Privacy Policy

Data Controller

Mombora Indústria e Comércio de Alimentos Ltda. ("Mombora"), registered under CNPJ No. 39.745.068/0001-35, with a business address at Rua Capote Valente, No. 275, Pinheiros, in the city of São Paulo, State of São Paulo, ZIP Code 05.409-000.

Objective

This Privacy Policy aims to demonstrate the careful manner in which Mombora, as a data processing agent, uses, stores, and processes data received from its customers, both in online and offline environments, in accordance with Law No. 13.709, dated August 14, 2018 ("LGPD") and Decree No. 7.962, dated March 15, 2013.

As per LGPD, it is the data controller's responsibility to demonstrate a commitment to adopting processes and internal policies that ensure compliance with data protection. Thus, we guarantee that our customers only need to provide data for a specific and transparent purpose.

Consent and Modifications

Consent, according to LGPD, is the free, informed, and unequivocal expression by which the user agrees to the processing of their personal data for a specific purpose.

The Privacy Policy will always be updated and available to visitors of Mombora's e-commerce platform, subject to modifications for improvements. By browsing our website, you freely, knowingly, unequivocally, expressly, and fully express your agreement with this Privacy Policy. Therefore, we recommend careful reading and make ourselves available to clarify any doubts.

Data Used

Mombora's primary goal in data collection is to ensure the best service and effectiveness in product acquisition operations. Mombora may collect information actively entered by the customer during their registration on the website, such as full name, email, gender, date of birth, and address.

Mombora will use such information solely for the purpose of: (i) advertising material disclosure; (ii) sending promotional actions; (iii) loyalty programs; (iv) satisfaction surveys; and, in particular, (v) data for product delivery.

Cookies will be used by Mombora, as detailed in the next section. It is the sole responsibility of customers to provide only correct, true, authentic, complete, and up-to-date information, as well as to ensure the confidentiality of their login and password, not disclosing it to third parties.

Even indirectly, the following will be collected: (i) information about the device used for browsing, including IP address; (ii) products and categories searched or viewed; (iii) view counts; and (iv) pages visited on other sites.

Cookies

Definition and Applicability

"Cookies" are small files and/or information related to the use of the site, stored on customers' electronic devices when the user visits a webpage.

Esta Política de Privacidade tem como intuito informar os usuários, com transparência e clareza, sobre as diversas maneiras de utilização das suas informações pessoais através dos cookies presentes em nosso site, possibilitando um maior controle sobre seus dados pessoais no momento de interação.

Objectives

The objective of the guidelines for using cookies on this site is to ensure and reinforce the company's commitment to applicable normative provisions, as well as to enable transparent interaction between users and Mombora.

The purpose of using cookies, in addition to compiling information about site usage, is to ensure that the user receives content of greater relevance and interest.

Revocation

At any time, the user may revoke their consent regarding cookies by deleting cookies using their browser settings, as applicable.

Data Security

Mombora will store the information collected on its e-commerce platform on its own servers or on third-party servers contracted by it.

To ensure the use of acceptable and legally correct means, Mombora adopts a series of protective measures, such as: (i) encrypting and anonymizing collected data; (ii) protection against unauthorized access to its systems; and (iii) maintaining an inventory indicating the moment, duration, identity of the employee or person responsible for access, and the given file, based on connection and application access records.

Personal data collected during access to our website is securely stored in our database, with access allowed only to registered employees and service providers, according to prior need to be presented.

Data processing is done through any action performed with the personal data of a data subject, from collection and storage to sharing and use. The complete cycle of personal data, therefore, begins with collection and ends with deletion or anonymization.

Considering the hypotheses provided by LGPD, the customer may request, at any time, that their data be processed differently, including submitting requests for correction and elimination of unnecessary data.

Mombora commits to discard customer data if data collection is no longer necessary for the purpose stated in this Privacy Policy.

Periodic risk monitoring of personal data security will be carried out, considering the sensitivity of its use.

Transaction

The identification process (Login and Password) is mandatory for all online purchase processes. The collection of the payment card number provided by the customer will be used solely for the authorization of purchase and/or payment transactions, being duly encrypted for customer security.

Payment card (credit or debit) numbers provided by the user are used exclusively for the purpose of authorizing purchase and/or payment transactions, being encrypted and masked according to best market practices. Under no circumstances will Mombora request password or payment card data via email or telephone contact.

Please note that Mombora is not responsible for any credit rejection at the time of purchase, and it is necessary to contact the card issuer used at the time of the purchase attempt.

Data Sharing

Remember that any information disclosed in certain areas of the Mombora website may become public information, so caution and common sense are important when posting any content.

Customer data will not be used for sharing with third parties unless for the purposes stated here. Mombora may share data with third parties upon a court order or request from the National Data Protection Authority (ANPD), the Public Prosecutor's Office, police or administrative authorities, or in compliance with applicable regulations.

User Rights

Mombora, aware of its customers' rights and in compliance with applicable regulations, guarantees the following rights: (i) confirmation of the existence of processing; (ii) access to data; (iii) correction of incomplete, inaccurate, or outdated data; (iv) anonymization, blocking, or deletion of unnecessary, excessive, or improperly processed data; (v) portability of their data to another service or product provider, upon express request by the user; (vi) deletion of data processed with the user's consent; (vii) obtaining information about public or private entities with which Mombora has shared their data; (viii) information about the possibility of not providing consent, as well as being informed about the consequences in case of refusal; and (ix) revocation of consent.

Specifically regarding the correction of potentially incorrect data, Mombora requests a period of [15] days, counted from the request for correction.

Communication Channel

Users can request the cancellation of their account on the Mombora website whenever they wish, simply by sending an email to alo@mombora.com.br requesting the deletion of their registration.

Complaints should be addressed to Mrs. Katia Galasso.

In case of doubts or complaints about this Privacy Policy, visitors and users can contact us through our "Communication Channel" via email at ola@mombora.com.br or by phone at +55 11 93748-8917.

Jurisdiction

This Privacy Policy will be governed, interpreted, and enforced in accordance with the Laws of the Federative Republic of Brazil, with the forum of São Paulo being competent to resolve disputes that may arise regarding its applicability.

* * *