Skip to content

PRIVACY POLICY

How Awk handles your data.

What data this site collects, for what purpose, who receives it, how long it is kept and how to exercise your rights.

In force since October 6, 2026

Controller

Awk Global Solutions is the brand of Awk Trading Limited, a company registered in Hong Kong, with a commercial presence in São Paulo and a team in mainland China. Awk Trading Limited decides what happens to the data collected on this site, which makes it the controller under the Lei Geral de Proteção de Dados (LGPD, Law No. 13,709/2018), Brazil's General Data Protection Law. In this policy, “Awk” refers to Awk Trading Limited.

The LGPD applies to the data of people in Brazil, even when the company is based outside the country. Because the company is based in Hong Kong, this policy also follows Hong Kong's data protection law, the Personal Data (Privacy) Ordinance (Cap. 486).

Controller
Awk Trading Limited
Brand
Awk Global Solutions
Address
Flat/RM A, 9/F Silvercorp Int'l Tower, 707–713 Nathan Road, Mong Kok, Hong Kong
Contact
global@awkglobal.com

Data protection officer

The data protection officer (the encarregado, in LGPD terms) is the point of contact between you, Awk and the Agência Nacional de Proteção de Dados (ANPD), Brazil's data protection authority. The officer receives requests from data subjects and communications from the ANPD, and replies in Portuguese.

For any matter covered by this policy, write to global@awkglobal.com with “LGPD” in the subject line.

Role
Encarregado pelo tratamento de dados / Data Protection Officer
Responsible entity
Awk Trading Limited
Email
global@awkglobal.com
Address
Flat/RM A, 9/F Silvercorp Int'l Tower, 707–713 Nathan Road, Mong Kok, Hong Kong
Language
Portuguese.

Data

We collect what you write to us and the technical data generated by any visit to a website. We do not buy data from third parties. When a client's service requires it, we may consult public sources about that client's company, such as the CNPJ register (Brazil's national register of legal entities) and its Siscomex authorization (RADAR). Here is what happens on each channel:

Contact form
First name, last name, email, phone or WhatsApp number, and your message. First name, email and message are required, as we cannot reply without them. Last name and phone are optional. The form is sent to the Awk team as an email, together with the date, time and page language.
15-minute conversation
The current status of your operation, your company's revenue range, when you want to start, and your name, email and WhatsApp number. The three answers, your name and your email are required; WhatsApp is optional. When you submit, the answers are emailed to the team and WhatsApp opens with your name and answers already filled in. WhatsApp may receive this text through the link when it opens; the message reaches Awk only if you send it.
Phone number pop-up
When you are about to leave the site, a pop-⁠up titled “Your Sourcing & Procurement starts here” may appear, asking only for your phone number, with country code. If you submit it, we receive the number, the page you were on, the site language and the date, and the Awk team contacts you on WhatsApp, as you requested. The number is stored in Awk's database on Supabase, in São Paulo. If you close the pop-⁠up without submitting, we receive nothing.
Luma and the home page text field
Luma, the site's virtual assistant, and the text field on the home page put together a message in your browser. Nothing you type leaves your device until you tap the WhatsApp or email button; the message then goes through the channel you chose.
Email, WhatsApp and phone
When you write to us or call, we receive your email address or phone number, your profile name and whatever you send or say, including attachments.
Quick diagnostic
Your six answers, the suggested step and the date are stored only in your browser, so you can view the result again. None of this reaches us. If you tap “Send on WhatsApp”, the pre-filled message includes the suggested step and the pending items, meaning the points still open. You can review it before sending.
Résumés
The application form on the Work with us page asks for your full name, email, phone or WhatsApp number and your résumé (PDF, DOC or DOCX). City and state, area of interest, LinkedIn profile and comments are optional. We also record the file name and size, the page language and the submission date. The data is stored in Awk's database and the résumé in Awk's private file storage, both on Supabase, in São Paulo. Awk is the controller of this data. Your résumé does not need to include sensitive data, such as information about health, religion or racial origin; if it does, that information is not used in the assessment. If the form cannot save your application, it offers to send it by email instead, in which case what this policy says about email applies.
Data about your operation
If you engage our services: the data you provide so we can deliver them, such as your CNPJ, the names and contact details of your team, products, NCM codes, suppliers, amounts and shipping documents. To incorporate or maintain a company abroad, such as in Hong Kong, also identity documents, proof of address and details of shareholders and directors, as required by banks and company registries.
Technical data from each visit
IP address, date and time, page requested, referring page, and browser and device information. As on any website, this data reaches the providers that deliver the site, its photos and its font. Your browser's language setting is read only to choose which version of the page to show, and is not stored.
Measurement data
Only if you accept measurement: page visited, referring page, date and time, approximate location, operating system, browser and device type, plus, for performance measurement, page load and response times and connection type. See the Usage and performance measurement section for details.

