Enriched Coffee®

PRIVACY POLICY OF NOSSO GRÃO COFFEE

Last Updated: March 31, 2026

Welcome! Thank you for using Nosso Grão Coffee!

This Privacy Policy applies to the brand's website and digital channels. Nosso Grão Coffee, owned by MARIA LUCILEI NARESSI, registered with the CNPJ/ME under No. 51.967.371/0001-88, with its headquarters at Rua Antônio Rodrigues Miranda, No. 207, Jardim Independência, Taubaté, SP, Zip Code 12.031-580, hereinafter referred to simply as “Nosso Grão Coffee“.

Quando você utiliza a Nosso Grão Coffee, you entrust us with your data and information. We are committed to upholding that trust. Accordingly, this Policy explains—in a clear and accessible manner—how your information and data will be collected, used, shared, and stored through our systems. 

Some data processing activities do not require consent and arise directly from the performance of the purchase and sale agreement or compliance with legal obligations. Other processing activities, such as sending promotional communications and creating preference profiles, are carried out only with your express consent, which may be withdrawn at any time. 

This Policy is organized as follows to facilitate understanding:

1. What information does the Nosso Grão Coffee collect?
2. Like Nosso Grão Coffee uses the collected information?
3. Legal bases for data processing
4. How, when, and with whom Nosso Grão Coffee Does it share your information?
5. What rights do you have regarding the information we collect?
6. Like Nosso Grão Coffee Does it protect your information?
7. Data subject support channel
8. Updates to this privacy policy
9. Governing law

This document should be read in conjunction with our Terms of Use ([insert URL/link]), which contains an overview of our platform. If you have questions or need to address any matter related to this Policy, please contact us via email at: cafenossograo@hotmail.com 

1. INFORMATION WE COLLECT

We collect the following types of information:

1. Information you provide to us.

This includes:

• Registration details: full name, email address, CPF, access password (stored in encrypted form), and full address (street/road, number, unit/apartment number, neighborhood, city, state, postal code).

• Payment details: card number, card network, and expiration date, processed by a certified payment gateway (PCI-DSS). The card security code (CVC/CVV) is used exclusively for transaction authentication and is not stored in our systems after payment approval.
  

2. Information generated when you use our services.

We collect the following generated information:

• We collect the following generated information: a Nosso Grão Coffee It automatically collects application access logs, which include the IP address, date, and time used to access the application. Nosso Grão Coffee. The collection of this data is mandatory under Law 12.965/2014, but it will only be provided to third parties with your express authorization or in response to a court order. 

• Usage dataWe collect information about your interactions on Nosso Grão Coffee, such as your browsing activity, the pages or other content you access or create, your searches, participation in surveys or forums, and other actions.

• Payment details: when you make payments on Nosso Grão Coffee, payment data—such as the date and time, amount, and other transaction details—may be stored and used, including for fraud prevention purposes. This enables us to provide a secure and suitable environment for you to carry out your transactions.

• Communications with Café Nosso Grãowhen you communicate with the Nosso Grão Coffee, we collect information about your communications, including metadata such as the date, IP address, and time of the communications and their full content, as well as any information you choose to provide.

• Cookies and similar technologies: We use cookies, which are text files generated and stored on your browser or device by websites, applications, and online advertisements. Cookies may be used for the following purposes: remembering preferences and user settings, and understanding user behaviors and interests.

3. Information from other sources.

The Nosso Grão Coffee will be able to interact with other platforms and services, such as gateways payment processing, for the secure processing of financial transactions (payment data) and technology service providers, i.e., platforms of e-commerce, hosting, data analysis, and communication, always subject to contractual confidentiality and security clauses. In all cases, we contractually require recipients to adopt adequate data protection standards.

2. HOW WE USE YOUR INFORMATION

It's worth remembering that we highly value your privacy. Therefore, all data and information about you is treated as confidential, and we will only use it for the purposes described here and authorized by you, primarily so that you can use the [service/product name]. Nosso Grão Coffee fully, always aiming to improve your user experience. 

1. Authorized uses

In this way, we may use your data to:

• Allowing you to access and use all the features of Café Nosso Grão;

• Send you messages regarding support or service, such as alerts, notifications, and updates;

• To communicate with you regarding products, services, promotions, news, updates, events, and other matters that may interest you;

• Analyze user traffic in our applications;

• Deliver targeted advertising based on your tastes, interests, and other collected information;

• Personalize the service to increasingly align with your tastes and interests;

• To create new services, products, and features;

• Detection and prevention of fraud, spam, and security incidents;

• To verify or authenticate the information provided by you, including by comparing it with data collected from other sources;

• Better understand user behavior and build behavioral profiles;

• For any purpose you authorize at the time of data collection;

• Comply with legal obligations.

We may occasionally use data for purposes not specified in this privacy policy, provided such uses fall within your reasonable expectations. Any use of your data for purposes that do not comply with this provision will be subject to your prior authorization.. 

2. Data deletion

All collected data will be deleted from our servers upon your request, through a free and easy procedure, after analysis and feedback, within a period of... 10 (ten) days ...useful, or when they are no longer necessary or relevant for us to provide our services to you, unless there is another reason for their retention, such as a potential legal obligation to retain data or the need to preserve it to safeguard the rights of the... Nosso Grão Coffee.

In cases where you request the deletion of your data, we will retain your data for the period necessary to comply with legal obligations or to protect our rights in the event of litigation, subject to applicable statutes of limitations.

3. Monitoring

 The Nosso Grão Coffee reserves the right to monitor the entire platform, primarily to ensure that the rules described in our Terms of Use are being observed, or whether there is any violation or abuse of applicable laws. 

4. User deletion

 The Nosso Grão Coffee reserves the right to exclude a specific user, regardless of the type, should the present Policy or the Terms of Use are not respected. 

As we value good relationships with our users, we recognize your right to seek an understanding of the reasons—and even to contest them—which can be done via the following email address: cafenossograo@hotmail.com

3. LEGAL BASES FOR DATA PROCESSING

In accordance with Article 7 of the LGPD, each data processing operation carried out by Nosso Grão Coffee is based on the following legal grounds:

4. SHARING OF INFORMATION

The Nosso Grão Coffee shares personal data with the following categories of recipients, strictly for the purposes indicated:

• Logistics partners and carriers: name, address, and contact details, for product delivery;

• Certified payment gateways (PCI-DSS): payment data, for secure transaction processing;

• Technology service providers: e-commerce, hosting, data analytics, and communication platforms, subject to contractual confidentiality and security clauses.

In all cases, we do not sell or trade your data, and we contractually require recipients to adopt adequate data protection standards.

In the event of corporate reorganization, merger, acquisition or sale of assets of Nosso Grão Coffee, your personal data may be transferred to the acquirer, provided that the latter maintains a level of protection equivalent to that of this PolicyThe data subject will be informed in advance of any significant change regarding the control of their data and is guaranteed the right to request deletion should they not agree to the new conditions. 

 The Nosso Grão Coffee reserves the right to provide your data and information about you—including your interactions—if legally required to do so (as necessary for the company to comply with national laws) or if you expressly authorize it.

4.1. International data transfer

Some technology providers used by Nosso Grão Coffee may store or process data on servers located outside Brazil. In such cases, we adopt the safeguards provided for in the LGPD to ensure a level of protection equivalent to that guaranteed by Brazilian legislation.

5. RIGHTS OF DATA SUBJECTS

You may always choose not to share your data with us, but please bear in mind that some of this data may be necessary to use the features of our applications. Regardless, you will always have rights regarding the privacy and protection of your personal data.

Therefore, below we summarize all the rights you have under Brazilian sectoral laws relating to data protection and... General Data Protection Law (“LGPD”), Brazilian Civil Rights Framework for the Internet and Consumer Protection Code — Law No. 8,078/1990, namely:

1. Right of access. This right allows you to request and receive a copy of the personal data we hold about you.

2. Right to rectification: This right allows you to request the correction and/or rectification of your personal data at any time if you identify that any of it is incorrect. However, to carry out this correction, we will need to verify the validity of the data you provide. You can directly rectify some of your personal data via email: cafenossograo@hotmail.com

3. Right of exclusion. This right allows you to request the deletion of the personal data we hold about you. All collected data will be deleted from our servers upon your request or when the data is no longer necessary or relevant for providing our services, unless there is another reason for retaining it—such as a legal data retention obligation or the need to preserve the data to protect Café Nosso Grão's rights. To modify your personal information or delete it from our database, simply send an email to cafenossograo@hotmail.com

4. Right to object to processing. You also have the right to object to where and in what context we process your personal data for various purposes. In certain situations, we may demonstrate that we have legitimate grounds for processing your data that override your rights—for instance, if such processing is essential for providing our applications.

