Privacy Policy

We collect the following personal data:

• Registration data: name, email, phone, and Tax ID (CPF/CNPJ) for invoice issuance;
• Delivery data: full address with postal code;
• Payment data: processed by the payment gateway — we do not store card data;
• Usage data: pages visited, designs created, products viewed and purchased;
• Device data: IP, browser type, operating system, and access time;
• Design Files: your uploaded files and designs are treated as strictly confidential and used solely to produce your order.

Your data is used to:

• Process orders, payments, and deliveries;
• Communicate order status by email;
• Provide customer support;
• Personalize the platform experience;
• Send marketing communications (with consent only);
• Comply with legal and tax obligations.

The processing of your data is based on the following legal grounds:

• Contract performance (art. 7, V): to process orders and deliveries;
• Legal obligation (art. 7, II): to issue invoices and comply with tax obligations;
• Legitimate interest (art. 7, IX): for platform security and fraud prevention;
• Consent (art. 7, I): to send marketing emails.

Your data may be shared with:

• Shipping carriers (name and delivery address): only with logistics partners (Correios or private carriers) to carry out shipping;
• Payment gateways (Mercado Pago / Stripe): for secure processing;
• Email service (Resend): to send transactional notifications;
• Public authorities: when required by law or court order.

We never sell or share your data with third parties for advertising purposes.

We use cookies to:

• Essential cookies: keep your session active and cart preferences;
• Analytics cookies: understand how users navigate the platform (aggregated, anonymized data);
• Marketing cookies: only with your explicit consent.

You can manage or disable cookies in your browser settings.

We adopt technical and organizational measures to protect your data, including: SSL/TLS encryption on all transmissions, storage on servers with restricted access control, and continuous security monitoring.

In the event of a security incident that may affect your data, you will be notified as provided by the LGPD.

We use the WhatsApp Business API for customer service. By starting a conversation with us on WhatsApp, you agree that your messages, phone number and profile name are processed for support, quoting and order follow-up. Conversations are retained in our systems for as long as needed for support and to meet legal obligations. You may request deletion of your data at any time via the contact e-mail below, under the Brazilian General Data Protection Law (Law no. 13.709/2018).

When you file a request with our customer service, we store your name, e-mail, phone (if provided) and the content of the demand against a protocol number. That record is kept even if you delete your account, because the Consumer Code and Decree 7.962/2013 require us to evidence the support we provided — a case foreseen in art. 16, II of the LGPD. In those cases we may anonymise your personal data, keeping only the protocol, the demand type and the dates.

We may photograph the finished personalized product to display on our portfolio, website, or social media.

If your project is confidential or you do not authorize its disclosure, simply notify us before production begins and we will respect your privacy.

Under the LGPD (art. 18), you have the following rights:

• Confirmation that your data is being processed;
• Access to the data we hold about you;
• Correction of incomplete, inaccurate, or outdated data;
• Anonymization, blocking, or deletion of unnecessary data;
• Data portability to another service provider;
• Deletion of data processed based on consent;
• Withdrawal of consent at any time.

We apply minimal retention tied to a declared purpose (LGPD, arts. 15 and 16). The source material you upload (photo/image uploads) is processed temporarily, only for as long as necessary to create and produce the order. The design/print file of a completed order is kept for 90 days after delivery, solely for warranty, returns, and potential dispute-resolution purposes, and is permanently deleted at the end of that period, unless a legal retention obligation applies.

To exercise your rights, contact us by email: info@mundobakana.com.br

Bakana's Data Protection Officer (DPO) can be reached by email: info@mundobakana.com.br

If you are not satisfied with our response, you may contact the National Data Protection Authority (ANPD) at www.gov.br/anpd.