PrivacyPolicy.

1. Data we may collect

When you use our website or contact us, we may collect information provided directly by you, including:

• name;
• email address;
• telephone or WhatsApp number;
• company;
• CNPJ (Brazilian company registration number), when provided;
• job title or role;
• city and state;
• information about the company's profile and its import operations;
• messages and other information voluntarily submitted through our forms or customer service channels.

Certain technical information related to browsing may also be collected automatically, such as IP address, device and browser type, pages accessed, date and time of access, and similar data required for the security, operation and analysis of the website.

2. How we use your data

The personal data collected may be used to:

• respond to contact requests;
• understand your company's business needs;
• prepare proposals and continue commercial negotiations;
• provide and manage our services;
• maintain communication with clients, prospective clients, suppliers and partners;
• improve our website, customer service, services and processes;
• prevent fraud, abuse and security incidents;
• comply with legal, regulatory or contractual obligations;
• exercise or defend rights in administrative, judicial or arbitration proceedings.

We do not sell personal data.

3. Legal bases

Where Brazilian law applies, personal data will be processed in accordance with the legal bases provided for under Law No. 13,709/2018 — the Brazilian General Data Protection Law (LGPD), including, as applicable, consent, performance of a contract or preliminary procedures related to a contract, compliance with a legal or regulatory obligation, the regular exercise of rights and legitimate interests.

4. Sharing of information

We may share personal information, when necessary, with companies related to our operations, technology, hosting, communications and logistics providers, consultants, service providers and other partners involved in carrying out the activities requested by the user or the company they represent.

We may also share information when necessary to comply with a legal or regulatory requirement, an order from a competent authority, or to protect our rights.

Sharing will be limited to the information necessary for the corresponding purpose.

5. International data transfers

All Commodities operates internationally, including operations and business infrastructure in China and Brazil.

For this reason, certain information may be accessed, stored or processed outside Brazil when necessary for customer service, the provision of services, communication between our teams or the operation of systems used by the company.

Where applicable, international data transfers will be carried out in accordance with the relevant legislation and with appropriate protective measures in place.

6. Storage and security

We adopt technical and administrative measures designed to protect personal data against unauthorized access, loss, alteration, disclosure or improper processing.

Data will be retained for the period necessary to fulfill the purposes for which it was collected, comply with legal and contractual obligations, and safeguard the rights of the company and third parties.

No electronic system is completely immune to risk. Therefore, although reasonable security measures are adopted, it is not possible to guarantee absolute protection against every incident.

7. Cookies and similar technologies

Our website may use cookies and similar technologies required for page functionality, security, performance and browsing analysis.

If analytics, advertising or other technologies requiring specific consent are implemented, appropriate mechanisms for information and user choice may be made available.

8. Links to third-party websites

Our website may contain links to pages, platforms or services maintained by third parties.

All Commodities does not control the privacy practices of these third parties. We recommend that users review their respective policies before providing personal information.

9. Data subject rights

Under applicable law, data subjects may request, among other applicable rights:

• confirmation that processing is taking place;
• access to their data;
• correction of incomplete, inaccurate or outdated information;
• anonymization, blocking or deletion, where applicable;
• information about data sharing;
• withdrawal of consent when processing is based on consent;
• deletion of data processed on the basis of consent, subject to applicable legal retention requirements.

Requests may be submitted through the contact channels indicated in this Policy.

10. Data relating to minors

Our website and services are primarily intended for companies and professionals and are not intended to knowingly collect personal data from children or adolescents.

If the improper collection of this type of information is identified, appropriate measures may be taken to delete it or process it in accordance with applicable law.

11. Changes to this Policy

This Privacy Policy may be updated periodically to reflect changes to our services, processes, technologies or legal requirements.

The current version will always be available on this page, together with its respective update date.

12. Contact

If you have any questions about this Privacy Policy or requests related to the processing of personal data, please contact us: