Privacy Policy

PRIVACY POLICY AND PERSONAL DATA PROTECTION

Last updated: March 2026

Top Cau Indústria e Comércio de Chocolates Ltda. We value your privacy. This Privacy Policy explains how we process your personal data collected through our website, Customer Service (SAC), or digital communications, always in compliance with the Brazilian General Data Protection Law (LGPD).

If you have any questions, please contact us at: privacidade@topcau.com.br.

Index

1. What data do we collect and how?
2. How do we use your data? (Purposes and Legal Bases)
3. Who do we share your data with?
4. International Data Transfer
5. Your Rights (LGPD)
6. Information Security
7. Retention Period
8. Cookies Policy
9. Third-Party Links
10. Data Protection Officer (DPO)
11. Changes

1. What data do we collect and how?

  • We collect information to provide a personalized and secure experience.
  • Data provided by You: Name, email, phone number, and information sent via forms or SAC.
  • Automatically collected data: IP address, approximate location, browser type, and browsing behavior (collected via cookies and similar technologies).

2. How do we use your data? (Purposes and Legal Bases)

We process your data only for specific and legitimate purposes:

  • Customer Service: To answer questions and requests (Legal basis: Performance of a contract or preliminary procedures).
  • Marketing and News: To send offers and promotions, if authorized by you (Legal basis: Consent).
  • Website Improvement: To analyze traffic and optimize your browsing experience (Legal basis: Legitimate Interest).
  • Security: To prevent fraud and ensure website integrity (Legal basis: Credit protection or Legitimate Interest).

3. Who do we share your data with?

Sharing occurs only when necessary to enable our services, with:

  • Hosting and technology providers.
  • Customer management and digital marketing platforms.
  • Judicial authorities, when there is a legal obligation.

4. International Data Transfer

Occasionally, your data may be stored on servers outside Brazil (such as cloud services). In these cases, we ensure that the destination country has compatible data protection legislation or that there are contractual clauses ensuring the same level of protection as the LGPD.

5. Your Rights (LGPD)

You are the owner of your data. According to the law, you may request:

  • Confirmation and Access: To know if we process your data and to access it.
  • Correction: To update incomplete or inaccurate data.
  • Deletion/Anonymization: To request the deletion of unnecessary data or data processed with consent.
  • Portability: To transfer your data to another service provider.
  • Revocation of Consent: To cancel your marketing authorization at any time.
  • To exercise these rights, please write to: privacidade@topcau.com.br.

6. Information Security

We use modern security protocols, encryption, and firewalls to protect your data against unauthorized access, loss, or alteration. Internal access to data is restricted to authorized personnel only.

7. Retention Period

We keep your personal data only for as long as necessary to fulfill the described purposes or to meet legal and tax obligations. After this period, the data is deleted or anonymized.

8. Cookies Policy

  • Cookies help us remember your preferences.
  • Essential: Necessary for the website to function.
  • Analytical: To understand how the website is used.
  • Marketing: To display relevant advertisements.
  • You can manage or block cookies directly in your browser settings.

9. Third-Party Links

Our website may contain links to social media or external websites. This policy does not apply to them. We recommend reading the privacy policy of every website you visit.

10. Data Protection Officer (DPO)

In compliance with Art. 41 of the LGPD, we have appointed a Data Protection Officer:

Name: Carlos Hashimoto
Contact: privacidade@topcau.com.br

11. Changes

This policy may be updated to reflect changes in the law or our internal processes. Please check this page regularly.