Privacy Policy

Last updated: September 13, 2026

VARENNE is the controller of personal data processed through this online store, except where another party acts as an independent controller. This policy explains how we collect, use, share, retain, and protect personal data in accordance with Brazil's General Data Protection Law (LGPD) and other applicable rules.

Data we collect

Identity and contact data, such as name, email, phone, billing and delivery address.
Order and transaction data, including products, values, payment status, returns, and support history. Payment credentials are generally processed directly by authorized payment providers.
Account and preference data, where customer accounts or marketing preferences are used.
Device and usage data, such as IP address, browser, cookie identifiers, pages viewed, and interactions with the store.
Information you provide in messages, reviews, forms, or support requests.

Purposes and legal bases

We process personal data to operate the store; confirm identity; process payments, orders, deliveries, returns, and warranties; provide customer service; prevent fraud; maintain security; comply with legal and tax obligations; improve our services; and, where permitted, send marketing communications. Depending on the activity, the legal basis may be performance of a contract, compliance with a legal obligation, legitimate interests, protection of credit, exercise of rights, or consent.

Service providers and sharing

We share only the data reasonably necessary with Shopify, payment processors, fraud-prevention providers, logistics and delivery partners, cloud and analytics providers, professional advisers, and public authorities when legally required. These parties may operate as processors or independent controllers under their own legal obligations.

International transfers

Because Shopify and some providers operate internationally, data may be processed outside Brazil. We use providers and contractual or legal safeguards appropriate to the transfer, as required by the LGPD.

Cookies and similar technologies

Cookies may be used for essential store functions, security, preferences, analytics, and advertising. Where consent is required, optional technologies should be activated according to your choices. Browser controls can also limit cookies, although essential functions may be affected.

Retention and security

We retain personal data only for as long as needed for the purposes described above, contractual and support needs, fraud prevention, and legal or regulatory obligations. We apply reasonable administrative, technical, and organizational safeguards, but no system is completely secure.

Your LGPD rights

Subject to legal requirements, you may request confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary or unlawful data, portability, information about sharing, information about consent choices, withdrawal of consent, review of certain automated decisions, and opposition where permitted. Some data may be retained when a legal basis requires it.

Children

The store is not directed to children. If you believe a child provided personal data without appropriate authorization, contact us.

Contact and requests

To exercise privacy rights or ask a question, email varennashop@protonmail.com. We may request information necessary to verify identity and protect the account. You may also contact Brazil's National Data Protection Authority where applicable.