Privacy Policy (LGPD)
Last updated: July 2026
1. Who we are
Passos Consultoria Oficial (www.passosconsultoriaoficial.com.br) is the controller of personal data processed on this sales, rental and logistics website, under the Brazilian General Data Protection Law — LGPD (Law 13,709/2018).
2. Data we collect
Registration: name, e-mail, CPF or CNPJ (validated by check digit only — we never query public CPF databases), phone and delivery address. Browsing: preferred language and cart, stored in your own browser (localStorage). Transactions: orders, rentals, chosen payments and tracking.
3. Purpose and legal basis
We process data to perform purchase and rental contracts (Art. 7, V), to comply with legal and tax obligations (Art. 7, II) and, with your consent (Art. 7, I), to send offers. Your acceptance of this policy is recorded with date and time.
4. Cookies and local storage
We only use essential cookies: authenticated session (httpOnly), language (NEXT_LOCALE) and LGPD consent. Cart and language live in localStorage on your device. No third-party tracking cookies without consent.
5. Security
Passwords hashed with bcrypt; cryptographically signed sessions (JWT HS256) in httpOnly cookies; TLS; security headers (CSP, HSTS, X-Frame-Options); rate limiting; and an audit trail of sensitive actions.
6. Sharing
We share data only with processors required to deliver the service: carriers (delivery and reverse logistics), payment providers and BrasilAPI for CNPJ validation. We never sell personal data.
7. Your rights (Art. 18)
At any time you may request: confirmation of processing, access, correction, anonymization, portability, deletion and information on sharing, and withdraw consent. Contact our DPO at passosconsultoriaoficial@gmail.com.
8. Retention
Transaction data is kept for the applicable legal and tax periods; registration data while your account is active. After that, data is deleted or anonymized.