This policy explains how we handle personal data when you visit this website, submit a form or do business with us. It follows Brazil’s General Data Protection Law (Lei nº 13.709/2018, “LGPD”) and, where it applies to visitors in the European Economic Area or the United Kingdom, the General Data Protection Regulation (“GDPR”).
1. Who we are
The controller of your personal data is TACJR Participações Ltda. (“Veracana”), a Sociedade Empresária Limitada (Ltda.) registered under CNPJ 45.706.037/0001-78, with its registered office at Alameda Ribeirão Preto, 130, conj. 12 – Bela Vista, São Paulo/SP, CEP 01331-000.
Data protection contact (Encarregado): quotes@veracanatrades.com.
2. What we collect
- Information you send us. Through our forms or by email, you may send us your name, company, job title, business email, telephone number, country and the details of your enquiry: product, volumes, destination and payment instrument.
- Due-diligence information. In a commercial relationship we exchange documents under a confidentiality agreement. These include company registration documents, ownership declarations and the identification of authorised signatories.
- Form security data. When you submit a form, we keep a one-way, salted hash of your IP address (not the address itself), your approximate country and the page you used. Forms are protected by Cloudflare Turnstile, which checks that a person, not an automated program, is submitting the form.
- Technical data. Our hosting provider processes technical data such as IP address, browser type and the pages requested. It uses this data to deliver the site and protect it against attacks.
- Aggregate statistics. We use Cloudflare Web Analytics, which counts visits without cookies and without building profiles of individual visitors.
We do not sell personal data and we do not use advertising or tracking cookies.
3. Why we use it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Replying to enquiries and preparing offers or contracts | Steps prior to a contract and performance of a contract (LGPD art. 7, V; GDPR art. 6(1)(b)) |
| Know-your-customer, anti-money-laundering and sanctions checks | Compliance with legal obligations and legitimate interest (LGPD art. 7, II and IX; GDPR art. 6(1)(c) and (f)) |
| Website security, prevention of spam and fraud, and investigation of impersonation reports | Legitimate interest (LGPD art. 7, IX; GDPR art. 6(1)(f)) |
| Keeping records of transactions | Compliance with legal and tax obligations (LGPD art. 7, II; GDPR art. 6(1)(c)) |
| Market updates you ask to receive | Consent, which you may withdraw at any time (LGPD art. 7, I; GDPR art. 6(1)(a)) |
4. Who we share it with
- Service providers that process data on our behalf under contract: Cloudflare, Inc. (website hosting, content delivery, form protection, form database and web analytics), and our email providers (quotes@veracanatrades.com mailbox and notification service).
- Counterparties in a transaction you take part in, only as needed: banks, inspection companies, logistics providers and insurers.
- Public authorities, where the law requires it.
5. International transfers
Some of our providers process data outside Brazil and outside the EEA/UK, including in the United States. We transfer data only with the safeguards the LGPD (art. 33) and the GDPR (Chapter V) require, such as standard contractual clauses.
6. How long we keep it
- Enquiries that do not lead to a business relationship: 24 months from the last contact, then deleted or anonymised.
- Due-diligence and transaction records: for the period required by Brazilian commercial, tax and anti-money-laundering law, and at least five years after the relationship ends.
- Form security data: 24 months.
7. Your rights
Under LGPD art. 18 you may ask us to:
- confirm whether we process your data;
- access, correct, anonymise, block or delete it;
- port it to another provider;
- tell you who we share it with;
- withdraw your consent.
Where the GDPR applies, you also have the rights in GDPR arts. 15–22, including the right to object and to restrict processing.
To exercise a right, write to quotes@veracanatrades.com. We reply within the time limits the law sets. You may also complain to Brazil’s National Data Protection Authority (ANPD) or, in the EEA/UK, to your local supervisory authority.
8. Security
We protect personal data with access controls, encryption in transit and reputable providers. No system is completely secure. If a security incident creates a relevant risk to you, we will notify you and the authorities as the law requires.
9. Changes
We will publish any change to this policy on this page, with a new “last updated” date.