This site does not ask for passwords, card details, health data or any other sensitive data. If anyone asks you for this in Awk's name, do not respond and let us know.

Purposes and legal bases

The LGPD requires a legal basis for every use of data. The table below shows each purpose, the data involved and the legal basis for it.

  • Answering your inquiry and preparing a proposal

    Data
    Name, email, phone or WhatsApp number, message; for the 15-minute conversation, also the status of your operation, revenue range and start timeframe
    Legal basis
    Pre-contractual steps, at your request (LGPD, Art. 7, V). If you write on behalf of a company: Awk's legitimate interest in responding to those who contact it (LGPD, Art. 7, IX)

  • Contacting you on WhatsApp, at your request, after you leave your number in the phone number pop-up

    Data
    Phone number, the page you were on, site language and submission date
    Legal basis
    Pre-contractual steps, at your request (LGPD, Art. 7, V). If you leave the number on behalf of a company: Awk's legitimate interest in responding to those who contact it (LGPD, Art. 7, IX)

  • Delivering the contracted service

    Data
    Data about the operation, the contracting party, shareholders and directors, and the people on the client's and suppliers' teams
    Legal basis
    Performance of a contract (LGPD, Art. 7, V) for the contracting party's data. For other people's data, the legitimate interest of Awk and the client in delivering the contracted service (LGPD, Art. 7, IX)

  • Assessing job applications

    Data
    Name, email, phone and résumé; if provided by the candidate, also city and state, area of interest, LinkedIn and comments
    Legal basis
    Pre-contractual steps toward an employment contract, at the candidate's request (LGPD, Art. 7, V)

  • Measuring site usage and performance and improving the pages

    Data
    Measurement data
    Legal basis
    Consent, given when you tap “Accept” or “Turn on measurement”, which you can withdraw at any time (LGPD, Art. 7, I)

  • Remembering the language you chose

    Data
    Language cookie (pt, en, es or zh)
    Legal basis
    Legitimate interest: remembering a choice you made yourself (LGPD, Art. 7, IX)

  • Displaying the site: delivering its pages, photos and font

    Data
    Technical data from each visit: IP address, date and time, page requested, referring page, browser and device
    Legal basis
    Legitimate interest: without this data your browser cannot load the page (LGPD, Art. 7, IX)

  • Protecting the site and forms against abuse and automated submissions

    Data
    IP address and time of each submission, held only in the server's temporary memory to count submissions in the past hour; the hosting provider's technical logs
    Legal basis
    Legitimate interest (LGPD, Art. 7, IX)

  • Meeting legal and regulatory obligations

    Data
    Contract and invoicing data
    Legal basis
    Compliance with a legal or regulatory obligation (LGPD, Art. 7, II)

  • Exercising rights and defending Awk in legal proceedings

    Data
    The data required for the case
    Legal basis
    Regular exercise of rights in judicial, administrative or arbitration proceedings (LGPD, Art. 7, VI)

  • Sending news or content, only if you ask for it in writing

    Data
    Name and email
    Legal basis
    Consent, which you can withdraw at any time (LGPD, Art. 7, I)

Writing to us does not sign you up for news. We send this kind of communication only if you ask for it, and every message explains how to unsubscribe, free of charge.

You can decline measurement and the site will work just the same. Where the legal basis is consent, you can withdraw it, and withdrawal does not undo anything done before it. Where the legal basis is legitimate interest, you can object.

We do not make automated decisions about you. The step suggested by the quick diagnostic is calculated in your browser and is for guidance only.

Cookies and browser

This site uses a single cookie, and only when you change the language. It uses no advertising cookies, is not part of any ad network and loads no social media pixels.

