Terms and Privacy Policy

We follow the LGPD regulations.

Your privacy is important to us. Itacorda’s policy is to respect your privacy regarding any information we may collect on the website and other devices we own and operate.

We only request personal information when we truly need it to provide you with a service. We do this through fair and legal means, with your knowledge and consent. We also inform you about why we are collecting it and how it will be used.

We only retain the information collected for as long as necessary to provide the requested service. When we store data, we protect it by commercially acceptable means to prevent loss, theft, as well as unauthorized access, disclosure, copying, use, or modification.

We do not share personal identification information publicly or with third parties, except when required by law.

Our website may have links to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites and cannot accept responsibility for their privacy policies.

You are free to decline our request for personal information, understanding that we may not be able to provide some of the services you desire.

ITACORDA PRIVACY POLICY AND PERSONAL DATA PROTECTION

Welcome to Itacorda’s Privacy Policy! Here, you will understand our practices regarding the handling of personal data shared with us through your interactions, in a clear and accessible manner.

To demonstrate compliance with the General Data Protection Law (LGPD), we have created a secure and transparent system to handle your information. Here at Itacorda, we value the trust you place in us, both in terms of how we care for our clients and protect the personal data of all individuals who interact with us. Our key organizational values are ethics, transparency, and, above all, human respect.

A. What is the Privacy Policy for?

B. Definitions for better understanding

C. Who is this Privacy Policy and Personal Data Protection for?

D. In which situations do we process your personal data? And what data is collected?

I. In-storeII. E-commerce
III. Customer service channels
IV. Direct marketing actions
V. Legal and financial processes
VI. Recruitment of new employees
VII. Supplier and service provider relationships
VIII. When navigating our website, we collect cookies

E. How do we collect your data?

F. How long do we store your personal data?

G. How do we protect your information?

H. Who do we share your data with?

I. We respect your rights. Find out what they are.

J. Our responsibility

A. What is the Privacy Policy for?

This policy aims to provide transparency regarding the handling of personal data. We will inform you how we collect, store, and use your personal data, as well as the purposes for which we collect it.

Itacorda’s goal is always to comply with the General Data Protection Law (LGPD), best privacy governance practices suggested by regulatory bodies and professional technical associations, but most importantly, to uphold our commitment to transparency and respect for the trust you have placed in us.

B. Definitions for better understanding:

(I) Personal data: Information related to an identified or identifiable natural person. This includes any information that can directly or indirectly identify you, and that we must handle securely.
(II) Sensitive personal data: Personal data regarding racial or ethnic origin, religious belief, political opinion, union membership, or affiliation with any religious, philosophical, or political organization. It also includes data related to health, sexual life, genetic or biometric data when linked to a natural person.
(III) Data subject: The natural person to whom the personal data refers.
(IV) Controller: The natural or legal person, public or private, responsible for making decisions regarding the processing of personal data.
(V) Processing: Any operation performed on personal data, including collection, production, receipt, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, elimination, evaluation, modification, communication, transfer, dissemination, or extraction.

C. Who is this Privacy and Personal Data Protection Policy for?

This policy is intended to inform you about the data we collect when you make a purchase, use our services, apply for a job, and in other interactions. It also provides transparency to third parties, such as competent authorities, privacy defense organizations, consumer defense agencies, investors, the press, and other interested parties.

D. In which situations do we process your personal data? And what data is collected?

I. In-store

ACTIVITY

DATA SUBJECT

COLLECTED DATA ELEMENTS

For registration: discount club

CUSTOMERS

Full name; Date of birth; (Brand; Card number and expiration); Residential address; ID number; CPF; Gender; Email; Phone number

For product returns and exchanges

CUSTOMERS

Full name; CPF; Residential address

For personalized product offers for Itacorda customers

CUSTOMERS

Full name; Phone number; Address; Purchase history; Date of birth; Gender

Video surveillance

CUSTOMERS

Video images

Therefore, we rely on the following legal grounds:

• Necessary for the performance of a contract with the individual (art. 7, V, LGPD);
• Necessary for the fulfillment of a legal obligation (art. 7, II, LGPD c/c art. 11, II, LGPD);
• Necessary for our legitimate interests (art. 7, IX, LGPD);
• Necessary for legitimate interest in commercial support and promotion (art. 7, IX c/c art. 10, I, LGPD).

II. In e-commerce:

ACTIVITY

DATA SUBJECT

COLLECTED DATA ELEMENTS

For registration: discount club

CUSTOMERS

Full name; Date of birth; (Brand; Card number and expiration); Residential address; ID number; CPF; Gender; Email; Phone number

For product returns and exchanges

CUSTOMERS

Full name; CPF; Residential address

For personalized product offers for Itacorda customers

CUSTOMERS

Full name; Phone number; Address; Purchase history; Date of birth; Gender

Video surveillance

CUSTOMERS

Video images

Therefore, we rely on the following legal grounds:

• It is necessary to collect your consent for some of the activities above (art. 7, I, LGPD);
• It is necessary for the purposes of our legitimate interests (art. 7, IX, in conjunction with art. 10 §1, LGPD);
• It is necessary for the performance of a contract (art. 7, V, LGPD);
• It is necessary for the fulfillment of a legal obligation (art. 7, II, LGPD c/c art. 11, II, LGPD).

