Purpose
The purpose of this Data Privacy Policy is to demonstrate our commitment and responsibility in the processing of data collected from customers, preserving the privacy and security of information in accordance with Law 13,709/2018 – General Data Protection Law – LGPD.

Data collected
The data collected are those that are priority and necessary for the marketing of your products and/or services and the execution of the proposed purposes according to each situation previously informed to the data subjects, who must make their data available directly through our collection channels.

We collect registration data and financial data that are essential for validating proposals and formulating contracts.

Processing of personal data
The care and processing of personal data is carried out exclusively for a specific purpose and in accordance with legal precepts or with the consent of the data subjects. All processing is carried out in compliance with security procedures regarding privacy and data protection, following the guidelines dictated by Law 13,709/2018 (General Data Protection Law).

In order to analyze the acquisition of your products, in accordance with the legal basis for credit protection, we may consult the credit information of your potential customers in institutions such as Serasa, SCPC, and government agency websites, among others.

Purpose of data
The data collected is processed according to the specific purposes for marketing your products. We highlight the main purposes: enabling customers to learn about the products and/or services and providing necessary information.

We may process data for other services as long as they have clear purposes previously declared to the data subject, with their consent when necessary. If consented to by the data subject, we may use the data for advertising purposes, such as marketing emails, telephone contacts via SMS or messages via applications, such as WhatsApp.

At any time, the data subject may request deletion from the advertising database through the means provided in the communications themselves, through specific contact or via email [email protected]

Sharing of data
We share customer data only with third parties whose information is essential for the proposed purpose, such as sending it to banks, in the case of financing or installment payments; to collection service providers; to card operators and to third-party companies in the case of maintenance. When necessary, sharing not previously described is only carried out in compliance with the specific purposes, with prior communication and consent of the data subject.

The third-party companies with which we share data must be committed to the privacy and security of our customers' data, by providing reasonable means of protection and based on contractual terms, safeguarding the preservation of the data.

We do not share customer data with third parties interested in supplying it, who are not connected to the group, in any way. If you are contacted by an unidentified third party, please contact us via the email address provided in this Data Privacy Policy so that we can take the necessary measures regarding the unauthorized use of our brand.

Data storage
We store all data necessary to maintain the purposes, employing reasonable means of protection and deleting the data when it is no longer necessary to fulfill the purposes or when requested by the data subjects, provided that storage is not covered by the legal bases provided for in Law 13.709/2018 – LGPD.

Rights of data subjects
We guarantee that our customers will meet their requests based on the rights of the data subjects provided, as described in Law 13.709 – LGPD.

confirmation of the existence of processing;
access to data;
correction of incomplete, inaccurate or outdated data;
anonymization, blocking or deletion of unnecessary, excessive data or data processed in non-compliance with the provisions of the Law;
portability of data to another service or product provider upon express request, in accordance with the regulations of the national authority, observing commercial and industrial secrets;
deletion of personal data processed with the consent of the holder, except in the cases provided for by law;
information on public and private entities with which the controller shared data;
information on the possibility of not providing consent and on the consequences of refusal;
revocation of consent.
Holders may exercise their rights through the communication channels made available for this purpose.