In addition to the cookie, the site stores a few items in your browser's storage. They stay on your device and are not sent to us. Here is the full list, with each item's technical name:

Chosen language
Cookie “awk-locale”. Stores the language you chose (pt, en, es or zh) so the site opens in that language next time. Created when you change the language. Lasts 1 year.
Your measurement choice
Local storage, “awk.consent.v4”. Stores your answer to the “Cookie and measurement” notice (accepted or declined) so we do not ask again. Kept until you change your choice or clear your browser data. Answers given to earlier versions of the notice are no longer valid, so the notice appears again.
Phone number pop-up
Local storage, “awk.exit.v1”. Stores the date the “Your Sourcing & Procurement starts here” pop-⁠up appeared, so it does not appear again for 7 days. Kept until you clear your browser data; the date is replaced each time the pop-⁠up appears.
Contact already made
Local storage, “awk.engaged.v1”. Stores the date you got in touch with Awk through the site (by submitting a form, opening a WhatsApp, email or phone link, or reaching the end of the conversation with Luma), so the pop-⁠up is no longer shown to you. It stores only the date, not anything you wrote. Kept until you clear your browser data.
Start of your visit
Session storage, “awk.exit.since”. Stores the time you opened the first page, so the pop-⁠up appears only after you have been on the site for a few seconds. Cleared when you close the tab.
Quick diagnostic
Local storage, “awk.diagnostic.v2”. Stores your quick diagnostic answers, the suggested step and the date, so you can view the result again. Kept until you retake the diagnostic or clear your browser data.
Luma's introduction
Session storage, “awk:luma:bubble”. Remembers that Luma has already introduced herself, so she does not repeat the greeting. Cleared when you close the tab.
Your place on the page when changing language
Session storage, “awk:lang-⁠place”. Stores the part of the page you were on when you changed the language, so you can pick up where you left off. Cleared as soon as the new page opens.

To delete all of it, clear this site's data in your browser settings.

Usage and performance measurement

We measure site usage with Vercel Web Analytics and page performance with Vercel Speed Insights, both provided by Vercel, in the United States. Measurement starts only if you accept, either in the “Cookie and measurement” notice or with the measurement control on this page. Until you choose, or if you decline, nothing is sent for measurement.

Usage measurement. When measurement is on, Vercel receives the address of the page visited, the referring page, and the date and time. From the connection, it infers your approximate location (country, region and city), operating system, browser and device type. We also record three events, each with the page, the language and the position on the page: a tap on a WhatsApp button; a form submission or choosing email in Luma; and the phone number pop-⁠up being shown. To count visits, Vercel creates a temporary identifier from the connection and discards it within 24 hours.

Performance measurement. When your browser loads a page of the site from scratch (usually the first page you open), it measures how long it takes for the page's first data to arrive and for its first and largest content to appear, how much the content shifts on the screen, and how long the page takes to respond to a tap, click or key press. Vercel receives these timings along with the page address, the connection type (for example, 4g), the technical identifier of the page element linked to each measurement (for example, the top image), the type of interaction measured (for example, a click) and the version of the measurement package, and records when it received them. From the connection, it infers the country, operating system, browser and device type. According to Vercel, this data is not linked to you or your IP address and cannot be used to reconstruct your path from page to page.

Measurement uses no cookies, and nothing you type is ever included in it. We do not build profiles or cross-reference data between sites.

You can change your choice at any time with the measurement control on this page. If you turn measurement off, it stops from that moment on.

Usage and performance measurement

Measurement is off. Nothing is sent for measurement. If you turn it on, you agree that measurement data will be sent to Vercel, in the USA.

Sharing

We do not sell data, trade it for advertising space or feed it to ad networks. Data reaches the following people and companies, each receiving only what its role requires:

  • The Awk team

    Purpose and data
    Reading and replying to messages, preparing proposals and delivering services. Access is restricted to those who need it.
    Location
    Hong Kong, São Paulo and mainland China

  • Vercel

    Purpose and data
    Hosts the site, processes form submissions and, if you accept, runs usage and performance measurement. Receives technical data from each visit, form content and, if you accept, measurement data.
    Location
    United States. Pages may be delivered by Vercel servers closer to you, including in São Paulo.

  • Resend

    Purpose and data
    Delivers what you write in the forms to Awk's mailbox. Keeps a record of each message, including its content, for the period Resend sets.
    Location
    United States

  • Microsoft 365

    Purpose and data
    Hosts Awk's mailbox, which receives form submissions and the emails you send.
    Location
    Microsoft data centers, which may be outside Brazil

  • WhatsApp (Meta)

    Purpose and data
    Carries the conversations you start on WhatsApp, including the 15-minute conversation.
    Location
    United States and other countries where Meta operates

  • Supabase

    Purpose and data
    Stores, on Awk's behalf, applications submitted through the Work with us page (in a database) and résumés (in private file storage). It also stores phone numbers left in the site's pop-⁠up.
    Location
    Brazil (São Paulo)

  • Unsplash

    Purpose and data
    Delivers the site's photos. Receives your IP address and browser data, because your browser loads the images directly from Unsplash.
    Location
    Server network in several countries

