1 Introduction
This Privacy Policy is issued by MEU VESTIR TECNOLOGIA INCLUSIVA LTDA, a company incorporated under the laws of Brazil (CNPJ 67.992.904/0001-11), with registered offices at Rua Teresina (Lot Campo Real), 929, Sala 1, Quadra 11, Lote 18, Centro, Campo Verde – MT, Brazil ("Meu Vestir", "we", "us", or "our").
We operate the website at meuvestir.site and any related sub-domains (collectively, the "Site"). As the operator of this Site and the controller of the personal data processed through it, we are responsible for ensuring that information is handled lawfully, fairly, and with full transparency toward the individuals it concerns.
By accessing or using our Site, you acknowledge that you have read and understood this Policy. This document should be read alongside our Terms of Use. If you have any questions, the fastest way to reach our privacy team is at contato@meuvestir.site.
2 Information We Collect
We collect information in two principal ways: data you actively provide to us when you make contact, and data collected automatically when you visit and navigate the Site. We do not sell, rent, or monetise your personal data in any form.
Information you provide directly
- Contact enquiries — When you reach out to us by email or telephone, we receive your name, email address, phone number (if supplied), and the contents of your message or enquiry.
- Business communications — If you correspond with us regarding a partnership, proposal, or service discussion, we may retain the content of that correspondence, including any attachments you choose to share.
- Event or appointment context — Where we arrange a meeting, call, or demonstration, we may note scheduling details and any preferences you express in advance.
Information collected automatically
- Log data — Our web server automatically records your IP address, browser type and version, operating system, referring URL, pages visited, and the date and time of each request. This data helps us maintain Site security and diagnose technical issues.
- Analytics data — We use Google Analytics 4 to understand how visitors interact with our pages. This service collects anonymised or pseudonymised data about session duration, page-view sequences, scroll depth, approximate geographic location (city/country level), and device category.
- Advertising measurement data — Where we run campaigns through Google Ads, conversion tracking pixels or tags may record when a visitor arrives via an advertisement, helping us gauge campaign effectiveness. No personally identifiable information is passed to Google in this process.
- Cookie identifiers — Cookie technology enables us to distinguish returning visitors from new ones, remember consent preferences, and deliver a consistent browsing experience. Full details appear in Section 4.
We do not knowingly collect sensitive personal data categories (such as health data, biometric data, racial or ethnic origin, or political opinions) through this Site, and we ask that you refrain from including such information in any written communications to us unless it is strictly necessary for your enquiry.
3 How We Use Your Information
We process personal data only for specific, explicit, and legitimate purposes. The legal bases we rely on are consent (Art. 7, I LGPD / Art. 6(1)(a) GDPR), legitimate interests (Art. 7, IX LGPD / Art. 6(1)(f) GDPR), and compliance with a legal obligation (Art. 7, II LGPD / Art. 6(1)(c) GDPR), as specified below.
Purposes and legal bases
- Responding to your enquiries — We use contact data solely to reply to your message, provide information you have requested, or schedule a follow-up. Legal basis: legitimate interests / pre-contractual necessity.
- Site performance and security — Log data and server records are analysed to detect errors, prevent abuse, and ensure the Site functions correctly for all visitors. Legal basis: legitimate interests.
- Analytics and continuous improvement — Aggregated, anonymised analytics help us understand which content is valuable, identify navigation friction points, and improve the overall quality of the Site. Legal basis: consent (where required) / legitimate interests.
- Advertising measurement — Conversion data allows us to assess the return on our marketing spend and optimise how we reach potential clients and partners. Legal basis: consent (obtained via cookie banner).
- Legal and regulatory compliance — We may process and retain data to fulfil tax, accounting, or other statutory obligations, or to respond to a lawful request from a public authority. Legal basis: legal obligation.
We will never use your personal information for automated decision-making that produces legal or similarly significant effects without your explicit consent, nor will we use it for any purpose that is incompatible with the purposes stated in this Policy.
