Privacy Policy – Ucelo do Brasil Website 

Effective Date: August 8, 2025
Version: 1.0
Controller: Ucelo do Brasil Ltda., Av. Ayrton Senna da Silva, nº 300 – Room 1101 – 11th Floor, Palhano Business Center Building, Londrina/PR – ZIP Code 86050-460.
Data Protection Officer (DPO) Contact: dpo@ucelo.com.br

---

1. Purpose and Scope

This Policy explains how we process personal data on the Ucelo website and associated landing pages, including forms (Newsletter, Contact, Catalog Downloads, WhatsApp, and LPs). It applies to visitors, leads, and users interacting with our digital channels.

---

2. Data We Collect

2.1 Voluntarily provided data

• Newsletter: email.

• Contact: name, phone, company, email.

• Catalog Download: name, email.

• WhatsApp (button): name, email, mobile number, company.

• Landing Pages: name, email, company, job title, phone, and consent option for communications.

2.2 Automatically collected data

• Cookies and similar technologies (details in Section 6).

• Browsing and device data (e.g., IP address, date/time, accessed pages, cookie identifiers, browser, operating system, screen resolution, traffic source).

• Analytics tools (e.g., Google Analytics) and web beacons for site usage metrics.

---

3. Purposes and Legal Bases

---

4. Data Sharing

• Operators/Providers supporting website and lead management (e.g., automation/CRM platforms, analytics, hosting, and storage) process data on behalf of Ucelo under our instructions and contracts.

• RD Station may be used for lead management.

• Google Analytics processes usage data for metrics and reports.

• Authorities: we may share data to comply with legal obligations, competent authority orders, or to exercise rights in judicial/administrative proceedings.

We do not display third-party advertising on our website.

---

5. Retention and Deletion

We keep data as long as necessary to fulfill the informed purposes and applicable legal/regulatory deadlines. Examples: while the relationship lasts and/or until consent for marketing is revoked; logs and metrics per technical cycles; and minimum evidence for rights defense. After the period, data is deleted or anonymized, except when preserved to meet legal/regulatory obligations.

---

6. Cookies and Tracking Technologies

We use the following cookie categories:

• Essential/functional – required for operation and security.

• Performance/analytics – usage metrics and experience improvement.

• Behavioral advertising – when applicable, to personalize Ucelo campaigns.

Management: you can adjust preferences via the cookie banner/center (when displayed) and browser settings (block, delete cookies, etc.). Blocking essential cookies may affect site functionality.

---

7. Information Security

We adopt technical and administrative measures aligned with our activities, including but not limited to:

• Encryption (TLS/SSL) in transmissions, firewalls, and access restrictions.

• System monitoring and updates; anti-CSRF tokens in forms and sensitive actions.

• Backup and business continuity management; controlled and logged access.

• Primary storage on servers in Brazil and backups in restricted-access cloud.

Internally, we follow the Information Security Policy, Backup Policy, and Incident Response Plan, among other corporate guidelines.

---

8. International Transfer

Ucelo does not routinely direct international data transfers for website operations. However, some cloud/backup services used (e.g., redundant cloud storage) may store data in data centers outside Brazil. When this occurs, safeguards required by LGPD are adopted, such as contractual clauses and equivalent security measures.

---

9. Data Subject Rights

According to Article 18 of LGPD, you may: confirm processing; access; correct; anonymize, block, or delete unnecessary/excess data; request portability; obtain information on sharing; understand the possibility of not providing consent and consequences; revoke consent; and oppose unlawful processing.

How to exercise: send a request to the DPO through the contacts below. We may request information to verify your identity and ensure secure handling.

---

10. DPO Contact

• DPO: dpo@ucelo.com.br

• Controller’s Address: Av. Ayrton Senna da Silva, nº 300 – Room 1101 – 11th Floor, Palhano Business Center Building, Londrina/PR – ZIP Code 86050-460.

---

11. Children and Adolescents

Our website is not directed at individuals under 18 years old. If we identify inappropriate data collection, we will take measures to delete the data and/or obtain proper consent, as applicable.

---

12. Updates to This Policy

We may update this Policy to reflect operational, legal, or regulatory changes. We will indicate the last update date at the top of this document and, when necessary, provide additional notice (e.g., site banner/alert).

---

13. Internal Normative References

• PSQ 1.01 – Information Security Policy

• PSQ 1.03 – Corporate Media and Backup Management Policy

• PSQ 1.09 – Incident Response Plan

• PSQ 1.11 – Business Continuity Plan

• Code of Ethics and Conduct

• LGPD – Law nº 13.709/2018

---

Notices

• Transparency: Whenever a form requests your consent for Ucelo communications, your opt-in will be recorded and you may opt-out at any time.

• Operators: providers act as processors and cannot use your data for their own purposes.

• No third-party ads: we do not display third-party advertising on our website.

---

Ucelo do Brasil Ltda.