Privacy policy

Tariffik is operated from Jersey, Channel Islands. We are committed to protecting your privacy and being transparent about how we handle your data. This policy explains what information we collect, why we collect it, and how it is processed.

1. Who we are

Tariffik provides commodity code lookup services to help individuals and businesses importing goods to the UK and Channel Islands identify the correct HS (Harmonized System) tariff codes for customs declarations.

2. Data we collect

2.1 Chrome extension data

The Tariffik Chrome Extension helps you look up commodity codes while browsing online stores. This section specifically addresses data collection by the extension, as required by the Chrome Web Store.

What the extension collects

• Product page URLs - The URL of product pages you choose to look up
• Product information - Title, description, price, and brand extracted from the current page when you initiate a lookup
• Extension ID - A randomly generated identifier stored locally to track anonymous usage limits
• IP address - Used solely for rate limiting and abuse prevention

What the extension does not collect

• Browsing history or pages you visit (we only see pages where you actively click the extension)
• Personal information from web pages (passwords, form data, payment details)
• Data from pages other than the active tab when you click the extension
• Any data when the extension is not actively being used

Extension permissions explained

How extension data is processed

When you perform a lookup, the extension sends product information to our servers via HTTPS. The data is processed by:

• Tariffik servers - To coordinate the lookup and return results
• Anthropic (Claude AI) - To analyse product descriptions and suggest commodity codes
• UK Trade Tariff API - To validate codes against official government data

Anonymous vs. authenticated usage

Anonymous users (not signed in) receive 3 free lifetime lookups. We track this using a randomly generated extension ID stored locally in your browser - no personal information is required.

Signed-in users can optionally save lookups to their account for future reference. You control whether each lookup is saved via the extension settings.

2.2 Account information

When you create an account, we collect:

• Email address - Used for account identification and authentication
• Password - Stored using secure one-way hashing (we cannot see your actual password)
• Unique email forwarding address - Generated automatically for your account

2.3 Order and product data

When you use our service, we collect:

• Product URLs - Links you submit for commodity code lookup
• Product descriptions - Extracted from URLs or provided by you
• Product images - Extracted from product pages or emails for identification
• Order reference numbers - From forwarded order confirmation emails
• Retailer names - Identified from emails or URLs
• Commodity codes - Both AI-suggested and user-confirmed codes

2.4 Email forwarding data

When you forward emails to your unique Tariffik address, we process:

• Email subject line
• Sender address
• Email body content - Both plain text and HTML versions
• Tracking URLs - Extracted from shipping notification emails

2.5 Guest user data

For users without an account, we collect minimal data for rate limiting:

• Anonymous session token - Stored as a cookie to track lookup limits
• URLs searched - To prevent abuse of free lookups
• IP address - For rate limiting and abuse prevention only

Guest lookup data is automatically deleted after 7 days.

2.6 Usage analytics

To improve our service, we collect anonymised usage data:

• Pages visited - Which pages you view on Tariffik
• Features used - Lookups performed, codes confirmed, orders created
• Timestamps - When actions occurred
• Browser and device type - For compatibility improvements

Privacy-first approach: All analytics data is stored in our own database - we do not use third-party analytics services like Google Analytics. We use cookieless tracking, meaning no analytics cookies are placed on your device. For logged-in users, usage data is associated with your account to provide a better experience. IP addresses are masked for privacy.

3. Data we do not collect

We want to be clear about what we do not collect or store:

• Payment or financial information - Tariffik is currently a free service
• Precise geolocation data
• Social media profiles or connections
• Contacts or address books
• Browsing history on other websites - We only track your activity on Tariffik itself
• Biometric data
• Data from your email inbox - We only see emails you explicitly forward to us

4. How we use your data

Your data is used exclusively for:

• Providing commodity code suggestions - The core service functionality
• Processing forwarded emails - To extract order and tracking information
• Maintaining your order history - So you can reference past lookups
• Account authentication - To secure your account
• Service improvement - Understanding how the service is used to make it better

We do not sell your data, use it for advertising, or share it with third parties for marketing purposes.

5. Sub-processors and third-party services

To provide our service, we use the following third-party providers who may process your data:

All sub-processors are bound by data processing agreements and are required to protect your data in accordance with applicable data protection laws.

6. Data retention

• Account data - Retained until you delete your account
• Order and product data - Retained until you delete your account or the specific order
• Forwarded emails - Retained for service functionality; you may request deletion
• Guest lookup data - Automatically deleted after 7 days
• Usage analytics - Retained for service improvement; deleted upon account deletion

7. Your rights

You have the right to:

• Access - Request a copy of all data we hold about you
• Rectification - Correct any inaccurate data
• Erasure - Request deletion of your data ("right to be forgotten")
• Data portability - Receive your data in a machine-readable format
• Object - Object to certain types of processing
• Withdraw consent - Where processing is based on consent

To exercise any of these rights, please contact us at the email address below.

8. Data security

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of data at rest
• Secure password hashing
• Regular security updates and monitoring
• Access controls limiting who can view data

9. International data transfers

Some of our sub-processors are located in the United States. Where data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or reliance on adequacy decisions.

10. Cookies and analytics

We use only essential cookies required for the service to function:

• Session cookie - Maintains your logged-in state
• Guest token cookie - Tracks free lookup limits for non-registered users

We do not use advertising or tracking cookies. We do not use third-party analytics services (such as Google Analytics).

Our usage analytics (see Section 2.6) are collected server-side without placing any cookies on your device. This privacy-first approach means we can improve our service while respecting your privacy.

11. Changes to this policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact us

If you have any questions about this privacy policy or how we handle your data, please contact us at: