PRIVACY POLICY.

This Policy applies to all personal data processed by our auto parts retail business — including individual customers and workshop professionals who purchase parts from us in-store or via WhatsApp, website visitors and anyone whose data is processed in connection with our retail activities. Most in-store purchases are anonymous; this Policy covers the specific circumstances in which personal data is collected.

• NF-e with CPF (individual customers, when requested): Where a customer requests the NF-e to be issued with their CPF — for instance to participate in the Nota Fiscal Paulista programme or for vehicle maintenance records — we collect and process the CPF solely for that fiscal purpose. This is always at the customer's request, never mandatory for the purchase.
• NF-e with CNPJ (workshops and fleet buyers): Where a workshop, fleet operator or company purchases parts and requires the NF-e issued to their CNPJ — company name, CNPJ and the responsible contact's name.
• WhatsApp parts inquiry data: Name, phone, vehicle details (make, model, year) and part description — where customers or workshops inquire about part availability or place orders via WhatsApp.
• Contact and inquiry data: Name, phone and message when submitting inquiries via our website form.
• Technical website data: IP address, browser type, pages visited and access times.

• SEFAZ-SP / Receita Federal: Tax data transmitted with NF-e issuance — in compliance with SEFAZ-SP electronic invoice requirements and applicable federal tax legislation, including ICMS obligations for retail auto parts.
• PROCON-SP: When required in a consumer dispute mediation under the CDC — for example, in relation to a warranty or parts quality dispute.
• CONTRAN / DENATRAN (where applicable): For regulated vehicle safety components — brake systems, lighting, tyres and other CONTRAN-regulated items — where regulatory compliance records are required.
• Legal authorities: When required by a competent judicial or administrative order.

We do not sell, share or use customer data for marketing or advertising purposes. CPF data collected for NF-e purposes is used only for the specific fiscal transaction.

Our retail operations are in São Paulo, SP. All customer and fiscal data is stored in Brazil. Any technology platforms used for our website or WhatsApp communications that operate on international servers do so under the guarantees of Art. 33 of the LGPD or recognised adequacy mechanisms.

• NF-e and fiscal records (SEFAZ-SP / ICMS): Minimum 5 years under federal and state tax legislation (CTN, Art. 174; SEFAZ-SP). Auto parts retail NF-e records may be relevant for ICMS audits and must be retained for the full statutory period.
• Workshop / fleet account records: Duration of the commercial relationship plus 5 years for fiscal and dispute documentation.
• WhatsApp inquiry data (no purchase completed): Deleted within 30 days of the inquiry if no purchase results.
• WhatsApp order data (purchase completed): Retained until the end of any applicable warranty period and CDC dispute window — typically 90 days for non-durable goods, longer for parts with manufacturer warranty.
• Contact and inquiry data (website): Up to 6 months from last contact if no purchase results.
• Website analytics: Aggregated and anonymised after 12 months.

• In-store payment terminals PCI-DSS certified — card data never retained by us;
• CPF and CNPJ data collected for NF-e used only for that transaction and transmitted securely to SEFAZ-SP;
• WhatsApp customer and order data retained only for the applicable warranty/dispute period;
• Website encrypted in transit (HTTPS);
• As a Ltda, formal internal data handling protocols maintained;
• Incident response procedures and breach notification per LGPD Art. 48.

• Confirmation and Access (Art. 18, I–II): Confirm whether we hold your data — note that most purchases are anonymous and leave no personal data record beyond the NF-e in SEFAZ-SP systems.
• Correction (Art. 18, III): Request correction of inaccurate data.
• Anonymisation / Blocking / Deletion (Art. 18, IV): Request deletion — subject to mandatory fiscal retention requirements for NF-e and ICMS records.
• Portability (Art. 18, V): Receive your data in a structured format.
• Deletion of consent-based data (Art. 18, VI): Request deletion of data processed by consent.
• Information on sharing (Art. 18, VII): Find out which entities your data was shared with.
• Withdrawal of Consent (Art. 8º, §5º): Withdraw consent at any time.
• Complaint to the ANPD (Art. 18, §1º): Lodge a complaint at www.gov.br/anpd.

We respond within 15 business days. You may also raise requests in person at our store at Av. General Edgar Facó, 88, Parque Maria Domitila, São Paulo.

Our website may use cookies for essential functionality and aggregated performance analysis. We do not use behavioural tracking or advertising cookies. Preferences can be managed through browser settings.

Auto parts purchases are typically made by adults — vehicle owners, workshop professionals and fleet managers. We do not intentionally collect personal data from children under 13. In-store purchases are anonymous; WhatsApp and website inquiries are expected to be made by adults. We do not have any services or marketing directed at minors.

We do not collect sensitive personal data as defined in LGPD Art. 5º, II. As a retailer of new auto parts, we note:

Vehicle identification data (make, model, year) provided for parts inquiries via WhatsApp is used only to identify the correct part — it is not retained beyond the inquiry period and is not used for any other purpose.

This Policy may be updated to reflect changes in our activities, the LGPD, ANPD guidance, CONTRAN regulations or applicable tax legislation in São Paulo. Material changes will be communicated via our website or in-store notice.

All privacy requests, questions and complaints should be directed to our Data Protection Officer (Encarregado — LGPD Art. 41). You may also raise requests in person at our store: