Last updated: May 7, 2026
Sulpeças (“Sulpeças”, “we”, “us”, or “our”) respects the privacy of its users and customers and operates in compliance with the General Data Protection Law (LGPD – Law No. 13,709/2018) and other applicable regulations.
This Privacy Policy clearly explains how we collect, use, store, share, and protect the personal data of subjects who interact with our website https://sulpecas.com/, our service channels, and our commercial services.
By accessing our website or hiring our services, you declare that you have read, understood, and agree to the terms described below.
1. Important Definitions
To facilitate the understanding of this document, consider the following definitions provided for in the LGPD:
- Personal data: information related to an identified or identifiable natural person.
- Data subject: the natural person to whom the personal data refers.
- Processing: any operation performed with personal data (collection, use, access, storage, sharing, deletion, among others).
- Controller: the legal entity that makes decisions regarding the processing of personal data. In this case, Sulpeças.
- Processor: the legal entity that performs the processing on behalf of the controller.
- Data Protection Officer (DPO): the person appointed by the controller to act as a communication channel between the controller, the data subjects, and the ANPD.
- ANPD: National Data Protection Authority.
2. Who is the controller of your data
The controller of the personal data collected through this website is:
- Corporate name: [INSERT FULL CORPORATE NAME]
- Trade name: Sulpeças
- CNPJ: [INSERT CNPJ]
- Address: [INSERT FULL ADDRESS]
- Contact email: [INSERT INSTITUTIONAL EMAIL]
3. What personal data we collect
We collect personal data in two ways: those you provide directly and those collected automatically during browsing.
3.1. Data provided by the subject
When you fill out forms, request a quote, make purchases, or communicate with our team, we may collect:
- Full name
- Phone or WhatsApp
- Company represented and position
- CNPJ or CPF
- Billing and delivery address
- Billing data
- Content of messages sent through service channels
3.2. Data collected automatically
During your browsing, we automatically collect technical information, such as:
- IP address
- Device type, browser, and operating system
- Pages accessed, time spent, and clicks
- Approximate location (from IP)
- Data from cookies and similar technologies
- Source of access (referrer) and search terms
4. Purposes of processing
We process personal data for the following purposes:
- Responding to questions, quotes, and requests sent through service channels
- Processing orders, issuing invoices, and making deliveries
- Maintaining commercial relationships and providing after-sales support
- Sending institutional communications, news, and offers (with consent)
- Complying with legal, regulatory, contractual, and tax obligations
- Preventing fraud and protecting the security of systems and data subjects
- Improving the browsing experience and website performance
- Performing statistical and marketing analyses in aggregate form
5. Legal bases for processing
We process personal data based on the legal grounds provided for in Article 7 of the LGPD, especially:
- Consent of the subject: for sending marketing communications and using non-essential cookies
- Execution of contract: to process orders, deliveries, and provide contracted services
- Compliance with legal or regulatory obligation: for issuing invoices, tax withholdings, and meeting authority determinations
- Legitimate interest: to maintain website security, prevent fraud, and improve user experience, always respecting the subject’s rights
- Credit protection: for analyses relevant to B2B commercial operations
6. Sharing data with third parties
Sulpeças does not sell personal data. Occasionally, we share data with partners and suppliers strictly necessary for the execution of the described purposes, always under contractual obligations of confidentiality and security:
- Technology providers: hosting, email, CRM, ERP, and service tools
- Logistics operators: carriers and the Post Office for making deliveries
- Financial operators: banking institutions, payment gateways, and anti-fraud services
- Analysis and marketing platforms: Google Analytics, tag tools, and advertising pixels
- Public authorities: upon legal, judicial, or administrative request
- Auditors and consultants: accounting, legal, and information security
7. Use of cookies and similar technologies
We use cookies and similar technologies to ensure the website’s operation, analyze navigation, and personalize the user experience. The types of cookies used include:
- Essential cookies: indispensable for the operation of the website and forms
- Performance cookies: collect anonymous information about how visitors use the website
- Functional cookies: allow remembering preferences and personalizing the experience
- Marketing cookies: used to display relevant ads on other websites
You can manage your cookie preferences at any time through the banner displayed on your first visit or in your browser settings. It is worth noting that disabling certain cookies may compromise website navigation.
