Privacy Policies

Introduction

Urbanobox is committed to transparency, privacy, and the security of its customers’ data throughout the interaction process with our website, app, and physical stores. To help you better understand what information we collect and how we use, store, or delete it, we detail our Privacy Policy below.

Personal Data Handling

Customer registration data is not disclosed to third parties, except when necessary for the delivery process, billing, or participation in promotions requested by customers. Your personal data is essential for ensuring the safe delivery of your order, according to the stipulated delivery time.

Overview of Our Privacy Policy:

• Data Handler: Urbanobox
• Role of Urbanobox in Data Processing: Predominantly controller
• Type of Personal Information Collected: Urbanobox collects information that customers provide when registering and creating an account in “My Account” on our website and app, and/or when making a purchase or exchanging products in physical stores.

Purpose of Using Your Personal Data

• To deliver the purchased products or services.
• To keep you informed about your order status.
• To coordinate delivery or service provision with partners.
• To facilitate exchanges.
• To send communications about services and provide a better experience to the customer, making Urbanobox even more relevant in your daily life.

Your Rights

The General Data Protection Law (LGPD) grants customers the right to request from Urbanobox, at any time, through a formal request, information regarding the processed data.

Important Concepts:

• Customer: Any individual who purchases products or services from physical stores, website, and app.
• Personal Data: Any information related to an individual that identifies or, when combined with other information, identifies an individual. This includes any information that can identify or contact a person.
• Personal Data Processing: Includes collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, elimination, evaluation, control of information, communication, transfer, dissemination, or extraction of personal data.
• Data Subject: Any individual whose personal data is processed by Urbanobox.
• Purpose: The objective we aim to achieve with personal data processing.
• Necessity: The personal data processing must be limited to the minimum necessary for the intended purpose, being relevant, proportional, and non-excessive.
• Consent: Clear and objective authorization that the data subject gives for their personal data processing with a previously stipulated purpose. Consent can be revoked at any time. Revocation does not cancel previous processing activities.

1. To Whom Does This Privacy Policy Apply?

It applies to all Urbanobox customers, including website, app, and physical stores, whose personal data is processed by us in some way.

2. What Types of Personal Information Do We Collect and Use?

Urbanobox collects and stores the following types of information:

• Information You Provide: Urbanobox collects information from customers in various ways: when you provide your CPF for invoicing; exchange a product; purchase services offered by physical stores, website, or app; create an account and provide data in “My Account”; place an order on our website or app; pick up a product purchased online at physical stores; participate in monthly drawings; interact with Customer Service; participate in surveys or marketing promotions. The information requested may include: full name, email, CPF, date of birth, gender, address, phone numbers, and credit card number.
• Automatically Collected Information: We collect and store certain information whenever the customer interacts with us. For example, we use cookies and obtain information when your browser accesses our website; when you click on ads, partner emails, and other content provided by us on other websites.
• Information Collected from Mobile Devices: When the customer downloads or uses our app, we may receive data about your location and mobile device. We may use this information to offer personalized content such as ads, search results, and others. Most mobile devices allow the customer to disable location services.
• Information Collected from Other Sources: Public sources (e.g., demographic data); credit agencies (e.g., credit reports/checks); data providers (e.g., demographic data related to online ads and customer interests).

3. Why Do We Request Your Personal Data?

Data is necessary to:

• Deliver purchased products or contracted services.
• Optimize your interaction with us.
• Ensure the security of the website, app, and the data they process.
• Inform the customer about offers and promote our services.
• Comply with legal obligations.
• Administrative and management purposes.

The provision of data allows us to:

• Deliver purchased products or services.
• Process exchanges or returns within the period established by the Consumer Protection Code (CDC).
• Send updates on order status and service communications.
• Coordinate with partners for delivery or service provision.
• Provide services tailored to customer needs.
• Improve customers’ shopping experience at Urbanobox.
• Conduct market analysis and research.
• Keep the customer informed about our products and services.
• Execute targeted online advertising.
• Prevent, detect, and investigate activities that do not comply with our Code of Conduct or that are prohibited or illegal.
• Improve our website, products, and services.

Urbanobox uses legal bases, which may vary according to the collection purpose, to process customers’ personal data. The storage period may change according to the applicable legal basis in each situation and purpose.

3.1 Marketing Services

Marketing services are offered through free communications about offers, services, and products aimed at the customer, related to their profile on the website and past purchases. This service includes emails, SMS, and WhatsApp. Customers can cancel this service at any time by accessing “My Account.”

4. With Whom Do We Share Your Data?

Collected information will only be shared when necessary: (i) for the adequate provision of services with partner companies; (ii) for protection in case of conflict; (iii) under judicial decision or request from a competent authority; (iv) with companies providing technological and operational infrastructure, such as payment intermediaries and information storage service providers.

5. International Data Transfer

As the internet is a global environment, certain services offered by Urbanobox may require the transfer of your data to other countries.

In such cases, the data is processed according to the LGPD (General Data Protection Law) and other protection laws. We take security measures in accordance with our policies and adopt standard clauses in contracts with suppliers and service providers.

By browsing our website, app, purchasing in our physical stores, and/or communicating with us, you agree to the processing of your information, including international data transfer when necessary. We take measures to ensure that any collected information is treated securely, according to data protection standards and this Privacy Policy.

6. How Long Do We Store Personal Information?

We store customer information according to Brazilian law’s prescription norms.

7. What Are the Data Subject’s Rights?

From the start of the LGPD’s effectiveness, the data subject has the right to obtain from Urbanobox, at any time, through a formal request, information regarding their data.

Urbanobox will have 15 days to respond to data subjects’ requests. Requests will be analyzed according to current legislation, and for legal reasons, some requests may not be fulfilled.

According to the LGPD, data subjects can exercise their rights through:

• I – Confirmation of data processing existence;
• II – Access to data;
• III – Correction of incomplete, inaccurate, or outdated data;
• IV – Anonymization, blocking, or elimination of unnecessary, excessive data, or data processed in non-compliance with the law;
• V – Data portability to another service or product provider, upon express request, according to the national authority’s regulations, respecting commercial and industrial secrets;
• VI – Elimination of personal data processed with the data subject’s consent;
• VII – Information on public and private entities with which the controller shared data use;
• VIII – Information on the possibility of not providing consent and the consequences of denial;
• IX – Revocation of consent.

8. How to Exercise Your Rights?

You can exercise your rights by accessing the “Privacy” section in “My Account,” available on www.urbanobox.com. Additionally, you can contact us via email at support@urbanobox.com.

To change your notification preferences (including marketing communications) at any time, you can access “My Account.” If you do not wish to receive our marketing communications, you can also unsubscribe by clicking the link sent with the marketing email.

9. Can Children Purchase from Urbanobox?

Urbanobox sells products for children, but they must be purchased by adults. If you are under 18, you will need to purchase with a parent or guardian.

10. Cookies and Similar Technologies

Cookies are small data files placed on your computer or other devices (such as smartphones or tablets) while browsing the site.

We use cookies, pixels, and other technologies (collectively, “cookies”) to recognize your browser or device, learn more about your interests, provide essential features and services, and also to:

• Track your preferences to send only ads of interest to you. You can set your preferences through your account;
• Track items stored in your shopping cart;
• Conduct research and diagnostics to improve content, products, and services;
• Prevent fraudulent activities;
• Improve security.

If you block or reject our cookies, you will not be able to add items to your shopping cart, proceed to checkout, or use our products and services that require login.

Click on ‘Help’ in your browser settings to learn how to prevent it from accepting new cookies and to see when cookies expire and how to disable them. The links below provide more details on disabling cookies for popular browsers:

• Google Chrome
• Mozilla Firefox
• Safari
• Internet Explorer
• Microsoft Edge
• Opera

11. How Can You Keep Your Personal Information Secure?

Urbanobox uses the best security protocols to protect customers’ data privacy but also recommends individual protection measures.

To keep your personal data provided during registration or purchases secure, your login and password should never be shared with third parties. Additionally, when accessing your account via “My Account,” especially on public computers, make sure to log out to prevent unauthorized access.

We do not request personal data via phone, WhatsApp, SMS, or email. Under no circumstances should they be provided, as it may be an attempt to misuse your information.

For more information, you can consult our Security Guide.

12. Other Important Information About Data Protection

If any changes are made to our Privacy Policy, you will receive an email notification.

13. How to Contact Urbanobox’s Data Protection Officer?

The Data Protection Officer is the individual chosen by Urbanobox to act as a communication channel between the controller, data subjects, and the National Data Protection Authority (ANPD), when formalized. Any questions can be sent to the email support@urbanobox.com.

14. Legislation and Jurisdiction

This policy will be governed, interpreted, and executed according to the laws of the Federative Republic of Brazil, especially Law No. 13.709/2018, regardless of other states’ or countries’ laws, with the competent court being the customer’s domicile to resolve any issues arising from this document.

15. GDPR Compliance for European and LATAM Countries

Urbanobox complies with the General Data Protection Regulation (GDPR) for European and LATAM countries. We ensure that your personal data is processed legally, fairly, and transparently. You have the right to access, rectify, delete, restrict processing, object to processing, and data portability of your personal data. For any inquiries or to exercise your rights under GDPR, please contact our Data Protection Officer at support@urbanobox.com.

By using our services, you agree to the collection, use, and transfer of your information as described in this Privacy Policy. We take necessary measures to ensure that any data transferred internationally complies with GDPR and other relevant data protection laws.