Privacy Policy
Last updated:
This policy explains, in plain language, what personal data Minas Café collects when you visit this site, what it is used for, who it is shared with and what you can demand from us. It follows Brazil's General Data Protection Law (Law 13.709/2018) and, for those reaching us from Europe, the GDPR.
Who is responsible
The data controller is Minas Café [razão social a confirmar], registered under CNPJ [CNPJ a confirmar], with its seat at [endereço da fazenda a confirmar], Minas Gerais, Brasil.
For anything concerning personal data, including the requests described in this policy, contact our data protection officer at privacidade@minascafe.com.br.
What we collect
What you type. In the contact, wholesale and launch-list forms we ask for name, email and mobile number; the wholesale form also asks for company, country and estimated volume. The message field is free text — whatever you write there stays with us, so please avoid including sensitive data.
Technical data. Our server records the IP address of anyone submitting a form, for a few minutes only, purely to block automated mass submissions. That record is not used to identify anyone and is not kept afterwards.
We use no measurement tools. This site has no Google Analytics, no social network pixel and no third-party tracker of any kind. Should that change, measurement will only be switched on after your consent, as explained in the Cookie Policy.
What we use it for
To answer your enquiry, send a quote, a sample or technical information about our coffees, and to carry out the commercial conversation you started.
If you joined the launch list, to let you know when the online store opens. You can leave at any time, and every email we send will carry a link to do so.
To protect the site against abuse and automated message submission.
On what legal basis
When you fill in a commercial form, we process your data for pre-contractual steps (LGPD art. 7, V; GDPR art. 6(1)(b)) — you asked for a quote or a sample, and we need your details to answer.
For the launch list and for any future measurement, the basis is your consent (LGPD art. 7, I; GDPR art. 6(1)(a)), which you may withdraw at any time.
For protecting the site against abuse, the basis is legitimate interest (LGPD art. 7, IX; GDPR art. 6(1)(f)) in keeping the service online and usable.
Who we share it with
We do not sell or rent your data. It is shared only with those who need it for the site to work:
Resend, which delivers form submissions to our inbox. Our hosting provider, which serves the pages. Both act as processors and may only use the data to provide that service.
These providers may process data outside Brazil, including in the United States. In those cases we require guarantees of protection equivalent to the LGPD, under art. 33 of the law.
We may also share data where the law or a court order requires it.
How long we keep it
Messages and sample requests are kept while the conversation is live and for up to 24 months after your last contact, the period in which picking the conversation back up still makes sense.
If you become a customer, we keep what is needed to meet tax and commercial obligations, for the periods the law requires.
Launch-list sign-ups are kept until you ask to leave.
Your rights
At any time and free of charge, you may: confirm that we process your data and access it; correct incomplete or outdated data; request deletion of data processed on the basis of your consent; request portability; find out who we share it with; and withdraw your consent.
To exercise any of these rights, write to privacidade@minascafe.com.br. We answer within 15 days. We may ask you to confirm your identity first — that is a protection for you, not an obstacle.
If you are not satisfied with our answer, you may complain to Brazil's National Data Protection Authority (ANPD) or, if you are in Europe, to your country's data protection authority.
Security
The site runs entirely over HTTPS and form data travels encrypted to our inbox. We restrict access to those who need it in order to serve you.
No system is infallible. If an incident occurs that could pose a relevant risk to you, we will notify you and the ANPD, as required by art. 48 of the LGPD.
Children
This site is intended for people over 18 and we do not knowingly collect data from children. If you become aware that a minor has sent us data, write to privacidade@minascafe.com.br and we will erase it.
Links away from here
When you tap our WhatsApp button or our social profiles, you leave this site and become subject to that platform's privacy policy, over which we have no control.
Changes to this policy
If we change this policy, we will update the date at the top of the page. Changes that significantly affect your rights will be announced prominently on the site.