Nevosa website

This document (referred to as the Privacy Policy), as part of the Nevosa website’s terms of use, aims to establish rules for obtaining, accessing, using, storing, transmitting and enriching data collected from users, as well as recording user activities, in accordance with current Brazilian laws.

By accepting this Privacy Policy, the user voluntarily and explicitly agrees to the terms set forth herein.

1. Obtain data:

1.1 Data will be obtained when users enter or voluntarily submit data on the Nevosa website, for example (but not limited to) creating access accounts, conducting communication, purchasing products and browsing the Nevosa website. 1.2 If the user is responsible for accurately providing or updating information, Nevosa shall not be held responsible for the accuracy, absence or obsolescence of the information provided by the user. Nevosa will directly or indirectly obtain the data provided by users when they visit and use the Nevosa website.

2. Data Usage:

2.1 The data collected from users may be used for the following purposes:

i. Correctly identify and verify users;

ii. Respond correctly to users’ requests and questions;

iii. Keep user records up to date for contact via phone, email, text message, direct mail or other means of communication;

iv. Improve the user experience and interaction when browsing the Nevosa website;

v. Conduct statistics, research, surveys and investigations related to users’ activities and behaviors when using the Nevosa website, and carry out such operations anonymously;

vi. Promote Nevosa services and partners, as well as inform news, features, content, updates and other information related to maintaining a relationship with Nevosa;

vii. Protect Nevosa’s rights and obligations regarding the use of the Nevosa website;

viii. To cooperate with and/or comply with court orders or requirements of administrative authorities;

ix. Use cookie technology to anonymously share the collected data to allow business partners to access it.

2.2 The database formed by collecting data on the Nevosa website is the property and responsibility of Nevosa and will not be sold and/or transferred to third parties. Its use, access and sharing (if necessary) will be carried out within the scope and purpose of Nevosa’s activities. And it can be made available to the companies of the DPaschoal Group in this sense and for their business partners, suppliers and authorities to consult.

2.3 The User hereby informs that Nevosa may enrich its database by adding information from other legitimate sources (including databases from other companies of the DPaschoal Group), and the user expressly agrees by agreeing to the terms of this Privacy Policy.

2.4 Internally, only professionals officially authorized by Nevosa can access the data, while respecting the principles of proportionality, necessity and relevance to the purpose of the Nevosa website, as well as the commitment to confidentiality and privacy protection in accordance with the terms of this policy.

2.5 Nevosa has business partners who may provide services through the functions of the Nevosa website or the website itself. The data provided by users to these partners will be the responsibility of the users themselves. Therefore, the way the data is obtained and used will be subject to their own practices. Nevosa will not be held responsible for processing such information.

The collected data will not be sold and will only be processed by officially authorized professionals. Only Nevosa, partners, suppliers and relevant institutions can access these data. Nevosa

Use a server with Secure Sockets Layer (SSL) security. This Internet security technology can securely store users’ names, addresses and other data, and encrypt users’ private information such as checking account numbers and credit card numbers. Therefore, this information is only used for the purchasing process. The Nevosa website does not store this information and no one on the Internet can access it.

If a user uses the anti-spam service, they must authorize to receive messages from the Nevosa.COM.BR domain.

In addition to emails, Nevosa also sends text messages containing reminders and discount information to customers in its database. The shipment complies with all good practices required by ANATEL.

Nevosa uses third-party companies to authenticate users’ browsing and purchasing areas, namely: E-bit and ClearSale.

3. Activity Record

3.1 Nevosa will record the activities carried out by users on the Nevosa website and create logs containing the following:

– The user’s IP address;

– Operations performed by users on the Nevosa website;

– The pages visited by users on the Nevosa website;

The date and time of each operation made by the user on the Nevosa website, as well as the access to the page and the tools and functions used;

– Information about the device used by the user, the version of the operating system, the browser, the connection location, and other applications and software installed;

– Session ID (if any)

. 3.2 Other technologies may be used to obtain users’ browsing data. However, these technologies will always respect the terms of this policy and users’ choices regarding data collection and storage.

4. Data Storage

4.1 The collected data will be stored in a secure and controllable environment for at least six (six) months, taking into account the existing technology, in accordance with the Internet civil rights framework. However, considering that no security system is foolproof, Nevosa shall not be held responsible for any damage and/or loss resulting from database failures, viruses or intrusions on the Nevosa website, except in cases of intentional or negligent acts.

4.2 User data obtained from the Nevosa website may be stored on Nevosa’s own servers or on third-party servers contracted for this purpose, regardless of whether such servers are located in Brazil or abroad. Cloud computing technology and/or other technologies that may emerge in the future may also be used for storage. Always committed to improving and enhancing Nevosa’s activities.

4.2.1 The collected data is stored in a secure location, which may include distribution using cloud computing technology.

4.3 Users have the right to request Nevosa to display, correct or approve their personal data through the customer service tools provided on the Nevosa website.

4.4 By using the same customer service tools, users may request the deletion of all personal data collected and recorded by Nevosa, provided that the contract between the user and Nevosa has been terminated, the access account has been cancelled, and the minimum legal period has passed.

4.4.1 Nevosa clarifies that in some cases, data cannot be completely deleted because the invoices generated by Nevosa are always associated with the user’s CPF, and it is necessary to retain this information to avoid tax differences.

Users can request the display, correction or deletion of their data at any time.

4.5 For the purposes of auditing and rights protection, Nevosa may retain the user’s data record history for up to 5 (five) years after the access account is cancelled. If otherwise stipulated by law or regulatory standards or for the need of rights protection, the retention period may be extended, but Nevosa reserves the right to permanently delete such data at any time for a shorter period. 4.5.1 The data saved under the above conditions may only be used under assumptions ii, vii and viii in Article 2.1 of this Policy.

Except in special circumstances, Nevosa may retain the collected data for up to five (five) years.

5. General Provisions:

5.1 The content of this Privacy Policy may be updated or modified at any time, depending on the purpose of the Nevosa website or the convenience of Nevosa. For example, for the purpose of legal sufficiency and compliance with equivalent legal provisions or standards, users are responsible for checking it when visiting the Nevosa website. 5.1.1

If there are any updates to this document or terms of use, Nevosa will notify the user using the tools provided on the Nevosa website and/or the contact information provided by the user.

5.1.2 Nevosa reserves the right to update this document at any time. Therefore, please review it frequently.

5.2 If users have any questions regarding the terms contained in this Privacy Policy, they must contact us through the Nevosa service channels listed below. The service hours are from 8:00 a.m. to 6:30 p.m. (Brasilia time) from Monday to Friday, excluding national legal holidays:

(i) email: sac@Nevosa.com.br

(iv) Check other forms in the customer service center.

5.3 If any third-party company processes any data collected by the Nevosa website, they must without exception comply with the conditions set forth herein.

5.4 If any provision of this Privacy Policy is deemed illegal or unlawful by the competent authority of the user’s place of residence or the location of their Internet connection, all other conditions shall remain in full force and effect.

6. Applicable laws and jurisdiction

6.1 This Privacy Policy is linked to the terms and conditions of use of the Nevosa website and will be interpreted in Portuguese in accordance with the laws of Brazil. Any disputes or controversies related to this document shall be heard by the District Court of Campinos, State of Sao Paulo, except for the specific reservations of applicable law regarding personal, territorial or functional jurisdiction.

In the event of legal proceedings, Brazilian law shall apply, and the selected court shall be the Regional Court of Campinas /SP.