4 Cookies & Tracking Technologies
Cookies are small text files placed on your device by a website. They allow the site to remember information about your visit, such as your language preference or cookie consent status. We also use similar technologies, including local storage and tracking pixels, where noted below.
| Category | Purpose | Examples | Consent required |
|---|---|---|---|
| Strictly Necessary | Enable core website functionality and security. The site cannot function properly without these cookies. | Session ID, CSRF token, cookie-consent preference | No — these are always active |
| Analytics | Help us understand visitor behaviour in aggregate. Data is pseudonymised and IP addresses are anonymised before processing. | Google Analytics 4 (_ga, _ga_*, _gid) | Yes — opt-in required |
| Advertising | Measure the effectiveness of Google Ads campaigns; may set a cookie to recognise a visitor who arrived via an advertisement. | Google Ads Conversion (_gcl_au, _gcl_aw) | Yes — opt-in required |
| Preference | Remember non-essential user choices, such as display mode or previously dismissed notifications, to improve return visits. | Site-specific preference tokens | Yes — opt-in required |
When you first visit the Site, a cookie-consent banner will appear. You may accept all cookies, accept only strictly necessary cookies, or customise your preferences by category. You may change your choices at any time by clearing your browser's cookies and revisiting the Site, or by adjusting settings in your browser:
Managing cookies in your browser
- Google Chrome — Settings → Privacy and Security → Cookies and other site data
- Mozilla Firefox — Options → Privacy & Security → Cookies and Site Data
- Apple Safari — Preferences → Privacy → Manage Website Data
- Microsoft Edge — Settings → Cookies and site permissions → Cookies and site data
Please be aware that disabling analytics or advertising cookies will not degrade your access to the Site's content; it will simply mean we have less information to help us improve the experience. Disabling strictly necessary cookies may impair core functionality.
For more information about Google Analytics' data practices and opt-out options, please visit tools.google.com/dlpage/gaoptout. For Google Ads personalisation controls, visit adssettings.google.com.
5 Sharing With Third Parties
We do not sell, trade, or transfer your personal data to third parties for their own marketing or commercial purposes. We may share information only in the limited circumstances described below.
Categories of recipients
- Technology and hosting providers — Our Site is hosted on infrastructure services (web server, CDN) that process log data on our behalf under data processing agreements. These providers act solely as processors and may not use your data for their own purposes.
- Analytics providers — We share pseudonymised behavioural data with Google Ireland Limited (for EU/EEA users) or Google LLC (for other users) as part of the Google Analytics 4 service. Google processes this data under its own privacy terms and our data processing amendment.
- Advertising platforms — Google Ads conversion tracking receives aggregated event signals (not personal contact data) to report on campaign performance. This is governed by Google's privacy policy and our agreement.
- Email service providers — When you contact us by email, your message is processed through our email hosting provider. All such providers operate under contractual obligations consistent with applicable data protection law.
- Legal and regulatory authorities — We may disclose information when required to do so by Brazilian law, court order, or other governmental authority, or when necessary to protect our legal rights or the safety of others.
- Business transfers — In the event of a merger, acquisition, or sale of our company or assets, personal data may be transferred to the successor entity, subject to equivalent privacy protections. We will notify you of any such change via a prominent notice on this Site.
Where we transfer personal data outside Brazil (for example, to Google services with servers in the United States or European Union), we ensure appropriate safeguards are in place — such as Standard Contractual Clauses, adequacy decisions, or equivalent mechanisms — in accordance with LGPD Art. 33 and GDPR Chapter V.
6 Data Retention
We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law, whichever is longer. Our retention periods are as follows:
Retention schedule
- Contact enquiry emails — Retained for up to 3 years from the date of last correspondence, to support any follow-up requests or contractual matters that arise from the initial contact. After this period, messages are permanently deleted or irreversibly anonymised.
- Server log files — Retained for up to 12 months for security monitoring and technical diagnostics, then automatically purged.
- Google Analytics data — Configured to a maximum data retention period of 14 months within Google Analytics, after which event-level data is automatically deleted. Aggregated reports have no expiry, as they contain no personal data.
- Cookie consent records — Retained for 12 months to demonstrate compliance with consent requirements, after which a fresh consent interaction will be requested.
- Legal and compliance records — Retained for the minimum statutory period required by Brazilian tax and commercial law (generally 5 to 10 years), even where other data relating to the same individual has been deleted.
Once a retention period expires, data is deleted from active systems and scheduled for removal from any backups within the next routine backup cycle. If you have asked us to delete your data before the applicable retention period ends, we will honour that request unless we are legally obliged or entitled to retain it.
7 Data Security
We take the security of your personal data seriously and implement a range of technical and organisational measures designed to protect information against unauthorised access, accidental loss, alteration, disclosure, or destruction.
