Privacy Policy

Your privacy, cared for

At Surya Brasil, we believe you should always know what you're putting on your body — and what happens to your personal information is no different. This policy explains, in plain and honest language, how we collect, use, share, and protect your data.

We've written it to comply with the GDPR and the world's other major privacy laws — including the LGPD, CCPA/CPRA, VCDPA, CPA, CTDPA, UCPA, FDBR, OCPA, TDPSA, MCDPA, DPDPA, ICDPA, NDPA, NHDPA, NJDPA, APPI, PIPEDA, APA-NZPA, PDPA, and POPIA — so that wherever you're reading from, your rights are respected.

By using our website or sharing your personal information with us, you're placing your trust in us. We don't take that lightly.

1. Who's responsible for your data

The data controller responsible for your personal information is:

2. What we collect

We collect only what helps us serve you well:

• Who you are — your name, email address, phone number, and billing/shipping address.
• How you reach us — your IP address, browser type, device details, operating system, and referring pages.
• What you order — purchase history, order details, and payment method (handled securely by our trusted payment providers).
• How you use our Site — pages you visit, time spent, and actions you take.
• Cookies — used for analytics, security, and personalisation. You're always in control of these through our cookie settings.

3. Why we collect it

Everything we collect serves a clear purpose:

• To process and fulfil your orders.
• To manage your account and support you when you need us.
• To meet our legal obligations.
• To keep improving our products, service, and your experience.
• To send you transactional updates — and marketing, where you've allowed it.
• To honour your consent and privacy preferences.

4. Our legal basis for using your data

Under the GDPR, we always have a lawful reason for processing your information:

• Performance of a contract — to fulfil your orders and requests.
• Legal obligation — to meet accounting, tax, and regulatory requirements.
• Legitimate interests — to improve our website and protect against fraud.
• Consent — for marketing, cookies, and other specific uses, freely given and freely withdrawn.

5. Keeping your data safe

We apply appropriate technical and organisational measures to protect your personal information from unauthorised access or misuse. No system is ever perfectly secure, but safeguarding your trust is something we work at continuously.

6. Sharing and international transfers

We never sell your data. We share it only with the partners who help us serve you — for order processing, analytics, logistics, and regulatory compliance. When your information travels outside your region, we protect it with recognised safeguards such as the European Commission's Standard Contractual Clauses (SCCs), so it stays as protected abroad as it is at home.

7. Your rights

Your data belongs to you. You always have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct anything inaccurate or incomplete.
• Portability — receive your data in a machine-readable format.
• Object or restrict — withdraw consent for certain processing.
• Erasure — ask us to delete your data.
• Complain — reach out to your local Data Protection Authority (in Italy, the Garante per la Protezione dei Dati Personali, www.garanteprivacy.it).

8. How to exercise your rights

Simply submit your request through the form below. We'll verify your identity and respond within the timeframe the law requires.

9. Cookies and tracking

We use cookies for analytics, personalisation, and consent management. You can change your preferences at any time through our cookie settings.

10. How long we keep your data

We keep your information only as long as we genuinely need it — to complete your transactions, meet legal obligations (such as retaining accounting records for 10 years under Italian and EU tax law), and resolve any disputes. After that, we delete or anonymise it.

11. Updates to this policy

We may update this policy from time to time. The current version and its effective date will always appear here.

12. Contact us

Questions about this policy or your personal data? We're always here to help — reach us through the form below, or at the details here:

---

📄 Submit a Privacy Request

Please use the form below to submit any request related to your personal data — including access, correction, download, or deletion. We'll verify your identity and respond within the legally required timeframe.

Full Name * Email Address * Request Type * Select… Access to personal data Rectification (edit / update data) Data portability (download all data) Right to be forgotten (delete my data) Other privacy-related request Additional Details (optional) Submit Request

By submitting this form, you acknowledge that your data will be used solely to verify and process your privacy request, in accordance with our Privacy Policy.