Privacy Policy.

This Policy applies to all personal data processed by our retail business — including customers who purchase from us in-store or via WhatsApp, website visitors and anyone whose data is processed in connection with our food retail activities. As an ice cream and beverage retail shop, most of our transactions are cash or card purchases with anonymous customers. This Policy covers the limited personal data we do collect in specific situations.

• NF-e with CPF (when requested by customer): Where a customer requests the NF-e to be issued with their CPF for tax purposes (e.g. CPF na nota gaúcha / nota fiscal paulista equivalent programmes), we collect and process the CPF solely for that fiscal purpose. This is always at the customer's request, never mandatory.
• WhatsApp order data: Where customers place orders for larger quantities (e.g. events) via WhatsApp — name, phone number and order details. Used only to fulfil the order.
• Contact and enquiry data: Name, phone and message when submitting enquiries via our website form or WhatsApp.
• Technical website data: IP address, browser type, pages visited and access times.

• SEFAZ-RS / Receita Federal: Tax data transmitted with NF-e issuance — in compliance with SEFAZ-RS electronic invoice requirements and applicable federal tax legislation.
• PROCON-RS: When required in a consumer dispute mediation under the CDC — Rio Grande do Sul consumer protection authority.
• Legal authorities: When required by a competent judicial or administrative order.

We do not share customer data for marketing, advertising or profiling purposes. WhatsApp order data is used only to fulfil the specific order.

Our retail operations are in Campo Bom, RS. All data is stored in Brazil. Any technology platforms used for our website or WhatsApp communications that operate on international servers do so under the guarantees of Art. 33 of the LGPD or recognised adequacy mechanisms.

• NF-e and fiscal records (SEFAZ-RS): Minimum 5 years under federal and state tax legislation (CTN, Art. 174; SEFAZ-RS).
• WhatsApp order records: Deleted after order fulfilment and any applicable consumer dispute period — typically no longer than 90 days unless a dispute arises.
• Contact and enquiry data: Up to 1 year from last contact, if no ongoing relationship arises.
• Website analytics: Aggregated and anonymised after 12 months.

• In-store payment terminals are PCI-DSS certified — card data is never retained by us;
• CPF data collected for NF-e purposes is used only for that transaction and transmitted securely to SEFAZ-RS;
• WhatsApp order data retained only for order fulfilment and promptly deleted;
• Website encrypted in transit (HTTPS);
• As a Ltda, formal internal data handling protocols maintained;
• Incident response procedures and breach notification per LGPD Art. 48.

• Confirmation and Access (Art. 18, I–II): Confirm whether we hold your data — note that most purchases are anonymous and no personal data is retained.
• Correction (Art. 18, III): Request correction of inaccurate data.
• Anonymisation / Blocking / Deletion (Art. 18, IV): Request deletion — subject to fiscal retention requirements for NF-e records.
• Portability (Art. 18, V): Receive your data in a structured format.
• Deletion of consent-based data (Art. 18, VI): Request deletion of data processed by consent.
• Information on sharing (Art. 18, VII): Find out which entities your data was shared with.
• Withdrawal of Consent (Art. 8º, §5º): Withdraw consent at any time.
• Complaint to the ANPD (Art. 18, §1º): Lodge a complaint at www.gov.br/anpd.

We respond within 15 business days. You may also reach us in person at Rua Paulista, 317, Campo Bom, RS.

Our website may use cookies for essential functionality and aggregated performance analysis. We do not use behavioural tracking or advertising cookies. Preferences can be managed through browser settings.

Our products — ice cream, beverages and snacks — are enjoyed by customers of all ages including children. However, we do not collect personal data from children under 13. In-store purchases are anonymous; WhatsApp orders are placed by adults. We are mindful that our retail environment serves families and children and do not engage in any data collection activities that could affect minors.

We do not collect sensitive personal data as defined in LGPD Art. 5º, II. As a food retail business, we note:

Our products are labelled in accordance with ANVISA food labelling requirements. Customers are encouraged to read product labels for allergen, nutritional and ingredient information.

This Policy may be updated to reflect changes in our activities, the LGPD, ANPD guidance or applicable tax legislation in Rio Grande do Sul. Material changes will be communicated via our website or in-store notice.

All privacy requests, questions and complaints should be directed to our Data Protection Officer (Encarregado — LGPD Art. 41). You may also speak with us in person at our shop: