Privacy Policy

1. Data controller

The party responsible for processing your personal data in this context is the online store identified as GGFINITY, operated through this e-commerce platform.

For questions about this policy or to exercise your rights, you may contact us by email: contato@ggfinity.com.

When required by law or for contractual performance, other contact channels (such as a physical address or phone number) may be listed on the store’s institutional pages or on the purchase receipt.

2. What data we collect

Depending on how you interact with us, we may process the following categories of data:

• Identification and contact data: name, email, phone (when provided in signup, checkout, or support).
• Account and authentication data: session identifiers, credentials when there is an account on the platform.
• Transactional data: order history, products purchased, amounts, payment and delivery status, data needed to issue invoices when applicable.
• Payment data: information needed for the transaction (generally processed directly by payment providers; we do not store full card numbers when processing is tokenized by the gateway).
• Technical and usage data: IP address, browser type, device, pages visited, date and time of access, cookies, and similar technologies.
• Data provided voluntarily: messages sent through forms, chat, or email, including the content needed to provide support.

3. Purposes and legal bases (LGPD)

We process personal data for specific purposes and on the legal bases provided in the LGPD, including:

• Performance of a contract or pre-contractual steps: processing orders, payments, delivery of digital or physical products, and purchase-related support.
• Compliance with a legal or regulatory obligation: keeping tax records, responding to court orders or requests from competent authorities.
• Legitimate interest: fraud prevention, information security, improving the site experience, aggregated usage analysis (when compatible with your rights).
• Consent: when required for certain marketing communications, non-essential cookies, or other purposes for which the law requires explicit consent.

4. Data sharing

Your data may be shared only to the extent necessary for the purposes described, with:

• Payment providers and financial institutions involved in the transaction;
• The store’s hosting and operations platform (including cloud e-commerce services), under contractual confidentiality and security obligations;
• Delivery service providers, when applicable to the product;
• Analytics, advertising, or communication tools, when used and permitted by you or by legitimate interest, according to settings and the law;
• Public authorities, when legally required.

We do not sell your personal data to third parties for third-party marketing without an adequate legal basis and, when applicable, without your consent.

5. Storage, security, and retention

We adopt reasonable technical and organizational measures to protect data against unauthorized access, accidental loss, alteration, or improper disclosure, in line with usual e-commerce practices.

Data is kept for as long as needed to fulfill the purposes for which it was collected, including to protect rights in administrative or court proceedings, and for the period required by law (for example, tax and accounting obligations). After that period, it may be anonymized or securely deleted, except where the law requires additional retention.

6. Cookies and similar technologies

We use cookies and similar technologies for site operation (for example, session, shopping cart), security, and, when applicable, to understand site usage or personalize content. You can manage cookie preferences in your browser; disabling essential cookies may affect how parts of the site work.

7. Your rights (data subject)

Under the LGPD, you may request, as applicable:

• Confirmation that processing exists and access to the data;
• Correction of incomplete, inaccurate, or outdated data;
• Anonymization, blocking, or deletion of unnecessary data or data processed in violation of the law;
• Portability of the data to another service provider, subject to the national authority’s regulations;
• Deletion of data processed with consent, when applicable;
• Information about public and private entities with which we share data;
• Information about the option not to give consent and about the consequences of refusal;
• Withdrawal of consent, when processing is based on it.

To exercise these rights, use this contact: contato@ggfinity.com. We will respond within the legal deadline and may request information to confirm your identity.

You may also file a complaint with the Brazilian National Data Protection Authority (ANPD), according to the rules in force.

8. Minors

Our services are aimed at the general public. Intentional collection of data from people under 18 without adequate consent from the legal guardian, when required by law, is not allowed. If we learn that we collected a minor’s data without an adequate legal basis, we will take steps to delete that information.

9. International transfers

Some of our technology or payment providers may process data on servers located outside Brazil. In those cases, we seek safeguards compatible with the LGPD, such as standard contractual clauses or adequacy decisions, as applicable.

10. Changes to this policy

We may update this Privacy Policy to reflect changes in the law, in the services, or in data-processing practices. The last-updated date will be shown at the beginning of the document. We recommend reviewing this page periodically. Material changes may be communicated through additional means (for example, a notice on the site or by email), when appropriate.

11. Contact

Questions about this Privacy Policy or about how GGFINITY processes your data may be sent through the store’s official channels.

Email: contato@ggfinity.com