Privacy policy

Suple Gold respects the privacy of its customers, users, and visitors. This Privacy Policy explains how Suple Gold, a legal entity, collects, uses, stores, protects, and shares personal data in the context of its website, customer service, orders, deliveries, and customer relationships.

By using our website, registering, making a purchase, requesting a quote, contacting us through official channels, or using our services, the user declares awareness of the practices described in this policy, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and other applicable regulations.

1. Identification of the Controller

Company name: Suple Gold

Email for privacy matters: contato@suplegold.com

2. Personal Data Collected

Suple Gold may collect the following personal data, depending on the user’s interaction with our channels:

Identification data: full name or other identification information, when necessary.
Contact data: email, phone number (if provided), and full address (registration, billing, and delivery).
Order data: products purchased, purchase history, and service requests.
Payment data: card and wallet payment information processed exclusively by a secure gateway. Suple Gold does not request full card details by email or any channel outside the secure payment environment.
Tax and accounting data: information necessary for compliance with tax and accounting obligations.
Browsing data: IP address, device type, browser, pages accessed, and time spent on the suplegold.com website.

3. Purpose of Processing

The personal data collected by Suple Gold is used for the following purposes:

Create and maintain customer registration.
Process orders, quotes, payments, and billing.
Prepare, separate, handle, check, ship, and deliver products.
Confirm data, provide customer service, and guide on orders, delivery, or support.
Comply with legal, regulatory, tax, health, and administrative obligations.
Prevent fraud and protect the rights of Suple Gold, customers, and third parties.
Improve website functionality, shopping experience, and quality of customer service.
Send promotional communications, offers, or news, when there is user consent or applicable legal basis.

4. Legal Basis for Processing

The processing of personal data by Suple Gold is carried out based on the following grounds set forth in Article 6(1) of the UK GDPR:

Contract execution: to process purchases and carry out deliveries (Art. 6(1)(b)).
Compliance with legal obligation: for tax, accounting, and requirements from regulatory authorities (Art. 6(1)(c)).
Consent: for sending marketing communications and news, and for non-essential cookies (Art. 6(1)(a)).
Legitimate interests: for fraud prevention and service improvement (Art. 6(1)(f)).

When processing depends on consent, the user may withdraw it at any time, without prejudice to situations where data retention is necessary to comply with legal obligations or other grounds authorised by legislation.

5. Data Sharing

Suple Gold does not trade, sell, or rent its customers’ personal data. Sharing occurs only when necessary for service provision or compliance with legal obligations, with:

Carriers and logistics operators: for processing and tracking deliveries.
Payment gateways and financial institutions: for secure processing of transactions.
E-commerce, hosting, security, and technology platforms: for technical operation of the online store.
Accounting and tax compliance systems: for compliance with tax and accounting obligations.
Public authorities, regulatory bodies, and health authorities: when there is a legal obligation, order, or valid request.
Third parties necessary for the defence of rights of Suple Gold, customers, or third parties, in administrative, judicial, or extrajudicial proceedings.

Because Suple Gold is based in Brazil and works with international service providers, personal data may be processed outside the United Kingdom. Where required by law, we use appropriate safeguards for these transfers in accordance with the UK GDPR.

6. Cookies and Browsing Technologies

The Suple Gold website uses cookies to:

Keep your browsing session active and secure.
Remember items added to the shopping cart.
Analyse site traffic volume for technical improvements.
Personalise your experience according to your preferences.

Cookies that are strictly necessary for the site to work are always active. Other cookies, such as analytics and personalisation, are used only after you give consent through our cookie banner, and you can change or withdraw your choice at any time.

You may also configure your browser to refuse cookies, but please be aware that some site features, such as login, cart, and checkout, may be affected.

7. Data Security

Suple Gold adopts the following measures to protect your information:

SSL certificate with HTTPS encryption on all pages.
Payment processing in a secure and isolated environment.
Data access restricted exclusively to authorised personnel.
Storage on servers protected with high security standards.

Important: no digital platform is entirely free of risk. In the event of a significant security incident, Suple Gold will take appropriate measures in accordance with applicable legislation.

8. Data Retention

Your data is stored for as long as necessary for:

Execution of the purchase contract and compliance with product warranty.
Compliance with tax and accounting obligations, for the period required by applicable law.
Regular exercise of rights in judicial or administrative proceedings.

After these periods end, the data is duly deleted or anonymised, except where there is a legal basis for retention.

9. Your Rights (UK GDPR)

According to the UK GDPR, you have the following rights:

Confirmation: to know whether we process your data.
Access: to request a copy of all your personal data in our possession.
Rectification: to request the update of incomplete or incorrect data.
Restriction: to request that we limit the processing of your data in certain situations.
Objection: to object to the processing of your data in certain situations, including direct marketing.
Portability: to receive your data in a structured format.
Erasure: to request the deletion of your data where the law allows.
Withdrawal of consent: to withdraw your authorisation for use at any time.
Automated decisions: to request review of decisions made solely based on automated processing.

To exercise any of these rights, contact us at contato@suplegold.com.

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO), at ico.org.uk.

10. Data of Children and Adolescents

The Suple Gold website is not directed at children or adolescents. Purchases, registrations, and requests must be made by adults or their legal guardians. When it is necessary to process data related to minors for order fulfilment, processing will occur with the participation or authorisation of the legal guardian.

11. Commercial Communications

Suple Gold may send operational communications related to orders, delivery, support, and customer service without the need for additional consent. Promotional communications, offers, and campaigns will only be sent when there is user consent. Unsubscribing may be requested at any time through the available channels, without prejudice to the sending of operational messages necessary for the order.

12. Changes to This Policy

This Privacy Policy may be updated periodically to reflect improvements or changes in legislation. We recommend regularly checking this page at suplegold.com. Significant changes will be communicated by email or notice on the site.

Business Information

Email: contato@suplegold.com

Address: Rua Anna Fachin Vieira, 115, Jardim Joaquim Procopio de Araujo Ferraz, Ribeirão Preto, São Paulo, 14065-360, Brazil.

Business Hours: Monday to Friday, 8:00 AM to 6:00 PM (London time, GMT/BST), Saturday and Sunday Closed

Response Time: 1 to 2 business days