Privacy policy

Last updated: [LAST UPDATED DATE]

VARENNE is the controller of personal data processed through this online store, except where another party acts as an independent controller. This policy explains how we collect, use, share, retain, and protect personal data in accordance with Brazil's General Data Protection Law (LGPD) and other applicable rules.

Data we collect

Identity and contact data, such as name, email, phone, billing and delivery address.
Order and transaction data, including products, values, payment status, returns, and support history.
Account and preference data, where customer accounts or marketing preferences are used.
Device and usage data, such as IP address, browser, cookie identifiers, pages viewed, and interactions with the store.
Information supplied in messages, reviews, forms, or support requests.

Purposes and legal bases

We process personal data to operate the store; confirm identity; process payments, orders, deliveries, returns, and warranties; provide customer service; prevent fraud; maintain security; comply with legal and tax obligations; improve our services; and, where permitted, send marketing communications. Depending on the activity, the legal basis may be performance of a contract, compliance with a legal obligation, legitimate interests, protection of credit, exercise of rights, or consent.

Service providers and sharing

We share only the data reasonably necessary with Shopify, payment processors, fraud-prevention providers, logistics and delivery partners, cloud and analytics providers, professional advisers, and public authorities when legally required.

International transfers

Because Shopify and some providers operate internationally, data may be processed outside Brazil. We use providers and safeguards appropriate to the transfer, as required by the LGPD.

Cookies

Cookies may be used for essential store functions, security, preferences, analytics, and advertising. Where consent is required, optional technologies should be activated according to the customer's choices.

Retention and security

Personal data is retained only for as long as necessary for the purposes described above, contractual and support needs, fraud prevention, and legal or regulatory obligations. Reasonable administrative, technical, and organizational safeguards are applied.

Your LGPD rights

Subject to legal requirements, data subjects may request confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary or unlawful data, portability, information about sharing, information about consent choices, withdrawal of consent, review of certain automated decisions, and opposition where permitted.

Contact

Data controller: [LEGAL BUSINESS NAME]
CNPJ/CPF: [CNPJ OR CPF]
Privacy contact email: [PRIVACY CONTACT EMAIL]
Business address: [FULL BUSINESS ADDRESS]
Phone: [PHONE NUMBER]