At DOCOL, we value transparency and clarity regarding personal data processing. We collect information that helps us provide a personalized and secure experience for our customers, employees, suppliers and users. This data includes:

● Registration data: name, tax ID (CPF), email address, telephone number and full address.

● Browsing data: information collected automatically when you access our portals via the internet, such as geolocation and IP address.

DOCOL processes sensitive personal data only in situations expressly permitted by law, ensuring the security and privacy of data subjects. These cases include:

● protection of the life or physical safety of the data subject or third parties;

● ensuring fraud prevention and the security of the data subject, in electronic system registration identification and authentication processes;

● regular exercise of rights, including in contracts and in legal proceedings;

● compliance with a legal or regulatory obligation by the controller.

Whenever the processing of sensitive data is necessary, we implement strict security measures such as restricting or blocking access, encryption, password control and other mechanisms in order to guarantee the protection of information.

DOCOL processes personal data in a transparent manner and in full compliance with Brazilian data protection legislation. The information collected is intended to meet specific purposes, such as:

● promotion of products and services offered by DOCOL, disseminating new collections and features, seasonal advertisements and other activities related to advertising for our products;

● to let customers and those interested in DOCOL products and services keep a history of their accesses, products viewed and highlighted, purchases and other records of interest to the customer;

● for the recruitment and selection process to hire new employees;

● for employee onboarding, enabling compliance with legal and contractual obligations, in addition to granting benefits;

● to ensure the safety of DOCOL establishments and everyone present;

● to study user interaction with DOCOL’s communication means, aiming to develop improvements and new relationship forms;

● to establish criteria for identifying registered users and their activities on the platform, system and website;

● to prevent fraud against the user and third parties;

● o enable the execution of system, platform or website features, meeting user expectations.

When necessary, sensitive data processing is subject to strict security controls, including access restriction or blocking, encryption, password authentication and other protection measures, in order to guarantee the protection of information.

At DOCOL, protecting personal information is a priority. To ensure data security and integrity, we implement a number of technical and managerial, preventive and responsive measures, such as: confidentiality commitment among employees, who are instructed and committed to the confidentiality of information; secure, updated and encrypted backups to protect data against loss or damage; continuous monitoring in operating environments by means of cameras and security systems; and access control, ensuring that information is restricted and granted only based on the role of each employee.

Despite all these practices, it is important to emphasize that no system is completely immune to security incidents. DOCOL is not liable for any damages resulting from user negligence or malicious actions by third parties, such as breaches, failures or defects. However, if any incident occurs that is demonstrably caused by DOCOL’s negligent or deliberate conduct, we will assume responsibility and take the necessary measures to remedy the damage.

Your trust is our greatest value.

DOCOL only shares personal data with outsourcers in situations that are strictly necessary and permitted by law. These situations include:

● business succession, such as mergers, acquisitions and incorporations;

● contracting data processing services with outsourcers (operators), such as data hosting, processing systems (cloud computing services), customer service, maintenance and technical support services, organization of events in which DOCOL participates, credit billing services (financial). These outsourcers will not have a direct interest in the information and will always act under the directive and guidance of DOCOL.

Furthermore, DOCOL informs that it is required by law to share users’ personal data in the event of a demand issued by a judicial, police or administrative authority. This data will only be made available after validation of the order issued by the competent bodies.

In some cases, direct and indirect processors may be located outside Brazilian territory. However, DOCOL is committed to ensuring that all international transfers take place in full compliance with data protection regulations.
To this end, we require that all outsourcers involved undertake strict commitments regarding information security and the protection of personal data, ensuring that the same privacy standards applicable in Brazil are respected.

DOCOL states that it uses cookies to improve the experience of users on its platforms and web pages. Cookies are files sent by DOCOL and installed in users’ browsers. Cookies allow for identifying the internet terminal, authenticating the user, personalizing the browsing experience and contracting services, logging accesses and activities on the page.

DOCOL uses Google Analytics cookies. Please visit Google’s Privacy Policy for more information: https://policies.google.com/privacy?hl=en#about.

DOCOL ensures that execution of both its own and third-party cookies follows the best security practices to guarantee the protection of personal data collected.

You can review and modify your cookie permissions at any time directly in your browser settings. However, it warrants mention that completely blocking cookies may limit access to some features of our platforms, and may even disable the use of certain tools.

Here, experience and privacy go hand-in-hand.

DOCOL stores personal data for the time necessary to fulfill the purposes for which it was collected, always complying with applicable legislation.

● Website access records – kept for at least six months, as required by the Internet Civil Rights Framework (MCI – Marco Civil da Internet). After this period, the data is permanently deleted.

● Data used for marketing purposes – kept until the user requests that communications be stopped.

● Other personal data – deleted at the end of the contractual relationship or when there is opposition to its processing, except when records must be kept to comply with legal obligations or for possible defense in legal or administrative proceedings.

DOCOL reinforces its commitment to privacy and information security, ensuring that data is properly deleted when no longer needed.

At DOCOL, we respect and guarantee all rights in relation to personal data. According to the Brazilian General Data Protection Law (LGPD – Lei Geral de Proteção de Dados), you have the right to:

● Access: request information about which personal data is being processed and how it is used.

● Rectification: request the correction of incomplete, inaccurate or outdated data.

● Portability: request the transfer of your data to another service provider, where applicable.

● Objection: object to the use of your data for specific purposes, such as marketing, at any time.

● Deletion: request the deletion of your personal data, except when retention is necessary for:

○ compliance with legal or regulatory obligations;

○ exercising the right of defense in judicial or administrative proceedings.

How to exercise your rights?

To request access, rectification, portability, opposition or deletion of your data, please contact our Data Protection Officer (DPO):

Fábio Arakawa Amaro

E-mail: privacidade@docol.com.br

At DOCOL, your privacy and rights are priorities. We are available to ensure that your information is processed with transparency, security and respect.

DOCOL is committed to adopting the best security practices to protect your personal data. However, it is not liable for any failures resulting from user negligence in relation to the security of their own information.

It is the user’s responsibility to ensure the confidentiality of data related to access and use of our systems, platforms and websites, including, but not limited to: login information, passwords, security keys, two-factor authentication and other security measures implemented by DOCOL.

DOCOL underscores the importance of users adopting good security practices to ensure full data protection.

If you have any questions or would like to make a request, DOCOL is available to assist you through its Data Protection Officer (DPO), Fábio Arakava.

Contact us by email: privacy@docolfaucets.com.

Update date: April 7, 2025.