Privacy Policy

1. Controller

Orbe Commodities, Santana de Parnaíba — SP, Brazil. Contact for privacy matters: sales@orbealliance.com.

2. Data processed

Buyer: company, country, preferred destination port, contact name and e-mail, WhatsApp, and the history of orders and reservations.

Partner: name, company, country, e-mail, WhatsApp, link code, referrals and commissions.

Both: sign-in e-mail and password. The password is stored irreversibly by the authentication provider and Orbe has no access to it.

3. Visits through a partner link

A visit coming from a partner link is counted by recording only the partner code, the page path and the origin domain.

We do not record IP addresses, device identifiers, user agents or any data that identifies the visitor.

4. Purposes and legal bases

To run the registration and the commercial relationship (Brazilian LGPD, art. 7, V — performance of a contract); to review and approve registrations and prevent fraud (art. 7, IX — legitimate interest); to comply with legal and tax obligations (art. 7, II).

For data subjects in the European Union, the corresponding GDPR bases are articles 6(1)(b) and 6(1)(f).

5. Storage in your browser

We use local storage for the cart (orbe-catalog-cart), the private price list where applicable (orbe-catalog-code), the partner code (orbe-afiliado-ref), the sign-in session (catalogo-auth) and the chosen language (orbe.lang).

We do not use advertising or remarketing cookies, nor third-party trackers.

6. Sharing

Database and authentication provider (Supabase, servers in the United States), e-mail delivery provider (Resend) and the website hosting provider. We do not sell data and we do not share it for advertising.

The partner does not receive the contact details of the buyers it referred, and the buyer is not told that a partner referred them.

7. International transfer

Data is processed outside Brazil (United States) by the providers above, under contractual protection clauses, in accordance with article 33 of the LGPD.

8. Retention

Registration data for as long as the account exists; order, reservation and commission data for the legal tax and limitation periods, up to five years after the operation; visit records for 24 months.

9. Your rights

Confirmation, access, correction, anonymisation, portability, information about sharing, withdrawal of consent and deletion, within legal limits.

Write to sales@orbealliance.com; we reply within 15 days.

10. Security

Password access with minimum rules, per-user isolation in the database — each account sees only its own data — and encrypted transmission.

No system is infallible. Relevant incidents will be reported to the data subjects and to the Brazilian data protection authority.

11. Minors

The service is intended for companies. We do not knowingly collect data from people under 18.

12. Changes

Revisions will be published with a new version date and communicated by e-mail.