8. Data retention period
We keep personal data only for the time necessary to fulfill the purposes described in this policy, observing the following criteria:
- For the duration of the contractual relationship and as long as the commercial link lasts
- For the periods required by tax, labor, and civil legislation (generally up to 10 years after the end of the relationship)
- Until the manifestation of opposition or revocation of consent, where applicable
- For the time necessary for the regular exercise of rights in judicial, administrative, or arbitration proceedings
After these periods, data is deleted or anonymized securely.
9. Information security
Sulpeças adopts technical and administrative measures to protect personal data against unauthorized access, loss, alteration, destruction, or any form of inappropriate processing, including:
- Access control based on profiles and minimum privileges
- Encryption in transit (HTTPS/TLS) and at rest, where applicable
- Continuous monitoring of systems and intrusion attempts
- Regular backups and disaster recovery plan
- Periodic team training in data protection
- Continuous evaluation of technology suppliers and partners
Despite these efforts, no information system is 100% secure. If you identify a vulnerability or suspect an incident, please contact our Data Protection Officer immediately.
10. Your rights as a subject
In accordance with Article 18 of the LGPD, you have the right to obtain, at any time and upon request:
- Confirmation of the existence of processing of your personal data
- Access to the personal data we hold about you
- Correction of incomplete, inaccurate, or outdated data
- Anonymization, blocking, or deletion of unnecessary data or data processed in non-compliance with the LGPD
- Data portability to another service or product provider
- Deletion of personal data processed based on your consent
- Information about the public and private entities with which we share your data
- Information about the possibility of not providing consent and its consequences
- Revocation of consent, at any time, upon express manifestation
- Opposition to processing carried out based on a specific legal ground
11. How to exercise your rights
To exercise any of the rights provided for in the LGPD, please contact our Data Protection Officer through the channels informed in section 12 of this policy.
To ensure data security, we may request additional information to confirm your identity before fulfilling the request. The response time follows that established by the LGPD and the ANPD.
12. Data Protection Officer (DPO)
Sulpeças has appointed a Data Protection Officer to act as a communication channel between the company, the data subjects, and the ANPD. You can contact them through the following channels:
- Officer’s name: [INSERT DPO NAME]
- Email: [INSERT DPO EMAIL, EX: dpo@sulpecas.com]
- Mailing address: [INSERT ADDRESS]
13. International data transfer
Occasionally, some of our technology partners may be located outside Brazilian territory. In these cases, we ensure that the international transfer occurs in compliance with Article 33 of the LGPD, observing protection standards equivalent to those provided for in Brazilian legislation through specific contractual clauses and internationally recognized mechanisms.
14. Processing of data of minors
The Sulpeças website is not intended for persons under 18 years of age. We do not intentionally collect personal data from children and adolescents. If you identify that a minor has provided data without the proper consent of legal guardians, please contact the Officer so that we can delete the data appropriately.
15. Changes to this Policy
This Privacy Policy may be updated periodically to reflect changes in our practices, applicable legislation, or ANPD recommendations. The most recent version will always be available on this page, with the update date indicated at the top of the document.
We recommend periodic reading of this document. In case of material changes, we will provide additional communication through the usual relationship channels.
16. Applicable legislation and jurisdiction
This Privacy Policy is governed by Brazilian legislation, in particular by the General Data Protection Law (Law No. 13,709/2018), the Internet Civil Framework (Law No. 12,965/2014), and the Consumer Defense Code (Law No. 8,078/1990), where applicable.
The jurisdiction of the district of [INSERT CITY/STATE OF HEADQUARTERS] is elected to resolve any issues arising from this policy, with express waiver of any other, however privileged it may be.
17. Contact
In case of questions about this Privacy Policy or the processing of your personal data, please contact:
- Institutional email: [INSERT EMAIL]
- Data Protection Officer: [INSERT DPO EMAIL]
- Phone: [INSERT PHONE]
- Contact page: https://sulpecas.com/contato/
Sulpeças appreciates your trust and reinforces its continuous commitment to transparency, information security, and the protection of the personal data of its customers, partners, and visitors.