Privacy
Privacy Policy
How Azhara Imports handles the personal data it receives through this site, on what legal basis, for how long, and how you exercise your rights.
Last updated: 25 September 2026.
1. Who processes your data
The controller is Azhara Imports LTDA, CNPJ 68.808.705/0001-73, at Rua Brasil, 1.160, Suite 32, São Bernardo do Campo, SP, Brazil.
Channel for data subject requests: info@azharaimports.com. Write to that address for anything concerning your data.
Azhara Imports qualifies as a small processing agent under Resolution CD/ANPD No. 2 of 27 January 2022 and is therefore not required to appoint a data protection officer. The channel above fulfils the function set out in article 11 of that resolution.
2. What we collect
We collect only what you type and submit yourself. We do not buy lists, we do not track your browsing and we do not build visitor profiles.
Contact form: name, company, e-mail, type of interest and the message you write.
Brand and supplier registration form: company details (name, country, website, year founded), role in the chain, brand owner, brands, categories, number of SKUs, country of manufacture, product claims, markets where the products already sell, certifications, commercial terms, and your contact details (name, job title and e-mail).
Technical abuse control: we store only a code derived from the origin of the submission, generated by a cryptographic hash function. The IP address itself is not stored.
3. What we use it for
The purpose is specific and single: to assess the commercial proposal or request you sent us, to reply to you and, if there is mutual interest, to run the negotiation and the product regularization process with Anvisa.
We do not use this data for advertising, we do not send marketing communications unless you ask for them, and we do not sell data to anyone.
4. Legal basis
Processing is grounded in article 7, item V of Brazilian Law No. 13,709/2018, which permits processing where necessary for the performance of a contract or of preliminary procedures relating to a contract to which the data subject is a party, at the data subject's request. By submitting a form asking us to assess a partnership, you begin exactly those preliminary procedures.
Where processing cannot rest on that basis, it rests on your consent, which you may withdraw at any time through the channel above.
5. How long we keep it
Registrations and messages are stored for as long as the assessment lasts and, where one exists, the commercial relationship. If the assessment ends without proceeding, we keep the record for up to 24 months from the last contact, a period that allows a conversation to be resumed and the history of the negotiation to be evidenced.
Once that period expires, deletion is automatic: a daily routine removes from the database any record that has passed 24 months without contact, with no manual step involved. Only partners with an ongoing commercial relationship are preserved, and only for as long as it lasts. We keep a record of how many items were deleted and on what date, with no personal data in it, purely as evidence that the period is honoured.
You may request deletion before that period at any time, and we will comply, except where a legal or regulatory obligation requires us to retain the information.
6. Who we share it with
We do not share your data with third parties for any commercial purpose beyond this one. There are, however, two technology suppliers that process data on our behalf, and you are entitled to know:
Application and database hosting: Railway Corp., which maintains the infrastructure where registrations are stored.
Initial automated assessment: the information from the brand registration form is sent to Anthropic PBC, in the United States, to produce a preliminary technical opinion on the proposal. That transmission constitutes an international transfer of data. What is sent is the form content, company information and professional contact details, and the output is an internally read opinion.
No proposal is accepted, prioritised or taken into negotiation automatically. Every positive decision is a human one.
One decision may be automated: refusal. Where the analysis concludes, with a high degree of certainty, that there is no fit at all between what was presented and what we import, a refusal is drafted and sent to you by e-mail. Before it goes out there is a window of at least 24 hours in which a partner can stop the message, and any human action on the registration cancels the send.
You have the right to request review of that decision under article 20 of Law No. 13,709/2018. The refusal message itself states that right, and replying to it is enough: a partner reviews it personally.
7. Cookies
This site uses no cookies. There is no audience analytics tool, no social network pixel and no third party script, and typefaces are served from our own domain with no external call. Nothing about your browsing is sent to us or to anyone else.
One single item is kept in your browser, in local storage: the record that you read and accepted the privacy notice shown on your first visit. It exists only so the notice does not reappear on every page, it stays on your device, it is sent to no server and it does not identify you. Clearing this site’s data in your browser removes it, and the notice comes back.
8. Your rights
Article 18 of Law No. 13,709/2018 grants you, at any time and upon request, the right to obtain: confirmation that processing exists; access to the data; correction of incomplete, inaccurate or out of date data; anonymisation, blocking or deletion of unnecessary or excessive data or data processed otherwise than in accordance with the law; portability to another supplier; deletion of data processed on the basis of consent; information about who we share your data with; information about the option not to give consent and the consequences of refusing; and withdrawal of consent.
To exercise any of these rights, write to info@azharaimports.com. As a small processing agent we have the doubled deadlines set out in article 14 of Resolution CD/ANPD No. 2/2022, and we answer as early within them as we can.
9. Security
Data is held in a database with restricted access, the area where registrations are read requires authentication, and traffic to the site and the application is encrypted. No measure removes risk entirely, and in the event of a relevant security incident we notify the affected data subjects and the Brazilian National Data Protection Authority.
10. Changes to this policy
Changes will be published on this page, with the date at the top updated. A change that materially affects the purpose of processing will be communicated to anyone holding an active registration with us.