Privacy Policy
Last updated: May 2026 · In compliance with the LGPD (Law 13.709/2018)
1. Data we collect
We collect the personal data needed to process your orders: name, email, phone, CPF/CNPJ, and delivery address. We also record browsing data (analytics cookies) to improve your experience on the site, subject to your consent.
2. How we use your data
- Process and deliver your orders
- Issue invoices and tax documents
- Send updates about your order by email
- Improve our products and services (aggregated analytics data)
3. Data sharing
Your data is shared only with partners essential to delivering our services: carriers (delivery address), Mercado Pago (payment data), and Resend (transactional email delivery). We do not sell personal data to third parties.
4. Your rights (LGPD)
You have the right to: access, correct, delete, or port your data; withdraw consent; and request information about how it is processed. To exercise your rights, contact us by email at vendas@alpharf.com.br.
Delete your account: you can delete your account at any time under My account → My data → Delete account. We remove your access and your personal data (name, phone, CPF/CNPJ, addresses, message history). Orders already placed remain on record, without your personal data, for 5 years, to comply with tax and accounting obligations (invoices, payment reconciliation). Orders in progress must be completed or canceled before deletion.
5. Cookies
We use essential cookies (session, cart) and analytics cookies (optional, subject to consent). You can manage your preferences at any time by clicking “Manage cookies” in the footer.
6. Security
Your data is stored encrypted and transmitted over HTTPS. Passwords are stored with irreversible hashing (scrypt). We apply strict access controls across all systems.
7. Contact
Privacy questions: vendas@alpharf.com.br

