Privacy Policy

The controller responsible for processing personal data collected through this website is DUNA TRADING LTDA, enrolled under CNPJ No. 48.881.054/0001-30, headquartered in São Paulo / SP, Brazil.

We collect only the data you voluntarily provide and the technical data strictly necessary to operate and protect the website:

• Inquiry data: name, counterparty type, company, e-mail, country, commodity of interest, target volume, destination/port, delivery basis, shipment window and the message you submit.
• Technical data: IP address and browser user-agent, collected solely for security and to prevent abuse of the contact form (rate limiting), together with the date and time of submission.
• Local preference: your selected language is stored locally in your browser (see Section 4). We do not require an account and do not collect sensitive personal data.

We process personal data for the following purposes, under the legal bases of the LGPD (Art. 7):

• To receive, assess and respond to commercial inquiries and to conduct preliminary steps related to a potential contract at your request — legal bases: your consent and the performance of pre-contractual procedures (Art. 7, I and V).
• To ensure the security of the website and prevent fraud and abuse — legal basis: the legitimate interest of the controller (Art. 7, IX).
• To comply with legal or regulatory obligations and to exercise rights in proceedings — legal bases: compliance with a legal obligation and the regular exercise of rights (Art. 7, II and VI).

This website does not use advertising or third-party tracking cookies and does not run web analytics that profile visitors. We use only browser local storage strictly necessary for the site to function — specifically, to remember your language preference and that you have acknowledged our cookie notice. This information stays in your browser and is not transmitted to our servers. You may clear it at any time through your browser settings.

We do not sell personal data. We share data only with service providers (processors) that act on our instructions and under contract to operate the website and respond to inquiries:

• A database hosting provider, to store the inquiries received.
• A transactional e-mail provider, to deliver inquiry notifications and our replies.
• A cloud hosting and infrastructure provider, to operate and render the website.

Data may also be disclosed to public authorities when required by law or judicial order.

Because the processors above operate global infrastructure, your personal data may be stored and processed outside Brazil — including in data centers located in Singapore (database) and the United States (e-mail delivery and hosting). Such international transfers are carried out under contractual safeguards with each processor that require an adequate level of data protection, in accordance with Articles 33 to 36 of the LGPD.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected — including managing the commercial relationship — and to comply with legal obligations and the regular exercise of rights. When no longer necessary, data is eliminated or anonymized, except where retention is permitted or required by law.

We adopt technical and administrative measures to protect personal data from unauthorized access and from accidental or unlawful destruction, loss, alteration or disclosure — including encrypted connections (HTTPS), access controls and database access policies that restrict who can read stored inquiries.

Under Article 18 of the LGPD, you may at any time request:

• Confirmation of the existence of processing;
• Access to your data;
• Correction of incomplete, inaccurate or outdated data;
• Anonymization, blocking or elimination of unnecessary or excessive data, or data processed in non-compliance with the LGPD;
• Data portability to another provider, subject to regulation;
• Elimination of data processed with consent;
• Information about public and private entities with which data has been shared;
• Information about the possibility of not providing consent and the consequences of refusal;
• Withdrawal of consent at any time.

To exercise any of the rights above, or for any question about this Policy, please contact our Data Protection Officer (Encarregado pelo Tratamento de Dados Pessoais) at privacidade@dunatrading.com.br. We may request information to confirm your identity before fulfilling a request. You also have the right to lodge a complaint with the Brazilian National Data Protection Authority (ANPD).

We may update this Privacy Policy to reflect legal, technical or business changes. The current version is always published on this page, with the “Last updated” date shown above.