Privacy Policy

1. Introduction

RVR Comércio, Importação, Exportação de Ferragens e Acessórios LTDA ("we", "our", or "us"), registered under CNPJ 45.700.425/0001-41, with its principal place of business at R. Mto. Lobo de Mesquita, 392 - Galpão, Tupi B, Belo Horizonte - MG, 31844-180, is committed to protecting your privacy and personal data.

This Privacy Policy describes how we collect, use, store, and share your personal information in compliance with Brazil's General Data Protection Law (Lei Geral de Proteção de Dados — LGPD, Law No. 13.709/2018) and other applicable regulations.

2. Data We Collect

• Identification data: full name, CPF/CNPJ, date of birth, company registration
• Contact data: email address, phone number, physical address
• Business data: company name, industry sector, trade references, wholesale account details
• Purchase data: product selections, specifications, quantities, order history
• Import/export data: customs documentation, shipping manifests, international addresses, freight details
• Logistics data: delivery addresses, warehouse scheduling, freight carrier preferences
• Payment data: billing information, credit terms, processed through secure payment systems
• Fiscal data: information required for NF-e/NFC-e, customs declarations, and tax compliance
• Navigation data: IP address, browser type, cookies, access logs

3. How We Use Your Data

• Processing hardware and accessory orders (retail and wholesale)
• Managing import and export operations and customs documentation
• Coordinating warehouse logistics, shipping, and freight
• Establishing and managing wholesale and trade accounts
• Providing product sourcing and custom specification services
• Processing payments, credit terms, and issuing invoices (NF-e/NFC-e)
• Sending new product arrivals, bulk pricing updates, and trade information (with consent)
• Complying with customs, trade, consumer protection, and legal obligations

4. Legal Basis for Processing

• Consent provided by the data subject
• Performance of a contract or preliminary procedures related to a contract
• Compliance with legal or regulatory obligations (including customs and trade regulations)
• Legitimate interests of the controller, provided fundamental rights are preserved

5. International Data Transfers

As an import/export company, we may transfer personal data internationally in connection with trade operations, customs documentation, and international shipping. Such transfers are conducted in compliance with the LGPD and applicable international data protection frameworks. We ensure adequate protection measures are in place for any cross-border data transfer.

6. Data Sharing

• International manufacturers and suppliers for product sourcing and orders
• Customs brokers and freight forwarders for import/export operations
• Shipping carriers for domestic and international delivery
• Payment processors for secure transaction handling
• Customs authorities for import/export compliance
• Tax authorities as required by fiscal regulations
• Government authorities when required by law

7. Data Retention

Your personal data will be retained only for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law. Trade account data is retained for the duration of the business relationship. Import/export documentation is retained as required by customs and tax regulations (typically 5 years). Transaction and fiscal data are retained as required by tax regulations. Upon expiration, your data will be securely deleted or anonymized.

8. Your Rights

Under the LGPD, you have the following rights:

• Confirmation of the existence of data processing
• Access to your personal data
• Correction of incomplete, inaccurate, or outdated data
• Anonymization, blocking, or deletion of unnecessary or excessive data
• Portability of data to another service provider
• Deletion of data processed with your consent
• Information about entities with which your data has been shared
• Information about the possibility of denying consent and its consequences
• Revocation of consent

To exercise any of these rights, please contact us using the information in Section 11.

9. Cookies

Our website may use cookies and similar technologies to enhance your browsing experience. You may configure your browser to refuse cookies; however, some features may not function properly without them.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Trade pricing, credit terms, and sourcing specifications receive additional access restrictions. Despite our efforts, no method of electronic transmission or storage is completely secure.

11. Contact Information

12. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page with a revised "Last updated" date.