Privacy Policy 2

1. INTRODUCTION Welcome to the Privacy Policy of CAFE GOURMET-BRASIL COMERCIO E REPRESENTACOES LTDA ("we", "us", or "our"). We are committed to protecting the privacy and security of your personal data. This policy explains how we collect, use, and safeguard your information when you visit our website or purchase our products from the United Kingdom.

2. DATA CONTROLLER For the purposes of the UK General Data Protection Regulation (UK GDPR), the data controller responsible for your personal data is:

  • Company Name: CAFE GOURMET-BRASIL COMERCIO E REPRESENTACOES LTDA

  • Tax ID (CNPJ): 07.551.916/0001-89

  • Address: Rua Onofre Caetano Monteiro, 376, Jardim Bolívar, Ouro Fino – MG, 37570-000, Brazil

3. THE DATA WE COLLECT We may collect, use, store, and transfer different kinds of personal data about you, including:

  • Identity Data: First name, last name.

  • Contact Data: Billing address, delivery address, email address, and telephone number.

  • Financial Data: Payment card details (processed securely by our third-party payment providers).

  • Transaction Data: Details about payments and products you have purchased from us.

  • Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, and location.

4. HOW WE USE YOUR PERSONAL DATA We will only use your personal data when the law allows us to. Most commonly, we use your personal data in the following circumstances:

  • Performance of Contract: To process and deliver your order, including managing payments, fees, and charges.

  • Legitimate Interests: To manage our relationship with you, improve our website, and for fraud prevention.

  • Legal Obligation: To comply with legal or regulatory requirements (e.g., tax laws).

5. INTERNATIONAL TRANSFERS (Crucial for UK Customers) Please note that we are located in Brazil. By placing an order, you acknowledge that your personal data will be transferred to, stored, and processed in Brazil. While Brazil is outside the UK/EEA, we implement appropriate security measures to ensure that your personal data remains protected in accordance with UK data protection standards. We treat your data with the same level of security and confidentiality as required by the UK GDPR.

6. DATA SECURITY We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. Access to your personal data is limited to those employees, agents, and contractors who have a business need to know.

7. DATA RETENTION We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

8. YOUR LEGAL RIGHTS Under the UK GDPR, you have rights in relation to your personal data, including the right to:

  • Request access to your personal data.

  • Request correction of your personal data.

  • Request erasure of your personal data.

  • Object to processing of your personal data.

  • Request restriction of processing your personal data.

  • Request the transfer of your personal data.

If you wish to exercise any of these rights, please contact us at: [INSERT SUPPORT EMAIL HERE].

9. CONTACT US If you have any questions about this privacy policy or our privacy practices, please contact us at our registered address listed above or via email.