III. In customer service channels

ACTIVITY

DATA SUBJECT

COLLECTED DATA ELEMENTS

For customer service and sales channels (SAC)

CUSTOMERS

Full name; CPF; Address; Audio information; Phone number

Therefore, we rely on the following legal grounds:

• Necessary for the performance of a contract with the individual (art. 7, V, LGPD);
• Necessary for the purposes of our legitimate interests (art. 7, IX, in conjunction with art. 10 §1, LGPD);

IV. In direct marketing actions:

ACTIVITY

DATA SUBJECT

COLLECTED DATA ELEMENTS

For sending offers, promotions, and news to Itacorda customers via SMS, email, WhatsApp, and other messaging platforms

CUSTOMERS

First name; Phone number; Email; Purchase history

Therefore, we rely on the following legal grounds:

• Necessary for legitimate interest for commercial support or promotion (art. 7, IX, in conjunction with art. 10, I, LGPD).

V. In legal and financial matters

ACTIVITY

DATA SUBJECT

COLLECTED DATA ELEMENTS

For refunds/reimbursements to customers

CUSTOMERS

Full name; CPF; Bank details; Email; Phone number

To manage financial and fiscal activities (cash flow management, taxes, costs, and budget, among others)

CUSTOMERS

Full name; CPF; Phone number; Email; Residential address

For potential defenses in administrative or legal actions

CUSTOMERS

Full name; Order and complaint history; CPF; RG; Email; Residential address

VI. In the process of recruiting new employees:

When you submit your resume through recruitment platforms and selection, or email it, or physically leave it at one of our locations, we use the following data, in addition to any other additional information you may have provided while preparing your resume, for the purpose of recruitment and selection.

ACTIVITY

DATA SUBJECT

ELEMENTOS DE DADOS COLETADOS

Recruitment and selection

CANDIDATES

Full name; CPF; Date of birth; Phone number; Email; Marital status; Education level; Job title; Professional experience; Languages; Information on transportation; Salary expectations

VI. In the process of recruiting new employees:

• It is necessary for the purposes of our legitimate interests (art. 7, IX, in conjunction with art. 10 §1, LGPD);

At Itacorda, in commitment to privacy and transparency, we inform you that as part of our team, your registration information, as well as your resume, will be stored in our talent pool for a period of 6 months. If you choose to have your information excluded at any time, we inform you in section J of this Privacy Policy how you can exercise this right.

VII. In managing relationships with suppliers, service providers, or sales representatives:

If you are a representative of our suppliers, service providers, or sales representative, at any point in our interaction or contractual relationship, we also collect your personal information.

ACTIVITY

DATA SUBJECT

COLLECTED DATA ELEMENTS

Manage service contracts

SERVICE PROVIDER

Full name; CPF; RG; Phone numbers LEGAL REPRESENTATIVE OF SUPPLIERS | SERVICE PROVIDER | Full name; RG; CPF; Address; Email; Phone numbers

LEGAL REPRESENTATIVE OF SUPPLIERS

SERVICE PROVIDER

Full name; RG; CPF; Address; Email; Phone numbers

Manage contracts and documents from suppliers

LEGAL REPRESENTATIVE OF SUPPLIERS

Full name; Nationality; CPF; Marital status; Bank details; RG; Residential address; Profession; Signature; Email; Phone numbers

Manage material purchases

LEGAL REPRESENTATIVE OF SUPPLIERS

Full name; CPF; RG; Email; Phone numbers

Manage stock control

LEGAL REPRESENTATIVE OF SUPPLIERS

Full name; Bank details; Email; Phone numbers

Manage orders and quotes with suppliers / Perform product and price research / Conduct market research

LEGAL REPRESENTATIVE OF SUPPLIERS LEGAL DOS FORNECEDORES

Full name; Email; Phone numbers

Manage authorization for sales promotion in stores

SALES REPRESENTATIVE

Full name; RG; CPF; Email; Residential address; Phone numbers (landline and mobile)

Therefore, we rely on the following legal grounds:

• It is necessary for the performance of a contract with the individual (art. 7, V, LGPD);
• It is necessary for the fulfillment of a legal obligation (art. 7, II, LGPD).
• It is necessary for the purposes of our legitimate interests (art. 7, IX, in conjunction with art. 10 §1, LGPD);

VIII. When browsing our website, we use cookies

But what are cookies, after all?

Cookies are small files that are inserted into your browser (Chrome, Mozilla, Internet Explorer, etc.) or mobile device, which allow functionalities through the collection of basic information about you or your device. We inform you, therefore, that we use cookies on our sites.

The insertion of cookies will allow the site to recognize you and your device on a future visit, thus improving the browsing experience. We adopt the term "cookies" in this policy to refer to all files that collect information to “remember” your actions or preferences.

