MEG & MEG operates in accordance with the General Data Protection Law (Law No. 13,709/18) and is committed to the privacy and security of our customers during purchases and visits to our website and across all our communication channels.

Therefore, please read our Privacy Policy ("Policy") carefully. It is intended to inform you about our data processing practices, ensuring privacy and transparency in the development of our activities.

Through this Policy, MEG & MEG appoints and provides direct contact with the Data Protection Officer via email at dpo@casarotto.adv.br.

PERSONAL DATA COLLECTED
Personal data will be collected in the following situations:

MEG NEWS

Data collected: email

Purpose: to share company news, products, and launches with the subscriber via email.

CONTACT

Data collected: name, email, and phone number

Purpose: to contact the requesting user-data subject to answer questions as appropriate. The form for filling in these fields generates an integration with the ZENDESK platform, where MEG & MEG manages customer service. To review the ZENDESK platform's Privacy Policy, access the link.

ACCOUNT LOGIN

Data collected: email, first name, last name, full address, phone number, and CPF number.

Purpose: to register the user-data subject to process purchases and ship acquired products. The form is filled out on the SHOPIFY platform interface, where MEG & MEG manages orders. To review the SHOPIFY platform's Privacy Policy, access the link.

MEG & MEG does not have access to financial information entered for payment of purchases made on the website, as such information is entered directly into the interface of payment intermediary companies PAYPAL and/or MERCADO PAGO. To review the PAYPAL platform's Privacy Policy, access the link. To access the MERCADO PAGO platform's Privacy Policy, access the link.

Simple navigation on our website does not constitute the collection of personal data by MEG & MEG.

DATA SHARING

MEG & MEG prioritizes the confidentiality of our customers' data and does not transfer, rent, or sell your email address or other registration data.

However, to ensure the functionality of shipping orders placed on the website and customer service, MEG & MEG may share user data with trusted partners who follow acceptable security standards and are subject to confidentiality obligations.

Thus, we share information with:

• E-commerce platform: to process purchases made

• ERP company: for management, invoice issuance, and order fulfillment

• Post office and carriers: for issuing postage codes and shipping orders

• Service platform: to manage service requests made on the website or via email ajuda@megemeg.com.br

There will be international transfer of personal data, insofar as the user-data subject's data may be transferred, stored, and processed outside of Brazil by the aforementioned third parties, as they are foreign platforms. Thus, by agreeing to this Policy, the user-data subject expressly agrees to the transfer of their data under these conditions.

Finally, the collected data may be shared with judicial, governmental, or administrative authorities, provided there is a legal provision and/or a specific judicial order to do so.

TO REQUEST CORRECTION, ALTERATION, OR REMOVAL OF YOUR PERSONAL DATA

If you wish to request the correction, alteration, or removal of your personal data, you can do so directly via this link.

Registration information may also be changed at the time of a new purchase. In the event of a request to delete personal data, MEG & MEG will delete data that it is not obligated to store for regulatory, tax, insurance, legal action, or other legal requirements.

RETENTION PERIOD

MEG & MEG strictly collects the personal data necessary for processing purchases made on the website, thus it may retain personal data for a period of 10 (ten) years for internal evaluation of service quality levels and analysis of post-sales indicators.

DATA SECURITY

MEG & MEG adopts appropriate technological and administrative measures for the protection of personal data that ensure the confidentiality and privacy of the data provided by customers.

In addition to its commitment to data protection, MEG & MEG emphasizes the importance of users taking appropriate measures to protect their own data, such as not sharing their registration information and access password with third parties.

COOKIES

The MEG & MEG website may collect device and internet browser information from the user through cookies to enable functionalities such as: offering a better website experience with more efficient service, improving the technical functioning of pages, and saving some access preferences.

By accepting the use of cookies, the user agrees to the above functionalities and the retention of information related to their preferences and data already registered at least once, thus there is no need to repeatedly enter the same information with each access.

If you do not want cookies to be used during your navigation, simply refuse their use on the site. This action may compromise some website functionalities, preventing some services from working correctly.

UPDATES

Our Policy may be changed at any time, and the updated version will always be available on our website, so we advise you to periodically check the provided version. Browsing the website means you agree to and accept the new updates.

Versions: PPRIV-MEG-00 – 10/17/2021