Privacy Policy
Livraria Cultural is committed to protecting the privacy of its customers and online visitors. This privacy policy explains how we collect, use, share, and protect personal data when you use our site, purchase products, register for services, or interact with our online platform. We process your data in accordance with applicable data protection laws, including the Lei Geral de Proteção de Dados (LGPD) in Brazil and the General Data Protection Regulation (GDPR) for our users in the European Union.
Information We Collect
We collect information to provide and improve our services.
Information you provide directly to us:
- When you create an account, make a purchase online, register for events, workshops, or book clubs, we collect personal details such as your name, postal address, email address (though we will not provide an email address for contact in this policy), telephone number, and payment information.
- If you participate in surveys, promotions, or communicate with us, we may collect the information you provide.
- Details related to your purchase history, preferences, and interests in books, authors, and literary genres.
Information we collect automatically:
- When you visit our site, we automatically collect certain information about your device and browsing activity. This may include your IP address, browser type, operating system, referring URLs, pages viewed, time spent on pages, and date/time of visit. This data helps us understand how users interact with our site and services.
- We use cookies and similar technologies to collect this information. You can manage your cookie preferences through your browser settings.
How We Use Your Information
We use the information we collect for various purposes related to providing and improving our services:
- To process and fulfill your orders for books, e-books, stationery, and gifts.
- To manage your account and provide customer support.
- To register you for events, workshops, book signings, and book club activities.
- To process payments and prevent fraudulent transactions.
- To communicate with you about your orders, account, and services, including sending service-related notifications.
- To personalize your experience on our online platform, recommending products or events based on your purchase history and preferences.
- To improve our website, services, and product offerings through analysis of usage data.
- To conduct research and analysis to understand our customer base and market trends.
- To comply with legal obligations and enforce our terms and conditions.
- With your consent, we may use your information for marketing purposes, such as sending newsletters or promotional offers related to our products and services.
Legal Basis for Processing
Our legal basis for collecting and using your personal data depends on the specific context in which we collect it. We will collect personal data from you only where:
- We need the personal data to perform a contract with you (for example, to process your order or provide a service you requested).
- The processing is in our legitimate interests and not overridden by your data protection rights (for example, for marketing where not requiring consent, preventing fraud, or improving our services).
- We have your consent to do so (for example, for sending certain marketing communications).
- We have a legal obligation to collect or process personal data.
Sharing Your Information
We do not sell your personal data. We may share your information with third parties in the following circumstances:
- Service Providers: We share information with third-party vendors and service providers who perform services on our behalf, such as payment processing, order fulfillment, delivery services, website hosting, and analytics. These service providers are obligated to protect your data and use it only for the purposes for which they were contracted.
- Event Partners: If you register for an event or workshop hosted in partnership with another entity, we may share necessary registration details with that partner.
- Legal Requirements: We may disclose your information if required to do so by law, regulation, court order, or in response to a legitimate request by a public authority.
- Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity.
Data Security
We implement appropriate technical and organizational measures to protect the personal data we collect and process. These measures are designed to provide a level of security appropriate to the risk of processing your personal data. While we strive to protect your personal data, no security system is impenetrable, and we cannot guarantee the absolute security of your information.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, as well as applicable legal requirements.
Your Data Protection Rights
Depending on your location and applicable data protection laws (such as LGPD and GDPR), you may have the following rights regarding your personal data:
- The right to access: You have the right to request copies of your personal data.
- The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- The right to erasure (right to be forgotten): You have the right to request that we erase your personal data under certain conditions.
- The right to restrict processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
- The right to object to processing: You have the right to object to our processing of your personal data under certain conditions.
- The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
- The right to withdraw consent: If we are processing your personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing conducted in reliance on lawful processing grounds other than consent.
To exercise these rights, please contact us using the details provided below. We may need to verify your identity before responding to your request.
International Data Transfers
As Livraria Cultural operates in Brazil, the personal data we collect is primarily processed and stored within Brazil. If we transfer personal data to third parties or service providers located outside Brazil or the European Union/European Economic Area, we will take appropriate steps to ensure that the data is protected in accordance with applicable data protection laws, including using standard contractual clauses or other legally approved mechanisms.
Third-Party Links
Our online platform may contain links to third-party websites. This privacy policy does not apply to those third-party sites. We encourage you to read the privacy policies of any third-party sites you visit.
Children's Privacy
Our services are not intended for individuals under the age of 18, unless specifically stated for children's workshops or events requiring parental consent. We do not knowingly collect personal data from children without parental consent. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.
Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new policy on our online platform.
Contact Us
If you have any questions about this privacy policy or our data practices, you may contact us at the following physical address:
Livraria Cultural
2006 Avenida Paulista
15th Floor
São Paulo, São Paulo
01310-200
Brazil