  • Google Fonts (Google)

    Purpose and data
    Delivers the font used on the Chinese-language pages. Your browser may also fetch it on other pages, in anticipation of a click on the Chinese version. Receives your IP address and browser data, because your browser loads the font directly from Google.
    Location
    United States and server network in several countries

  • Partners in your operation

    Purpose and data
    Clients only, when the contracted service requires it: suppliers, inspection and audit firms, laboratories and certification bodies, freight forwarders, insurers and customs brokers. To incorporate or maintain a company abroad: banks, local accountants and the local company registry. Some of these registries are publicly searchable, such as Hong Kong's, which shows the names of shareholders and directors. Each receives only the data it needs.
    Location
    Mainland China, Hong Kong, Brazil, other countries along the shipping route and the jurisdiction where your company is incorporated

  • Professional advisors

    Purpose and data
    Awk's accountants, auditors and lawyers, when needed to comply with a legal obligation, audit the company's accounts or defend rights. They receive only the data needed and are bound by confidentiality.
    Location
    Hong Kong and, in the event of legal proceedings, the country where they take place

  • Authorities

    Purpose and data
    When the law requires it or a competent authority orders it.
    Location
    The authority's country

Vercel, Resend, Microsoft and Supabase process data on our behalf and only for the role described; in LGPD terms, they are processors (operadores). WhatsApp (Meta), Unsplash and Google process the data they receive independently, under their own privacy policies. Partners in your operation, professional advisors and authorities use the data for their own functions and are responsible for that use.

International transfer

Awk Trading Limited is a Hong Kong company, and some of its team members and service providers are outside Brazil. So when you write to us, your data may leave Brazil. It may be processed in the following places:

Brazil
Where Awk has its commercial presence, in São Paulo. Applications, résumés and phone numbers left in the site's pop-⁠up are stored here, on Supabase in São Paulo; on the way, they pass through the site's server on Vercel. Awk team members who need them may access them from Hong Kong or mainland China.
Hong Kong
Where the company and part of the team are based.
United States
Vercel, Resend, Google and Meta (WhatsApp).
Mainland China
Part of the Awk team and, for clients, the suppliers involved in the operation.
Other countries and regions
Microsoft's and Unsplash's data centers, which may be in the United States or elsewhere. For clients, also the countries along the shipping route and the jurisdiction where your company is incorporated.

When processing serves a request you made or a contract you are party to (answering your inquiry, preparing the proposal you requested, delivering the service you hired us for, assessing the résumé you sent, or contacting you on WhatsApp after you left your phone number), the transfer is necessary for that purpose. The LGPD permits transfers in these cases, and also when they are necessary to comply with a legal obligation or to exercise rights in proceedings (Art. 33, IX).

For usage and performance measurement, the transfer to the United States requires your specific consent. Before you choose, the “Cookie and measurement” notice and the measurement control on this page tell you that measurement data goes to Vercel in the USA, and the data is sent only once you tap “Accept” or “Turn on measurement” (LGPD, Art. 33, VIII).

Technical data from each visit is collected directly from your browser by Vercel, Unsplash and Google when your browser connects to them to load the page, photos and font. Under ANPD regulations, direct collection by a company outside Brazil is not an international transfer, but it is still subject to the LGPD (Resolution CD/ANPD No. 19/2024, Art. 6).

Retention

Contacts who did not become clients
2 years after the last interaction. This covers forms, emails, WhatsApp conversations, phone numbers left in the site's pop-⁠up and proposals that were not accepted.
Client data
For the term of the contract and 5 years after it ends. Longer only where required by law or where needed to exercise rights in judicial, administrative or arbitration proceedings.
Résumés
12 months after receipt. The file and the application data are deleted together.
Technical access logs
The site itself keeps no access logs. The hosting provider keeps technical logs for a short period, never longer than 6 months.
IP address in forms
Held only in the server's temporary memory, to count submissions in the past hour and block mass submissions. It is not written to disk or to a database, and that memory is cleared when the server restarts.
Usage and performance measurement
The temporary visit identifier is discarded within 24 hours. The records of each visit, without that identifier (page, referring page, date and time, approximate location, operating system, browser and device), are kept by Vercel for the retention period of our plan, between 1 and 24 months. Vercel states that it may keep them longer in its own systems. Performance data, which according to Vercel is not linked to the visitor, is kept by Vercel for the period Vercel sets. We see both only in aggregate reports.
Items in your browser
The retention period for each item is listed in the Cookies and browser section. You can delete them whenever you like.