5. Right to request anonymization, blocking, or deletion. This right allows you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data's accuracy; (b) when you need the data to be retained—even if we no longer require it—as necessary to establish, exercise, or defend legal claims; or (c) if you have objected to the use of your data, but we need to verify whether we have legitimate grounds to use it.

6. Right to portability. We will provide you, or third parties you have chosen, with your personal data in a structured and interoperable format.

7. Right to withdraw your consent. You have the right to withdraw your consent regarding the terms of this Privacy Policy. However, this will not affect the lawfulness of any processing carried out previously. If you withdraw your consent, we may be unable to provide certain services.

8. Right to review of automated decisions. You also have the right to request a review of decisions made solely based on the automated processing of your personal data that affect your interests, including decisions intended to define personal, professional, consumer, and credit profiles and/or aspects of your personality.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise your other rights). 

This is a security measure to ensure that personal data is not disclosed to anyone who does not have the right to receive it. We may also contact you to obtain further information regarding your request in order to expedite our response. We try to respond to all legitimate requests within [timeframe]. 10 (ten) days useful. 

If you have any questions regarding these matters and how you can exercise these rights, please feel free to contact us via email at cafenossograo@hotmail.com

6. INFORMATION SECURITY

All your data is confidential and only authorized individuals will have access to it. Any use of this data will be in accordance with this Policy. Nosso Grão Coffee will make all reasonable market efforts to ensure the security of our systems and your data. Our servers are located in different locations to ensure stability and security, and can only be accessed through pre-authorized communication channels. 

Whenever possible, all your information will be encrypted, unless this makes its use by the platform unfeasible. You may request a copy of your data stored in our systems at any time. We will retain data and information only for as long as it is necessary or relevant for the purposes described in this Policy, or for periods predetermined by law, or until it is necessary for the maintenance of legitimate interests of [the platform]. Nosso Grão Coffee. 

The Café Nosso Grão We consider your privacy extremely important and will do everything in our power to protect it. However, we cannot guarantee that all data and information about you on our platform will be free from unauthorized access, especially if there is improper sharing of the credentials necessary to access our application. Therefore, you are solely responsible for keeping your access password in a safe place and are prohibited from sharing it with third parties. You agree to notify us. Nosso Grão Coffee immediately, via a secure method, regarding any unauthorized use of your account, as well as unauthorized access to it by third parties. 

In the event of a security incident that could generate significant risk or harm to data subjects, the Nosso Grão Coffee will report the incident to ANPD and to the affected data subjects within the legally established timeframes.

7. Data Subject Contact Channel

The Café Nosso Grão It is an individual micro-enterprise and, pursuant to the regulations of the National Data Protection Authority (ANPD), is exempt from the requirement to formally designate a Data Protection Officer (DPO).

All requests related to the processing of personal data, including the exercise of rights, complaints, and incident reporting, must be directed to the following channel:cafenossograo@hotmail.com

We will respond within a period of up to 10 (ten) business days starting from receipt.

8. PRIVACY POLICY UPDATES

 The Nosso Grão Coffee reserves the right to amend this Policy as often as necessary to provide you with greater security and convenience, and to continually improve your experience. That is why it is very important to review our Policy periodically. For convenience, we indicate the date of the last update at the beginning of the document. Should significant changes be made that require new authorizations from you, we will publish a new privacy policy, subject once again to your consent.

9. APPLICABLE LAW

This document is governed by and interpreted in accordance with the laws of the Federative Republic of Brazil, in particular the Law No. 13,709/2018 (LGPD), the Law No. 12,965/2014 (Brazilian Civil Rights Framework for the Internet), the Decree No. 7,962/2013 and the Law No. 8,078/1990 (Consumer Protection Code).

The Forum of [name] is hereby chosen. Judicial District of Taubaté, State of São Paulo, as having jurisdiction to resolve any issues arising from this document, with the express waiver of any other, however privileged it may be.