Privacy Policy

1. General Information

Diretha Com de Ferramentas e Assessoria Tecnica Ltda, registered under Tax ID No. 64.556.186/0001-42, headquartered at Rua Lord Cockrane, 616 - Rooms 406/407, Ipiranga, São Paulo - SP, ZIP 04213-001, is committed to protecting the personal data of its customers and website visitors, in compliance with the Brazilian General Data Protection Law (LGPD - Law No. 13.709/2018).

This Privacy Policy describes how we collect, use, store, and protect your personal information in the context of wholesale hardware and tools trade and technical consulting services.

2. Data Collected

We may collect the following information:

• Identification data: Full name, Tax ID (CPF), Company Tax ID (CNPJ), company name
• Contact data: Email, phone number, commercial address
• Business data: Company information, industry sector, business needs
• Purchase data: Product orders, purchase history, volume requirements
• Technical data: Technical requirements, project specifications
• Payment data: Information necessary for transaction processing
• Browsing data: IP address, browser type, pages visited
• Contractual data: Wholesale agreements, consulting contracts

3. Purpose of Data Processing

The collected data is used to:

• Provide wholesale hardware and tools trade services
• Process wholesale orders
• Provide technical consulting services
• Manage business relationships
• Coordinate logistics and delivery
• Process payments
• Issue invoices and receipts
• Provide customer service
• Send product updates and information (with consent)
• Comply with legal and fiscal obligations
• Improve our products and services

4. Legal Basis for Processing

Data processing is performed based on:

• Consent: When you expressly authorize the use of your data
• Contract execution: To fulfill wholesale and consulting contracts
• Legal obligation: To comply with fiscal and commercial obligations
• Legitimate interest: For business relationship management and commercial operations

5. Data Sharing

Diretha does not sell or commercialize personal data. We may share data only with:

• Suppliers: For product procurement coordination
• Manufacturers: For wholesale supply chain management
• Logistics companies: For delivery coordination
• Payment processors: For transaction processing
• Service providers: Wholesale management systems, accounting
• Tax authorities: To comply with tax obligations
• Legal authorities: When required by law or court order

6. Data Security

We implement technical and organizational measures to protect your data:

• Encryption of payment and business data
• Access controls to customer and business information
• Secure wholesale management systems
• Confidentiality agreements
• Security system monitoring
• Regular backups and secure storage
• Employee training on data protection
• Periodic security audits

7. Your Rights as Data Subject

Under LGPD, you have the following rights:

• Confirmation and access: Confirm the existence of processing and access your data
• Correction: Request correction of incomplete, inaccurate, or outdated data
• Anonymization, blocking, or deletion: Request removal of unnecessary data
• Portability: Request data portability
• Deletion: Request deletion of data processed with consent
• Information: Obtain information about data sharing
• Revocation: Revoke consent at any time
• Opposition: Object to the processing performed

8. Cookies and Similar Technologies

We use cookies to improve your browsing experience. You can configure your browser to refuse cookies.

9. Data Retention

We retain your data for the time necessary to:

• Fulfill the purposes described in this policy
• Duration of business relationship and contracts
• Wholesale records: for commercial and warranty purposes
• Legal prescription periods (generally 5 years for fiscal purposes)
• Commercial obligations
• Exercise of legal rights

After these periods, data will be securely deleted or anonymized.

10. International Data Transfer

Your data is stored and processed in Brazil. We do not perform international data transfers.

11. Minors

Our services are intended for legal entities and professionals over 18 years of age. We do not intentionally collect data from minors.

12. Changes to This Policy

This Policy may be updated periodically. Significant changes will be communicated by email or website notice.

13. Data Protection Officer (DPO)

We have appointed a Data Protection Officer responsible for ensuring LGPD compliance.

14. Contact

To exercise your rights or clarify questions:

We will respond to your requests within 15 calendar days, extendable by another 15 days with justification.

15. Applicable Law and Jurisdiction

This Policy is governed by the laws of the Federative Republic of Brazil, especially Law No. 13.709/2018 (LGPD). The jurisdiction of São Paulo/SP is elected to resolve any disputes.

Last updated: December 2025