Technical and organisational safeguards
- TLS/HTTPS encryption — All data transmitted between your browser and our Site is encrypted in transit using TLS 1.2 or higher.
- Access controls — Access to systems that may contain personal data is restricted to authorised personnel on a strict need-to-know basis, using strong authentication mechanisms.
- Third-party auditing — We work only with service providers who operate under recognised security standards (such as ISO 27001 or SOC 2) and who are contractually obliged to protect the data they process on our behalf.
- Minimisation — We collect only the minimum data necessary for each stated purpose, reducing the potential impact of any incident.
- Incident response — We maintain an internal procedure for detecting, assessing, and responding to data incidents. Where applicable, we will notify the Autoridade Nacional de Proteção de Dados (ANPD) and affected individuals within the timeframes required by the LGPD.
No method of electronic transmission or storage is completely secure. While we strive to protect your personal data using commercially reasonable means, we cannot guarantee its absolute security. We encourage you to use secure, up-to-date software when communicating with us online.
8 Your Rights
Depending on your country of residence, you may have the following rights in relation to your personal data. These rights apply under Brazil's LGPD (Art. 18) and, where applicable, under the GDPR (Art. 15–22). We take all such requests seriously and will respond within the timeframes required by law — no later than 15 days for LGPD requests.
Right of Access
You may request confirmation of whether we hold personal data about you, and receive a copy of that data together with information about how it is processed, shared, and retained.
Right to Correction
If the data we hold about you is inaccurate, incomplete, or out of date, you have the right to request that we correct or update it without undue delay.
Right to Deletion (Erasure)
You may ask us to delete your personal data when it is no longer necessary for the purpose it was collected, when you withdraw consent, or when processing is unlawful — subject to any overriding legal obligation to retain it.
Right to Anonymisation or Blocking
Under the LGPD, where data is unnecessary, excessive, or processed in violation of the law, you may request that it be anonymised or blocked from further use.
Right to Data Portability
You may request that we provide a copy of your personal data in a structured, commonly used, machine-readable format, to facilitate transfer to another controller.
Right to Object / Restriction
You may object to processing based on our legitimate interests, or request that we restrict processing in certain circumstances — for example, while the accuracy of data is being verified.
Right to Withdraw Consent
Where we rely on your consent as our legal basis, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal date.
Right to Lodge a Complaint
You have the right to lodge a complaint with Brazil's national data protection authority, the ANPD (gov.br/anpd), or with the competent supervisory authority in your country of residence.
To exercise any of the above rights, please contact us at contato@meuvestir.site with the subject line "Privacy Request". Please include your full name and, if possible, the email address from which you previously contacted us so that we can identify your records. We will not charge a fee for reasonable requests and will respond promptly. We may need to verify your identity before acting on a request.
9 Children's Privacy
This Site is directed exclusively at adults and business professionals. We do not knowingly collect, solicit, or process personal data from children under the age of 18. Our services are not designed for, targeted at, or intended to be used by minors, and we do not direct advertising to them.
If you believe that a person under 18 has submitted personal data to us without appropriate parental or guardian consent, please contact us immediately at contato@meuvestir.site. We will take prompt steps to identify and delete any such data from our records in accordance with the LGPD and any other applicable legislation protecting minors.
10 Changes to This Policy
We review this Privacy Policy periodically — at minimum once per year, and whenever there is a significant change to our data practices, the technologies we use, or the laws that govern us. Any material changes will be clearly indicated by updating the "Last updated" date at the top of this page.
For changes that significantly alter how we process your personal data or that affect rights you currently enjoy, we will take additional steps to bring the update to your attention — for example, by posting a prominent notice on our homepage for a period of at least 30 days before the change takes effect. Continued use of the Site after a policy update constitutes your acknowledgement of the revised terms.
We encourage you to return to this page from time to time to stay informed of how we handle your information. All previous versions of this Policy are available on request by emailing contato@meuvestir.site.
11 Contact & Data Controller
If you have any questions, concerns, or complaints about this Privacy Policy, about the way we handle your personal data, or if you wish to exercise any of your rights as described in Section 8, please reach out to us directly. We are the sole data controller for all personal data processed through this Site, and we take full accountability for that processing.
Requests submitted by email are processed during business hours (Monday to Friday, 08:00–18:00 BRT). We aim to acknowledge all privacy-related communications within two business days and to provide a substantive response within 15 calendar days, or earlier where required by law.