are loaded on this website.

Data Security

We protect your data with the following measures:

• All data transmitted between your browser and our servers is encrypted via HTTPS (TLS)
• Login is handled via cryptographically signed magic links (HMAC-SHA256) — no passwords are stored
• Your Airtable API credentials are stored as server-side environment variables, never exposed to the browser
• Access to the client portal is restricted to authenticated sessions only

How Long We Keep Your Data

We retain your account data for as long as you are an active client of CTL Import. If you close your account or request deletion, we will remove your personal information from our systems within 30 days, except where we are legally required to retain records.

Shipment tracking records may be retained for up to 12 months for logistics and compliance purposes.

Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — update your name, phone, or delivery address at any time in your portal
• Deletion — request that we delete your account and all associated personal data
• Portability — request your data in a readable format

To exercise any of these rights, contact us at the email address below.

Children's Privacy

Our service is not directed at children under the age of 18. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this privacy policy or how we handle your data, please reach out: