Privacy Policy

01 Who controls your data

Orvion Consulting is a Brazilian foreign trade consulting, advisory and technology company. It acts as the controller of the personal data processed in the context of its services, contact channels and platforms.

02 Where this policy applies

This is Orvion’s single privacy policy. It covers every point of contact with the company:

• the orvionconsulting.com website in any language (Portuguese, English and Mandarin), and the blog;
• forms, e-mails and analysis requests you send us;
• customer service over WhatsApp Business on Orvion’s official number;
• the Orvion Draw management platform (app.orvionconsulting.com) and other systems made available to clients;
• the Mandarin-language platform zh.orvionconsulting.com, aimed at foreign suppliers;
• the delivery of the foreign trade services you contract.

03 Data we collect

Data you provide

• Identification and contact: name, company, role, e-mail, phone and WhatsApp number.
• Foreign trade operation data: company registration details, import and export documents, tariff classification (NCM), values, deadlines and other operational information required to deliver the service.
• Message content: what is said in conversations with our team through any of our channels.
• Platform account data: login e-mail, password (stored encrypted) and usage logs.

Data collected automatically

• Browsing: pages visited and basic technical data, through essential cookies and, where applicable, audience measurement.
• Language preference: the site version you chose is stored in your own browser, on your device. That information is not sent to us.
• Message metadata: date, time and delivery status of WhatsApp messages.

We do not collect sensitive personal data and we do not direct our services to anyone under 18.

04 What we use your data for

• To deliver and run the foreign trade services you contracted.
• To answer requests and provide commercial and support assistance.
• To communicate deadlines, process status and information relevant to your operation.
• To operate the Orvion platforms, including alerts on expiring deadlines and customs regime balances.
• To comply with legal and regulatory obligations before public bodies — in particular the Receita Federal (Brazilian tax and customs authority).
• To improve our services and the security of our systems.

We do not sell personal data and we do not use your data for third-party advertising.

05 Legal basis

We process personal data on the legal bases set out in the LGPD, in particular:

• Performance of a contract and preliminary steps taken at your request (art. 7, V);
• Compliance with a legal or regulatory obligation (art. 7, II) — customs clearance imposes record-keeping and reporting duties;
• Legitimate interest (art. 7, IX), always respecting your rights and freedoms;
• Consent (art. 7, I), where the purpose depends on it.

06 WhatsApp customer service

Our WhatsApp service runs on the WhatsApp Business Platform (Meta’s official API). When you start a conversation, your messages are processed by that infrastructure and by our service desk tool.

We use those messages exclusively to assist you and run your operation — never for unsolicited bulk messaging. You may ask us to end the conversation and delete your contact at any time. Your use of WhatsApp is also subject to Meta’s own privacy policy.

07 Orvion platforms and tax secrecy

On the platforms we make available to clients, we process foreign trade data that may be protected by Brazilian tax secrecy. That data is accessed only by people authorised by the client itself, with an auditable access log, and is used solely for the contracted purpose.

08 Who we share it with

We do not sell your data. We share only what is necessary, in the following situations:

• Public bodies and authorities when indispensable to customs clearance and to the legal obligations of your operation.
• Logistics chain partners — carriers, warehouses, insurers and agents — strictly as the operation requires.
• Technology providers that support us (hosting, messaging and service desk platforms), under contractual confidentiality and security obligations.
• Authorities upon a legal or judicial order.

09 Cookies

The site uses cookies essential to its operation and, where applicable, audience measurement cookies. Your language choice is kept in your browser’s local storage and stays on your device. You can delete or block cookies in your browser settings — some functions may stop working.

10 How long we keep it

We keep data for as long as necessary for the purposes in this policy and to comply with legal obligations — including tax and customs retention periods, which can reach five years or more from the triggering event. Once the need ends, data is securely deleted or anonymised.

11 Security

We apply technical and organisational measures to protect your data against unauthorised access, loss or alteration — including individual access control, encryption in transit, backups and activity logging. No system is infallible, but we work continuously to reduce risk. In the event of a relevant security incident, we will notify the affected data subjects and the ANPD as required by law.

12 Your rights

Under art. 18 of the LGPD, you may at any time:

To exercise any of them, write to contato@orvionconsulting.com. We reply within the statutory deadline. You may also file a complaint with the ANPD — Brazil’s National Data Protection Authority.

13 International transfers

Some providers we use — such as the WhatsApp/Meta infrastructure and hosting services — may process data outside Brazil. In those cases we apply the safeguards required by the LGPD to maintain the same level of protection.

14 Changes to this policy

We may update this policy to reflect legal changes or changes to our services. The version in force is always on this page, with the update date at the top. Material changes will be announced through our channels.

15 Contact and Data Protection Officer

Questions about this policy, about your data or about exercising your rights? Talk to Orvion. The channel below is also that of the Data Protection Officer:

• ✉ contato@orvionconsulting.com
• 🌐 orvionconsulting.com
• ◎ @orvioncon