Privacy Policy
Our Privacy Policy is a document that explains how an organization handles your personal information. Please read the information below about how we protect your personal data.
Last revised: 12 October 2026
CHK – Consultoria e Serviços, S.A. ("CHK", "we") respects the privacy of the visitors to our website and of everyone who does business with us. This Policy explains which personal data we process, for what purposes, on what grounds, for how long, and which rights you have, under Law no. 22/11 of 17 June (Personal Data Protection Law) and other applicable Angolan legislation.
1. Data controller
| Company name | CHK – Consultoria e Serviços, S.A. |
| Tax ID (NIF) | 5402115400 |
| Registered office | Travessa Nicolau Castelo Branco, n.º 40, Ingombota, Luanda, Angola |
| geral@chk.co.ao | |
| Phone | +244 941 417 825 |
CHK has notified the Angolan Data Protection Agency (Agência de Protecção de Dados, APD) and holds Authorisation no. 093/2025 (Proc. no. 352/24-03-2025/M) for the processing of CCTV images at its premises. All other processing described in this Policy is carried out in compliance with Law no. 22/11.
2. Scope
Our services are intended exclusively for companies and other organisations (B2B). This Policy applies to data about individuals acting on behalf of those organisations (managers, employees, contact persons) and to visitors to www.chk.co.ao. We do not target anyone under 18 and do not knowingly collect their data.
3. What data we collect and why
| Source | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form and quote requests | Name, company, job title, e-mail, phone, message | Reply to your request and prepare commercial proposals | Consent and pre-contractual steps |
| Meeting bookings | Name, company, e-mail, phone, date and subject | Schedule and hold the meeting | Consent and pre-contractual steps |
| Website chat and WhatsApp | Name, contact details, conversation content | Provide support and answer questions | Consent |
| Newsletter | E-mail, name, company, preferences | Send CHK news, content and campaigns | Consent (you may withdraw it at any time) |
| Online shop and orders | Name, company, company tax ID, billing and delivery address, contact details, order history, bank transfer receipts | Process orders, invoice, deliver and provide support | Performance of a contract and legal obligations |
| Customers and suppliers | Representatives' contact details and contract data | Manage the contractual and business relationship | Performance of a contract and legitimate interest |
| CCTV at CHK premises | Images of visitors to the premises | Security of people and property | APD Authorisation no. 093/2025 |
| Website browsing | IP address, browser, pages visited, cookies | Site operation and security, statistics and advertising | Technical necessity and consent (non-essential cookies) |
We do not process sensitive data (for example health, religious or political beliefs) through the website.
4. CHK applications
The mobile and web applications CHK develops for its clients, such as GORO PMP – People Management Platform (Android), scheduled for launch in March 2027, process personal data of our client organisations' employees (identification, contact details, contract data, attendance and HR documents) solely for human resources management, on behalf of and under the instructions of the employer, which is the controller of that processing. Data is stored securely, is not sold or shared with third parties for marketing, and is kept for the period set in the client contract. Data subjects may exercise their rights with their employer or through our contact form. This section applies to each application from the date it becomes available.
5. Payments
Payments are currently made by bank transfer. CHK does not collect or store card data. This Policy will be updated when other payment methods are integrated.
6. Who we share data with
We do not sell personal data. We share only what is necessary with:
- Odoo S.A. (Odoo.sh/odoo.com platform), which hosts CHK's website, online shop, chat, newsletter and management system;
- Google (Google Tag Manager, Google Analytics, Google Ads and YouTube), for statistics, campaign measurement and embedded videos, only with your consent;
- Meta Platforms / WhatsApp, when you choose to contact us via WhatsApp;
- banks, to process bank transfers;
- partners, carriers and manufacturers, when needed to deliver a contracted product or service;
- public authorities, where required by law.
These providers process data on CHK's behalf or as independent controllers, under confidentiality and security obligations.
7. International transfers
Some providers (Odoo, Google, Meta) store data in data centres outside Angola, namely in the European Union and the United States. These transfers take place under Law no. 22/11, to countries with an adequate level of protection or with appropriate contractual safeguards, and are notified to the APD whenever the law requires.
8. Retention periods
| Data | Period |
|---|---|
| Contact requests, bookings, chat and WhatsApp with no subsequent business relationship | 5 years after the last contact |
| Newsletter subscribers | Until you unsubscribe; proof of consent kept for 5 years afterwards |
| Customers and suppliers (contract and contact data) | Duration of the contract plus 5 years |
| Orders, invoices and accounting records | 5 years, or any longer period required by Angolan tax and commercial law |
| CCTV images | 30 days |
| Website technical and security logs | 5 years |
| Cookies | See section 9 |
When these periods end, data is deleted or anonymised.
9. Cookies
We use cookies and similar technologies. Essential cookies are needed for the site to work; all others are used only with your consent, which you can give or change in the site's cookie notice.
| Type | Examples | Provider | Duration |
|---|---|---|---|
| Essential | session_id, frontend_lang, website_cookies_bar | CHK / Odoo | Session up to 1 year |
| Functional | visitor_uuid, im_livechat_session | CHK / Odoo | Up to 1 year |
| Statistics | _ga, _ga_* | Google Analytics | Up to 2 years |
| Advertising | _gcl_au and Google Ads cookies | Up to 90 days | |
| Embedded content | Videos in privacy-enhanced mode | YouTube (Google) | Varies |
You can also block or delete cookies in your browser settings; some site features may then stop working.
10. Security
We apply appropriate technical and organisational measures to protect data against loss, unauthorised access, alteration or disclosure, including encrypted connections (HTTPS), access control and backups.
11. Your rights
Under Law no. 22/11 you have the right to:
- be informed about the processing of your data;
- access your data;
- request rectification, update or deletion;
- object to processing, including for marketing;
- withdraw your consent at any time, without affecting processing already carried out;
- not be subject to decisions based solely on automated processing.
To exercise these rights, write to geral@chk.co.ao or use our contact form. We will reply within the legal deadline. You may also lodge a complaint with the Agência de Protecção de Dados (APD).
12. Changes
We may update this Policy. The current version is always available on this page, with the date of its last revision.
In case of discrepancy between the Portuguese and English versions, the Portuguese version prevails.