At the end of the period, the data is deleted or anonymized. If you ask us to delete it sooner, we will, unless the law requires us to keep it or it is needed to exercise rights in proceedings.

Data subject rights

The LGPD grants you the following rights, which you can exercise at any time, free of charge:

Confirmation
Knowing whether we process any of your data.
Access
Receiving the data we hold about you.
Correction
Correcting incomplete, inaccurate or outdated data.
Anonymization, blocking or deletion
Of data that is unnecessary, excessive or processed in breach of the law.
Portability
Receiving your data so you can transfer it to another provider, in accordance with ANPD regulations.
Deletion
Of data processed on the basis of your consent, except where the law allows it to be kept.
Sharing
Knowing which companies and entities we share your data with.
Refusing consent
Knowing that you can refuse consent and what happens if you do.
Withdrawal
Withdrawing consent you have given, easily and free of charge.
Objection
Objecting to processing carried out without consent if it breaches the LGPD.

How to make a request: write to global@awkglobal.com with “LGPD” in the subject line. You can write in Portuguese. Your representative can also make the request on your behalf. We may ask for some information to verify your identity; this protects your data.

What the law requires: confirmation and access in simplified form are provided immediately; a full statement, including the origin of the data, the criteria used and the purpose, is provided within 15 days (LGPD, Art. 19). If we cannot fulfill a request immediately, we will explain why. When we correct or delete data, we notify the companies we shared it with, unless this proves impossible or involves disproportionate effort.

Our own commitment: we respond to all other requests within 15 days. If a regulation sets a shorter deadline, we follow it.

If you are not satisfied, you can file a petition with the ANPD at gov.br/anpd, and you can also contact consumer protection agencies such as Procon.

Security

Pages and forms use an encrypted connection. The contact form and the 15-minute conversation form are sent to the team as an email, and only the email delivery service keeps a record of it, for the period it sets. Applications and phone numbers left in the site's pop-⁠up are stored in Awk's database on Supabase, in São Paulo, and résumés in private file storage with no public address. Only the site's server writes to that database, using a key that never reaches the browser. Access to messages, applications and client data is restricted to those who need it for their work. Each provider receives only what its role requires.

No security measure eliminates all risk. If a security incident could cause you significant risk or harm, we will notify you and the ANPD within the deadline set by ANPD regulations. We also notify authorities in other countries whenever their laws require it.

Hong Kong and China

Hong Kong. Awk Trading Limited complies with the Personal Data (Privacy) Ordinance (Cap. 486). Under the Ordinance, you have the right to request access to your data and its correction. We charge nothing for either. We respond within the deadlines set out in this policy, which fall within the 40-day limit under Hong Kong law. We accept requests in Portuguese.

We do not use your data for direct marketing without your consent. Before asking for it, we tell you which data we will use and what topics we will write about, and you can reply through a free channel. Sending us a message does not count as that consent. You can ask us to stop at any time, free of charge.

Role
Encarregado pelo tratamento de dados / Data Protection Officer
Company
Awk Trading Limited
Address
Flat/RM A, 9/F Silvercorp Int'l Tower, 707–713 Nathan Road, Mong Kok, Hong Kong
Email
global@awkglobal.com

Mainland China. Team members in mainland China may access contact and client data to deliver our services. This access may also be subject to China's Personal Information Protection Law (PIPL). The same purposes, retention periods and rights set out in this policy apply, and you exercise those rights through the same data protection officer. If you would like us to explain how your data is processed there, just ask.

Minors

This site is intended for businesses and is not directed at children or adolescents. We do not knowingly collect data from anyone under 18. If we learn that we have received data from someone under 18 without the authorization of a parent or guardian, we will delete it.

Changes

When we change this policy, we update the date at the top of the page. Material changes are announced on the site before they take effect. If anything about measurement changes, we will ask for your choice again.

What changed on October 6, 2026: résumés are now submitted through the form on the Work with us page and stored on Supabase in São Paulo, replacing the previous form hosted by another provider; we added the phone number pop-⁠up, along with the items it stores in your browser; and measurement now also counts each time that pop-⁠up appears and measures page performance with Vercel Speed Insights, which is why the “Cookie and measurement” notice asks for your choice again. Résumés received before that date are covered by this policy and the 12-month period. The changes apply to data sent through the new channels, which display their own notice at the time of submission, and do not change how we process data you have already sent us.

For readers in Brazil, the Portuguese version prevails. The English, Spanish and Chinese versions are provided for ease of reading.