Manage authorization for sales promotion in stores

These cookies are necessary for the website to function and for essential features to be explored, so they cannot be disabled by users. Normally, they are only set in response to actions taken by you, such as filling out forms. As we will explain further below, it is possible to configure your browser to block or alert you about these cookies, but some parts of the website may not function. We emphasize that these cookies do not store any personally identifiable information.

Analysis Cookies

Functionality: These cookies allow the site to provide enhanced functionality and personalization. They may be set by ITACORDA or by external providers whose services we have added to our page. If you do not accept these cookies, some of these functionalities, or even all of them, may not work. Performance: These cookies help us estimate visits and traffic sources so we can measure and improve the performance of our website. They help us see which pages are more or less popular and how users move around the site. All information collected by these cookies is aggregated and, therefore, anonymous. If you do not allow these cookies, we will not know when you visited our site.

Marketing Cookies

Advertising: These cookies may be set by our advertising partners to build a profile about your interests and show you relevant ads on other websites. They do not store personal information directly, but are based on the unique identification of your browser or device. If you do not allow these cookies, you will receive less targeted advertising. Social Media: These cookies are set by a number of social media services we have added to the website to allow you to share our content with your friends and contacts. They are capable of tracking your browsing on other websites and creating a profile based on your interests. This may affect the content and messages you see on other websites you visit. If you do not allow these cookies, you may not be able to use or see these sharing features.

But what are cookies?

All browsers allow users to accept, refuse, or disable cookies, specifically through selecting the appropriate settings in their respective browsers.

Configure cookies in the “options” or “preferences” menu of your browser, or install a plugin to perform this functionality.

Thus, the user can choose to reject or disable all or specific types of cookies by clicking on the “cookie preferences” on our website.

It is important to note that most browsers automatically accept cookies, so if you do not wish for cookies to be used, you must actively reject or disable them. If you choose to refuse the use of cookies, please be aware that some features of our platform may not work properly.

Consent for Cookie Processing. When is it necessary? In cases where cookies are used for advertising, we will ask for your consent upon your first visit to the platform (considered from each device you use). As for strictly necessary cookies, as the name suggests, they must be activated for the platform to function.

Analysis cookies, such as performance or functionality cookies, are handled based on legitimate interest, giving you the option to opt-out later.

E. How do we collect your data?

The way we collect your data will depend on the type of interaction you have with Itacorda:

• If you are one of our customers, we inform you that data may be collected in person at the store or through our website.
• If you are a representative of our suppliers or service providers, we inform you that data may be collected during contract signing or transfer, either physically or via electronic systems (email, apps, etc.), applicable registrations or authorizations.

F. How long do we store your personal data?

Your personal data collected by us will be processed as long as the original purpose lasts, unless there is another legitimate purpose. Interested in knowing the specific retention period for each category of data? No problem! This information is available to you—just contact us through the provided channels, and we will be happy to provide it.

G. How do we take care of your information?

We prioritize information security and ensure the implementation of technical and organizational measures to improve the protection of personal data we collect. These measures are designed to protect personal data from unauthorized access and accidental or unlawful destruction, loss, alteration, communication, or dissemination, in line with ISO/IEC 27001 and best market practices. We inform you that Itacorda makes every effort to maintain the integrity and confidentiality of the information provided to us.

H. With whom do we share your data?

We inform you that we may share some data with suppliers and/or third-party partners in outsourced sectors to assist us with our services, as well as with other companies within our corporate group when they have similar purposes.

Rest assured! All service providers for Itacorda are carefully selected, and we require them to adopt the strictest controls, as well as the same security standards and guarantees that we provide to you.

We also share some information with competent authorities such as Procon when appropriate legal grounds are presented or under a judicial order.

I. We respect your rights. Here are your rights:

We guarantee the following rights to you, as data subjects, in compliance with Article 18 of the General Data Protection Law (LGPD):
I. You can confirm with the company the existence of personal data processing and access your data at any time, knowing, for example, which data we hold about you.
II. If your data is incomplete, inaccurate, or outdated, you may request its correction to keep it always correct and up-to-date.
III. You may also request the anonymization, blocking, or deletion of data if it is unnecessary, excessive, or processed in non-compliance with the General Data Protection Law.
IV. You can request information from public and private entities regarding the potential sharing of your personal data.
V. You can request the deletion of your collected and stored data by Itacorda, provided that the legal minimum retention period has passed.
VI. The option to transfer your data to another service provider will also be made available when this option has been regulated by the ANPD and is applicable to the business context.
VII. In cases where the company requires your consent to collect certain data, you can request information about the possibility of not consenting and its consequences. If consent is given, you can later revoke it and request the deletion of this data.

J. Our responsibility:

As controllers of the personal data above, we are responsible for keeping it secure, processing it within the limits informed to you, and ensuring that third parties can only access it under the conditions set forth here. Therefore, we prioritize transparency and inform you that we will comply with the entire content of this Privacy Policy, ensuring that your rights can be exercised, and contact information will be available for any questions or further information.

More information:

We hope everything is clear. As mentioned earlier, if there is anything you're unsure about, it's generally safer to leave cookies enabled if you interact with any of the features on our website.