Last Update: November 1, 2024
The protection of your data is very important to us.
This is PagBrasil’s Privacy Policy, in which we explain how we process personal data provided to us by merchants, through their legal representatives (“Merchants”), and end users (“Users”) for the purpose of browsing, accessing and/or using our website pagbrasil.com (“Website”) or for the purpose of using the Services (defined below) provided by PAGBRASIL PAGAMENTOS ELETRÔNICOS LTDA., a legal entity, organized and in existence under the laws of Brazil, enrolled in the National Register of Legal Entities (CNPJ/MF) under No. 14.630.124/0001-65, headquartered in the City of Porto Alegre, State of Rio Grande do Sul, at Avenida Dr. Nilo Peçanha, nº 1.221, Conj. 902, Três Figueiras, CEP 91330-000 (“PagBrasil”).
The terms “PagBrasil”, “we” or “our” refer to PagBrasil; and the terms “you” or “your” refer to the Merchant or the User (depending on the case).
What is PagBrasil?
PagBrasil is a payment service provider, offering the services of (i) intermediation, (ii) processing and (iii) a payment gateway (jointly “Services”) to national and international digital platforms of Merchants, under the terms of applicable legislation and in accordance with the provisions of this Policy.
Understand how PagBrasil stores, uses and protects your personal data when the Merchant or the User browses and engages with the Website or uses PagBrasil’s Services
PagBrasil adopts internal policies and good governance practices regarding compliance with the applicable data protection regulations. PagBrasil is committed to the security of Merchants’ and Users’ information and personal data throughout the process of browsing, accessing, and using the Website, utilizing the Services, and submitting support requests to PagBrasil. Therefore, both Merchants’ and Users’ personal data are protected, kept strictly confidential, and not sold, exchanged, or disclosed to any third parties, except as expressly established in this Policy.
We do not knowingly collect or request personal data from individuals under 18 (eighteen) years old. Users under 18 (eighteen) years of age should not send us any data through our Website. If we become aware that we have collected personal data from an individual under 18 (eighteen) years old, we will disregard the information provided and will not retain it in our databases.
1. Collected information
By accepting the terms of this Policy, Merchants and Users expressly agree to provide only truthful, current, and accurate information and personal data, and refrain from misrepresenting their identity or information in any way when accessing and using the Website and/or Services.
1.1. What information do we collect when you visit our Website?
Even if you are not registered or logged in, by visiting and browsing the Website, we may receive information about your device (mobile or computer), collect IP addresses (Internet Protocol), and other information that internet browsers usually make available, such as pages visited, the duration of the visit, website browsing, browser type, and geolocation, in order to learn about Merchants and Users and improve our products.
In addition, PagBrasil uses cookies and similar technologies to identify when you visit the Website. For more information on cookie collection, please refer to section 4 of this Policy.
1.2. What information do we collect when a Merchant registers on our Website?
We collect information such as first name, last name, Individual Taxpayer Registry (CPF), email, and phone number (all referring to the Merchant’s legal representative), as well as the Merchant’s name, National Register of Legal Entities (CNPJ/ME), address, Merchant’s website, years in business and type of company. Occasionally, we may request Merchants’ balance sheets and profit and loss accounts.
1.3. What information do we collect when a User files a complaint on our Website?
We collect essential information to contact the Merchant or User, such as name, email, phone number and address, as well as relevant information on the content of your support request to identify the best way to assist you.
1.4. What information do we collect to provide the Services?
To provide the Services, we may receive from Merchants: Users’ information, individuals and legal entities, name, last name (in the case of individuals), CPF/CNPJ, email, address, phone number, credit card and bank account details (depending on the type of transaction). Information may be shared with companies that provide anti-fraud services, banks, or credit card acquirers in order to provide the Services.
Merchants hereby declare that the personal data complies with the purposes outlined in the agreement established with the Users. If you have any questions/suggestions/complaints about the processing of this data, please contact the Merchant directly.
2. Where do we store Merchants’ and Users’ information?
Information collected when accessing or using the Website and/or contracting the Services may be transferred and stored at a destination outside Brazil, to the extent permitted by law, including through service providers that use cloud technology (such as AWS, for example). By accessing and using the Website and submitting your personal data, Merchants and Users agree with the transfer, storage and processing of their information in the format described in this Policy. We take all necessary security, technical, and administrative measures to ensure that your information and personal data is processed securely and in accordance with this Policy.
3. What do we do with the personal data we collect?
We collect, store, process, and/or use your personal data exclusively for the purposes described in this Policy, in accordance with Lei Geral de Proteção de Dados (LGPD) and other applicable laws and regulations.
We collect your data for the purposes of providing the Services, analyzing Merchants’ and Users’ experiences, preventing fraud and sending marketing messages from the Website, grounded on the legal basis of compliance with legal and regulatory obligations imposed on PagBrasil, performance of a contract, pursued legitimate interests (to the extent permitted by law), and based on consent.
In order to provide the Services, for legal and regulatory obligations and credit protection, data may be shared with companies that provide anti-fraud services, banks, credit card acquirers and other financial institutions.
PagBrasil may contact Users to address issues related to the Services.
The data collected may also be used to generate a prepaid payment account in the User’s name, exclusively for the purpose of providing the payment services offered by PagBrasil, being that the funds are automatically transferred for the settlement of the transaction, carried out in cases where the Merchant is located outside Brazil and requires funds to be transferred abroad.
The processing of your data will occur under the purposes and legal basis presented below:
PURPOSE
Providing payment processing Services, refunds and chargebacks, identifying and preventing fraud, sending transaction notifications, contacting Users about transactions.
