Privacy Policy

1. Purpose

This Privacy Policy describes how Maria Carolina Carita Gobel Furtado (referred to below as "we", "us" or "our business") handles personal data collected through this website and through the direct communication channels used to process orders and answer enquiries. This policy is aligned with the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados — Law No. 13.709/2018, "LGPD").

2. What data we collect

We collect only the data strictly necessary to identify the customer, prepare orders and issue tax documents. This includes:

• Full name of the customer or business representative;
• Tax identification number (CPF or CNPJ);
• Contact phone number and email address;
• Delivery address for order fulfillment;
• Order details such as basket composition, delivery date, and personal message when applicable.

3. How we use the data

Personal data is used exclusively to:

• Confirm and process the order requested by the customer;
• Coordinate delivery with the customer or with the courier service;
• Issue tax invoices (Nota Fiscal Eletrônica) as required by Brazilian law;
• Communicate with the customer about the specific order;
• Answer messages sent through our contact channels.

We do not use personal data for automated profiling, behavioral targeting or unsolicited commercial contact.

4. Data sharing

We do not sell, rent or share personal data with third parties for commercial purposes. Data may be shared only with:

• Courier and delivery services strictly to complete the customer's order;
• Tax and accounting service providers under confidentiality obligations;
• Public authorities when required by law or judicial order.

5. Data storage and security

Order records are kept in controlled environments accessible only to team members directly involved in fulfillment and administrative processing. Digital records are protected with password-controlled access. Physical delivery notes are stored in a restricted area of our business address.

We retain personal data for as long as necessary to complete the order, meet tax and accounting obligations, and comply with retention periods required by Brazilian law.

6. Rights of the data subject

Under the LGPD, customers may request at any time:

• Confirmation of the existence of processing of their data;
• Access to their personal data;
• Correction of incomplete, inaccurate or outdated data;
• Anonymization, blocking or deletion of unnecessary data;
• Portability of the data, when applicable;
• Information about entities with which the data has been shared.

Requests can be sent to contato@carolcestas.com and will be answered within the legal timeframe.

7. Cookies

This website uses only technical cookies strictly required for navigation. We do not use tracking cookies, behavioral advertising cookies or third-party marketing pixels on this institutional website.

8. Changes to this policy

This policy may be reviewed periodically. The most current version will always be available on this page with the corresponding last update date. We recommend consulting it regularly.

9. Contact

For any question regarding this Privacy Policy or the handling of personal data, please contact: