PRIVACY
POLICY.

01 Who We Are

As Data Controller, Bernardão determines the purposes and means of processing personal data collected through our website and digital advertising campaigns.

02 Personal Data We Collect

2.1 Identification & Contact Data

• Full name — provided via the contact/quote form
• Email address — to send quotes and respond to inquiries
• Phone number — if voluntarily provided

2.2 Inquiry & Quote Data

• Product category selected in the quote form
• Message content describing project needs
• Records of prior communications with us

2.3 Technical & Navigation Data

• IP address, browser type, device type, operating system
• Pages visited, session duration, referrer URL
• Date and time of visit

2.4 Advertising & Analytics Data

• Google Ads click and conversion event data
• Google Analytics aggregated traffic metrics
• Cookie identifiers from advertising platforms

03 How We Collect Data

• Contact/quote forms: You directly provide data when submitting a quote request or inquiry.
• Website browsing: Technical data collected automatically via server logs and analytics tools.
• Google Ads: When you click a Bernardão ad, Google shares interaction data through tracking tags placed on our site.
• Cookies: Tracking cookies collect behavioral data as described in Section 8.

04 Legal Bases for Processing

• Consent (Art. 7, I LGPD): Non-essential cookies and personalized advertising. Withdrawable at any time.
• Legitimate Interest (Art. 7, IX LGPD): Website security, fraud prevention and service improvement, where not overriding your fundamental rights.
• Pre-Contractual Measures (Art. 7, V LGPD): Responding to product inquiries and quote requests.
• Legal Obligation (Art. 7, II LGPD): Compliance with Brazilian law, tax regulations or court orders.

05 Purposes of Data Use

• Responding to product inquiries and building material quote requests
• Providing information about our products, pricing and availability
• Measuring and improving website performance
• Running and optimizing Google Ads campaigns
• Preventing fraud and ensuring website security
• Complying with legal, regulatory and tax obligations

06 Data Sharing

• Service Providers: Hosting, email and analytics vendors under strict data processing agreements — prohibited from using data for their own purposes.
• Google LLC (Ads Platform): Conversion data shared for campaign measurement, subject to your consent and Google's Privacy Policy.
• Legal Authorities: When required by applicable law, judicial order or government request.
• Business Transfers: In a merger or acquisition, data may transfer as a business asset under continuing privacy protections.

07 Google Ads & Advertising

7.1 Conversion Tracking

We use Google Ads conversion tracking to measure actions on our site after clicking our ads (e.g., quote form submissions). The tag reads and writes cookies on your device to help us understand which campaigns generate real leads.

7.2 Remarketing

We may show Bernardão ads to previous website visitors on the Google Display Network, YouTube and Search. Opt out at any time via adssettings.google.com or aboutads.info.

7.3 Google Ads Policy Compliance

All Bernardão advertisements accurately represent our building materials retail and wholesale services, link directly to this website, and comply with Google Ads policies. We do not target users under 18 or collect sensitive personal data through advertising.

7.4 Google's Independent Role

Google LLC is an independent data controller for data processed through its own platforms. See Google's Privacy Policy for details.

08 Cookies

• Strictly Necessary: Essential for site functionality. Cannot be disabled.
• Analytics (Google Analytics): Aggregated usage data. Requires consent.
• Advertising (Google Ads): Conversion tracking and remarketing. Requires consent.
• Preference: Saves browsing preferences across sessions.

Manage cookies via your browser settings. See allaboutcookies.org for guidance.

09 Data Retention

• Contact/quote forms: Up to 24 months from submission, or for the duration of any business relationship.
• Analytics data: Up to 26 months (Google Analytics). Raw server logs up to 12 months.
• Advertising data: Per Google Ads platform policies (generally up to 24 months).
• Legal/tax records: Up to 5 years per Brazilian law.

After expiry, data is securely deleted or anonymized.

10 Data Security

• TLS/SSL encryption for all data in transit
• Access controls limiting data to authorized personnel only
• Contractual data protection obligations on all third-party processors

11 Your LGPD Rights

Under LGPD Art. 18, you hold the following rights. We respond to all verified requests within 15 business days.

12 International Transfers

Some providers (including Google LLC, USA) may process data outside Brazil. All transfers comply with LGPD Art. 33 via adequate protection, Standard Contractual Clauses, or specific informed consent.

13 Children's Privacy

Our website and services are directed exclusively at adults aged 18 and over. We do not knowingly collect data from minors. If you believe we have done so, contact us immediately and we will delete it promptly.

14 Policy Changes

We may update this Policy at any time. Material changes will be indicated by an updated "Last Updated" date. Continued use of our website after changes are posted constitutes acceptance.

15 Contact & DPO

For any privacy questions, data requests or complaints: