Last updated: July 2026
The data controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection laws is:
Natureza Delicada Comercio de Roupas Ltda
Barao do Bananal, 840
Jardim Anhanguera — Ribeirao Preto/SP
CEP: 14092-000
Brazil
CNPJ: 02.495.733/0001-70
Managing Director: Rosana Maria Guimaraes Mariotto
Email: [email protected]
The appointment of a data protection officer is not required pursuant to Art. 37 GDPR, as our company does not regularly employ at least 20 persons engaged in the automated processing of personal data. For any data protection inquiries, you may contact us at any time at the email address listed above.
When you visit our website, the browser on your device automatically sends the following information to our website server, which is temporarily stored in so-called server log files:
The aforementioned data is processed for the following purposes: ensuring a smooth connection to the website, ensuring comfortable use of our website, evaluating system security and stability, and for other administrative purposes.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest follows from the aforementioned purposes of data collection, in particular the security and stability of our website.
Retention period: The data is deleted as soon as it is no longer necessary for the purpose of its collection. In the case of data collected for providing the website, this is the case when the respective session has ended. Server log files are automatically deleted after 7 days at the latest.
If you send us inquiries via the contact form, your information from the inquiry form, including the contact data you provide therein, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. The following data is collected:
We will not share this data without your consent.
Legal basis: Art. 6(1)(b) GDPR (performance of pre-contractual measures taken at the request of the data subject). If your inquiry does not relate to the conclusion of a contract, Art. 6(1)(f) GDPR (legitimate interest in effectively processing inquiries directed to us) serves as the legal basis.
Retention period: The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Mandatory statutory provisions — in particular retention periods — remain unaffected.
Our website uses only technically necessary cookies. These are small text files that your browser automatically creates and stores on your device when you visit our website.
Technically necessary cookies are exempt from the consent requirement pursuant to applicable regulations, as they are strictly necessary for the operation of the website. These cookies cannot be disabled.
We do not use tracking cookies, analytics cookies, or advertising cookies without your prior express consent. Such consent is obtained, where applicable, through our cookie consent banner.
Legal basis for technically necessary cookies: Art. 6(1)(f) GDPR.
Legal basis for optional cookies: Art. 6(1)(a) GDPR (consent).
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).
Purpose: We use Google Ads Conversion Tracking to measure the effectiveness of our advertising campaigns. When you click on an ad served by Google, a conversion tracking cookie is stored on your device. These cookies expire after 30 days and are not used for personal identification.
If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to that page. Each Google Ads customer receives a different cookie. The information obtained through conversion cookies is used to compile conversion statistics for Ads customers who have opted for conversion tracking.
Legal basis: Art. 6(1)(a) GDPR (consent). The conversion tracking cookie is only set if you have given your consent via our cookie consent banner. You may revoke your consent at any time with effect for the future.
Data transfers to third countries: Google may transfer collected data to the United States. The transfer is based on the EU-US Data Privacy Framework (DPF). For more information, please see Google’s privacy policy: https://policies.google.com/privacy.
If a payment obligation arises after the conclusion of a contract, we use an external payment service provider for payment processing. Your payment data (e.g., credit card number, bank details) is transmitted directly to and processed by the payment service provider.
We do not store complete credit card or bank data on our servers at any time. We only receive confirmation from the payment service provider regarding the success or failure of the payment, as well as a transaction ID for reference purposes where applicable.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract). The processing of payment data is necessary for the performance of the contract concluded between you and us.
As our company is headquartered in Brazil, personal data is transferred to a third country. Brazil is a third country outside the European Union. The transfer of personal data to Brazil is carried out on the basis of Art. 49(1)(a) GDPR (explicit consent) or Art. 49(1)(b) GDPR (performance of a contract). Brazil has its own data protection law, the Lei Geral de Proteção de Dados (LGPD).
Safeguards: Where personal data is transferred to recipients in third countries that are not covered by a DPF adequacy decision, we ensure through appropriate safeguards that the rights of the data subjects are adequately protected. To this end, we enter into EU Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.
In exceptional cases, the transfer may be based on your explicit consent pursuant to Art. 49(1)(a) GDPR. In such cases, you will be informed of the potential risks prior to the transfer.
You have the following rights with respect to your personal data vis-à-vis the data controller:
To exercise your rights, please contact us by email at: [email protected]. We will process your request without undue delay and in any event within one month.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR if you believe that the processing of your personal data violates the GDPR.
You may exercise this right with a supervisory authority in the member state of your habitual residence, your place of work, or the place of the alleged infringement. A list of data protection supervisory authorities in Europe can be found at: https://www.bfdi.bund.de.
We reserve the right to amend this privacy policy to adapt it to changed legal requirements or to changes in our services or data processing. This applies, however, only with regard to statements on data processing. If consent is required or if components of the privacy policy contain provisions governing the contractual relationship with users, changes will only be made with the consent of the users.
The current version is always available on this page. Please check the content of our privacy policy regularly.
Last updated: July 2026