Bora Brasil Group Privacy Notice
1. About this Privacy Notice
This notice explains clearly how Grupo Bora Brasil collects, uses and protects the personal data of people who visit our websites. When we refer to Grupo Bora Brasil, we mean all companies directly or indirectly controlled by Platina Cosméticos S.A (CNPJ 66.288.002/0001-36).
2. What personal data we collect
To provide our products and services, we may process the following types of data:
- Registration data, such as name, CPF (Brazilian individual taxpayer ID), address and other identification information.
- Communication data, such as email address, IP address and pages visited.
- Information about your interactions with Grupo Bora Brasil, such as purchases and participation in promotions, surveys and events.
- Data provided during recruitment processes.
- Information submitted through forms such as Contact Us, Customer Service, the Integrity Channel, or when contacting our Data Protection Officer (dpo@skala.com.br).
- With your consent, we may process sensitive data such as racial or ethnic origin. We may collect information about your hair type and skin type when we ask for details to recommend the product best suited to you.
3. Why we use your data
We use your data to:
- Process purchase orders and payments.
- Provide updates on order status.
- Respond to questions, requests and complaints.
- Offer personalized products and offers.
- Organize promotions, surveys and events.
- Improve our products and services.
- Assess candidate profiles in recruitment processes.
We also process data to comply with legal obligations, perform contracts, protect our rights, prevent fraud and ensure the security of our systems.
4. How we use cookies on Grupo Bora Brasil websites
To make your experience more personalized and efficient, we use cookies on our websites.
We use strictly necessary cookies, on the legal basis of legitimate interest. These cookies cannot be disabled in our systems. They enable features that are essential to providing our services, such as security, identity verification and network management.
You can block these cookies directly in your browser, but this may affect the website’s performance and functionality.
5. How we store your personal data
Your data is stored securely, in line with appropriate technical and legal standards. We also make sure that you can exercise your rights under the LGPD (Brazilian General Data Protection Law) simply and effectively.
6. Who we may share your personal data with
To provide quality products and services, we may share your data with:
- Grupo Bora Brasil companies, service providers and business partners (for example, in logistics, payments, marketing and security).
- Judicial or government authorities, when necessary.
- Other parties in the event of corporate changes, such as mergers or acquisitions.
- Other parties when required by law, court order or an investigation into possible offenses.
Whenever we share your data with third parties, we require them to follow our instructions, keep the data secure and not pass it on without our authorization.
7. How we delete your personal data
Your data will be deleted once it is no longer needed for the purposes for which it was collected, in accordance with legal retention periods and the LGPD rules on data retention and disposal.
8. How we protect your personal data
We take technical and organizational measures to protect your data against unauthorized access, leaks and any misuse, in accordance with the LGPD and the guidelines of regulatory authorities.
9. Your rights as a data subject
The LGPD grants you several rights, including the right to:
- Know whether your data is being processed.
- Access, correct or delete your data.
- Block or anonymize excessive or unnecessary data.
- Withdraw your consent and understand the consequences of doing so.
- Request a review of automated decisions.
- Know who your data has been shared with.
To exercise your rights, send an email to: dpo@skala.com.br. This service is free of charge, and we will do our best to respond within 15 (fifteen) days. If we cannot respond right away, we will explain why and tell you when to expect a response.
10. International data transfers
In some cases, your data may be transferred to other countries, for example when we use technology services that operate outside Brazil. Whenever this happens, Grupo Bora Brasil ensures that your data is protected as required by the LGPD. We do this through measures such as contracts with specific security clauses, certifications or other safeguards that ensure an adequate level of protection.
11. Data Protection Officer contact
Grupo Bora Brasil’s Data Protection Officer is the law firm GIGLIO SILVA SOCIEDADE INDIVIDUAL DE ADVOCACIA, represented by its partner Geyson Bruno Giglio Silva. If the Data Protection Officer is absent, unable to act or the position is vacant, the duties will be taken on by the alternate, Tiana Di Lorenzo Alho. You can contact the Data Protection Officer by email at: dpo@skala.com.br.