PRIVACY POLICY.

This Policy applies to all personal data processed by our industrial printing company — including business clients who commission print jobs, the responsible contacts at those businesses, website visitors and anyone whose data is processed in connection with our printing activities. Our services are primarily B2B — we work with companies and businesses requiring industrial print production.

• Client identification data: Company name, CNPJ and the name, role, phone and email of the responsible contact — collected when businesses commission print jobs or request quotations.
• Print job specification data: Technical specifications, files, artwork, design data and print-ready materials provided by the client for the production of their job. This data is used exclusively for the commissioned print job and treated as confidential.
• Billing data: Name and CNPJ for NF-e issuance — in compliance with SEFAZ-SP and applicable Limeira municipal tax requirements.
• Contact and enquiry data: Messages via WhatsApp, telephone or online form.
• Technical website data: IP address, browser type, pages visited and access times.

• SEFAZ-SP / Receita Federal: Tax data for NF-e issuance and applicable federal and state tax compliance.
• Prefeitura de Limeira (ISS): For ISS/ISSQN obligations on printing service activities where applicable.
• PROCON-SP: When required in a consumer dispute mediation under the CDC.
• Legal authorities: When required by a competent judicial or administrative order.

Print job files, artwork and client specifications are never shared with third parties. Client technical data is used exclusively for the commissioned job.

Our printing operations are in Limeira, SP. All client and job data is stored in Brazil. Any technology platforms for communication or file management that operate on international servers do so only under the guarantees of Art. 33 of the LGPD or recognised adequacy mechanisms.

• NF-e and fiscal records: Minimum 5 years under federal and state tax legislation (CTN, Art. 174; SEFAZ-SP).
• Client contract and order records: 5 years from job completion — for fiscal, contractual and quality dispute documentation.
• Print job files and artwork (client-provided): Retained for a reasonable period after job completion to enable reprints or corrections — typically 1 year unless the client requests deletion or longer retention. Clients are advised to maintain their own master files.
• Contact and enquiry data (no order placed): Up to 1 year from last interaction.
• Website analytics: Aggregated and anonymised after 12 months.

• Client print files and artwork accessible only to production staff directly involved in the commissioned job;
• Files deleted from active production systems after job completion in accordance with the retention policy;
• WhatsApp and email communications handled with discretion;
• Encryption in transit (HTTPS) for website and digital file transfers;
• PCI-DSS certified payment terminals — card data never retained;
• As a Ltda, formal internal data handling protocols maintained;
• Incident response procedures and breach notification per LGPD Art. 48.

• Confirmation and Access (Art. 18, I–II): Confirm whether we hold your data and receive a copy.
• Correction (Art. 18, III): Request correction of inaccurate data.
• Anonymisation / Blocking / Deletion (Art. 18, IV): Request restriction or deletion — subject to fiscal and order record retention obligations.
• Portability (Art. 18, V): Receive your data in a structured format.
• Deletion of consent-based data (Art. 18, VI): Request deletion of data processed by consent.
• Information on sharing (Art. 18, VII): Find out which entities your data has been shared with.
• Withdrawal of Consent (Art. 8º, §5º): Withdraw consent at any time.
• Complaint to the ANPD (Art. 18, §1º): Lodge a complaint at www.gov.br/anpd.

We respond within 15 business days.

Our website may use cookies for essential functionality and aggregated performance analysis. We do not use behavioural tracking cookies for advertising without prior consent. Preferences can be managed through browser settings.

Our industrial printing services are engaged by businesses — adults acting in a professional capacity. We do not intentionally collect personal data from children under 13. All orders are placed by adults legally authorised to represent the commissioning organisation.

In the ordinary course of industrial print production, we do not collect sensitive personal data as defined in LGPD Art. 5º, II. Client print files and artwork may contain commercial designs, proprietary patterns, product specifications or other commercially sensitive information.

This Policy may be updated to reflect changes in our activities, the LGPD, ANPD guidance or applicable tax legislation. Material changes will be communicated via our website or directly to active clients by WhatsApp or email.

All privacy requests, questions and complaints should be directed to our Data Protection Officer (Encarregado — LGPD Art. 41):