Privacy Policy
Last updated: July 2026 · Compliant with Lei 13.709/2018 (LGPD)
This Privacy Policy describes how .TBF. INC (CNPJ 61.360.565/0001-74), the controller of personal data, collects, uses, stores and protects your personal information when you access our digital properties, including thebrfactory.com and associated label domains.
We are committed to protecting your privacy in accordance with the Lei Geral de Proteção de Dados (LGPD, Lei 13.709/2018) and other applicable data protection laws.
1. Data We Collect
We may collect the following categories of personal data: (a) Identity data: name, email address, when voluntarily provided via contact forms or newsletter subscriptions; (b) Usage data: browser type, pages visited, time on page and referring URLs, collected through privacy-first analytics only where you have consented; (c) Communications: content of messages you send us via email or contact forms.
We do not collect sensitive personal data (as defined under LGPD art. 5, II) without your explicit consent.
2. Legal Basis for Processing (LGPD art. 7)
We process your personal data on the following legal bases: (a) Consent: when you subscribe to our newsletter, submit a contact form, or enable analytics cookies; (b) Legitimate interest: for site performance, security and fraud prevention; (c) Legal obligation: when required by applicable Brazilian law.
3. How We Use Your Data
We use your data to: operate and improve our digital properties; send newsletters or communications you have requested; respond to your inquiries; comply with legal obligations; and analyze traffic and user behavior to improve the experience of our platforms.
We do not sell, rent or trade your personal data to third parties for marketing purposes.
4. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law. Newsletter subscriber data is retained until you unsubscribe. Aggregated analytics data is retained for a limited period, in line with our analytics provider's retention policy.
5. Your Rights Under LGPD
Under the LGPD (art. 18), you have the right to: confirm the existence of processing; access your data; correct incomplete or inaccurate data; request anonymization, blocking or deletion of unnecessary data; obtain information about third parties with whom your data has been shared; revoke consent at any time; and lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD).
To exercise any of these rights, contact us at privacidade@thebrfactory.com.
6. Cookies
We use two categories of cookies and similar technologies. Essential cookies are required for site functionality and are always active. Analytics cookies, provided by Vercel, are privacy-first and load only after you consent; they help us understand aggregate site usage without profiling you or tracking you across other sites. We do not use advertising or marketing cookies. You can accept, reject or change your choice at any time via the Cookie Preferences link in the footer, or by adjusting your browser settings.
7. Third-Party Services
We use the following third-party services which may process your data: Vercel (hosting, CDN and privacy-first, cookieless analytics via Vercel Analytics and Speed Insights), Resend (transactional email), Brevo (newsletter delivery and mailing-list management), and Sanity (content management). Each service operates under its own privacy policy. We ensure that all data processors provide adequate levels of data protection.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration or destruction. Our platforms use HTTPS encryption and are hosted on infrastructure that maintains high security standards.
9. International Transfers
Some of our service providers operate outside Brazil. In such cases, we ensure that data transfers comply with LGPD requirements for international transfers, including ensuring that the destination country provides an adequate level of data protection or that appropriate contractual safeguards are in place.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by updating the date at the top of this page. Continued use of our services after changes are posted constitutes your acceptance of the updated policy.
11. Contact & Data Controller
For privacy inquiries, data subject requests or to contact our Data Protection Officer:
.TBF. INC · CNPJ 61.360.565/0001-74
R. Pamplona, 145. Jardim Paulista
São Paulo, SP. 01405-100 · Brasil
