FORBIX TECHNOLOGY

Privacy Policy

Transparency and security in the processing of your personal data, in compliance with LGPD (Law No. 13,709/2018).

Last updated: April 06, 2025

1. Introduction

FORBIX TECNOLOGIA LTDA ("FORBIX", "we" or "our"), headquartered in Brazil, is committed to protecting the privacy and personal data of its customers, users and visitors. This Privacy Policy describes how we collect, use, store, share and protect your personal information, in compliance with the Brazilian General Data Protection Law (LGPD – Law No. 13,709/2018) and other applicable legislation.

By accessing our website or using our services, you agree to the terms of this Privacy Policy. We recommend that you read this document carefully and contact us if you have any questions.

2. Data We Collect

We collect different types of information to provide and improve our services:

2.1 Data provided directly by you:

Full name and identification data
Email address and phone number
Company name and tax ID
Job title and area of activity
Information entered in contact, demo or support forms

2.2 Automatically collected data:

IP address and approximate geographic location
Device type, browser and operating system
Pages visited, time spent and clicks
Cookie data and similar tracking technologies

2.3 System usage data:

Access and activity logs on the FORBIX platform
User settings and preferences
System performance and diagnostic data

3. Purpose of Processing

We use your personal data for the following purposes:

Service provision: Operate, maintain and improve our retail management platform
Communication: Respond to requests, send product information, updates and technical support
Marketing: Send relevant commercial communications, with the option to unsubscribe at any time
Security: Detect, investigate and prevent fraud, abuse and unauthorized activities
Legal compliance: Meet legal, regulatory and contractual obligations
Continuous improvement: Analyze platform usage to improve features and user experience
Billing: Process payments and manage contracts

The processing of your data is carried out based on the following legal bases provided by the LGPD: consent, contract execution, compliance with legal obligation, legitimate interest and credit protection.

4. Data Sharing

FORBIX does not sell, rent or trade your personal data. We may share your information in the following situations:

Technology partners: Cloud infrastructure providers, analytics tools and communication platforms that assist us in providing services, always under confidentiality and data protection agreements
Commercial partners: Authorized FORBIX resellers and integrators, when necessary for contract execution
Competent authorities: When required by law, court order or applicable regulation
Rights protection: To protect the rights, property or safety of FORBIX, our customers or third parties
Corporate reorganization: In case of merger, acquisition or asset sale, with prior notice to data subjects

All third parties with whom we share data are subject to contractual data protection obligations compatible with this Policy.

5. Storage and Security

Location: Your data is stored on secure servers located in Brazil and/or in countries that offer an adequate level of data protection, as recognized by the National Data Protection Authority (ANPD).

Retention period: We keep your data for as long as necessary to fulfill the purposes described in this Policy, or as required by law. Active customer data is kept during the term of the contract and for up to 5 (five) years after termination, for legal compliance purposes.

Security measures: We adopt technical and organizational measures to protect your data against unauthorized access, loss, destruction or improper disclosure, including:

Data encryption in transit (TLS/SSL) and at rest
Role-based access control (RBAC)
Continuous security monitoring and audit logs
Regular backups and disaster recovery plan
Periodic team training in information security

6. Your Rights as a Data Subject

In accordance with the LGPD, you have the following rights regarding your personal data:

Confirmation and access: Confirm the existence of processing and access your data
Correction: Request correction of incomplete, inaccurate or outdated data
Anonymization, blocking or deletion: Request anonymization, blocking or deletion of unnecessary, excessive or non-compliant data
Portability: Request portability of your data to another service provider
Deletion: Request deletion of data processed based on consent
Information: Obtain information about public and private entities with whom we share your data
Consent withdrawal: Withdraw consent at any time, without prejudice to the lawfulness of processing carried out previously
Opposition: Object to processing carried out on other legal bases, in case of non-compliance with the LGPD

To exercise your rights, contact our Data Protection Officer (DPO) at: [email protected]. We will respond to requests within 15 (fifteen) business days.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience on our website:

Essential cookies: Necessary for the basic functioning of the website and cannot be disabled.

Performance cookies: Collect information about how visitors use the website (e.g.: Google Analytics), helping us improve content and navigation. All data is anonymized.

Functionality cookies: Allow the website to remember your preferences, such as selected language.

Marketing cookies: Used to display relevant ads on third-party platforms. You can opt out of these cookies.

You can manage your cookie preferences at any time through your browser settings. Note that disabling some cookies may affect website functionality.

8. Protection of Minors

Our services are intended exclusively for adult companies and professionals. We do not intentionally collect personal data from individuals under 18 (eighteen) years of age. If we become aware that we have collected data from a minor without appropriate consent, we will take immediate steps to delete that information.

9. International Data Transfer

Some of our technology providers are located outside Brazil. When we carry out international data transfers, we ensure that:

The destination country offers an adequate level of data protection, as recognized by the ANPD; or
Standard contractual data protection clauses exist; or
The data subject has provided specific consent for the international transfer.

We may currently transfer data to servers located in the United States and the European Union, both with adequate protection mechanisms.

10. Updates to this Policy

This Privacy Policy may be updated periodically to reflect changes in our practices, applicable legislation or our services. When we make relevant changes, we will notify you by email or by a prominent notice on our website.

The date of the last update is indicated at the top of this page. We recommend that you review this Policy periodically to stay informed about how we protect your data.

11. Contact and Data Protection Officer (DPO)

To exercise your rights, clarify doubts or file complaints related to the processing of your personal data, contact our Data Protection Officer:

FORBIX TECNOLOGIA LTDA

Data Protection Officer (DPO)

Email: [email protected]

Phone: +55 (11) 99999-9999

You can also file complaints with the National Data Protection Authority (ANPD) at: www.gov.br/anpd

Questions about your privacy?

Our team is ready to clarify any questions about the processing of your personal data.

[email protected]