DATA
First name, last name (in the case of individuals), CPF/CNPJ, email, address, phone number, credit card and bank account details (depending on the type of transaction).
LAWFUL BASIS
– Performance of a contract
– Compliance with legal and regulatory obligations
– Credit protection
PURPOSE
Generating a prepaid payment account in the User’s name for cross-border transactions where the Merchant is located outside Brazil and require fund transfers abroad.
DATA
First name, last name, CPF, address, phone number, and bank account.
LAWFUL BASIS
– Performance of a contract
– Compliance with legal and regulatory obligations
PURPOSE
Sending marketing communications.
DATA
First name, last name, CPF, email, phone number (all related to the Merchant’s legal representative).
LAWFUL BASIS
– Legimate interest
PURPOSE
Managing complaints and requests.
DATA
First name, last name (in case of individuals), CPF/CNPJ, email, address, phone number, credit card and bank account details (depending on the type of transaction).
LAWFUL BASIS
– Performance of a contract
– Compliance with legal and regulatory obligations
4. How do we use cookies and other technologies?
PagBrasil may use cookies or similar technologies, such as web beacons, to collect information about activities carried out on our Website. This helps us identify operational issues, measure Website performance, set User preferences, and other related purposes.
Cookies are small data files stored in or collected by your browser that allow the Website to function properly and may record details about your preferences, device and interactions with our content, enabling a more personalized and efficient browsing experience. Cookies help analyze internet traffic, identify when the User visited a specific website, promote remarketing, set the User’s language preferences, conduct fraud and risk assessments, and provide insights about the User’s interests.
To learn more about each cookie category and adjust your preferences, access the Cookie Settings. You can change your preferences at any time. However, disabling certain types of cookies may cause some Website features to not function properly or become unavailable, potentially impacting your browsing experience. If you wish, you can block or delete stored cookies by accessing your browser settings.
Cookies from Users browsing our Website without being registered or logged in do not directly reveal personal data, only information about the device, such as the IP address (Internet Protocol) and other information usually made available by internet browsers, such as pages visited, the duration of the visit, website browsing, browser type, and geolocation. Personal data will only be directly accessed if you choose to share it, such as when registering on the Site, filling out a form, or contacting us.
5. Internet Security
We work towards implementing security measures that protect the information stored in our records, making the best efforts to prevent violation attempts or unauthorized access to our database. These measures include data encryption, information access control, firewalls, software solution architecture with invasion prevention, and the use of HTTPS.
Data processing is carried out through computers and/or enabled information technology tools, following organizational procedures and means strictly related to the objectives established in this Privacy Policy. Furthermore, access to personal data is restricted to employees duly authorized by PagBrasil, ensuring the proper use of data by employees.
Despite PagBrasil’s efforts, we emphasize that information transmission over the internet is not completely secure due to several factors, including network and operational issues, and PagBrasil cannot guarantee complete security of the data transmitted by Merchants and Users to PagBrasil. Although we do our best to protect your information, we cannot guarantee the security of the data transmitted to our Website. Any transmission is the sole responsibility of the Merchants and Users, who, by agreeing to this Policy, expressly acknowledge and assume such responsibility.
Once information is received through the Website, we are committed to ensuring it is secure within the Website environment. To prevent unauthorized access or disclosure of Merchants’ and Users’ data, we have implemented appropriate physical, electronic, and administrative procedures to protect and secure the information we collect. We hold a PCI DSS Level 1 Certificate, and all communication is encrypted and stored in our databases using state-of-the-art techniques for information protection and security.
We keep the date, time, and IP address of your access to our Website for at least six (6) months to comply with legal obligations.
6. Data Sharing
Respecting legal limits, data may be shared with companies who provide anti-fraud services, storage services, banks, credit card acquirers, competent authorities, and other payment or financial institutions authorized by the Central Bank of Brazil (Banco Central). Data may also be shared when you allow it, in accordance with the information provided at the time the authorization is requested by PagBrasil.
Understand with whom your data is shared: you may request information about the public and private entities with which PagBrasil has shared your data through the mechanisms indicated on the Website. PagBrasil may share such information to the extent that it does not violate business secrets and confidentiality obligations.
7. Understand the mechanisms we provide to protect your rights
You have rights and guarantees concerning your personal data. Below, you will find clear and transparent mechanisms for the legal representatives of Merchants and Users to exercise their rights. Whenever necessary, our team will be ready to handle any requests.
Confirm and access your personal data: You may request details and/or a copy of your personal data processed by us. Just access https://www.pagbrasil.com/support/.
Change or correct your personal data: If you want to change your personal data or if you have any reason to believe or suspect that any data we have about you is incorrect or incomplete, access https://www.pagbrasil.com/support/.
If you wish, you may withdraw consent, delete, block, or request the anonymization of your personal data: You may withdraw your consent, whenever the processing of personal data is based on consent, request the deletion of your data or deactivate your account at any time, in accordance with Law No. 13.709/2018. The withdrawal of consent will result in the deletion of all personal data, except (i) anonymized data and (ii) data necessary for PagBrasil and/or third parties involved in providing the Services for judicial, arbitration, or administrative defense, compliance with legal and regulatory obligations, performance of a contract (if applicable) and credit protection.
We will store your history: You may contact PagBrasil, and we are authorized to contact you to enable you to access certain features of our Services, clarify doubts about the Website or make complaints or suggestions through the email support@pagbrasil.com, phone numbers you provide, or via WhatsApp (or other instant messaging apps). The conversations will be stored by us, and we may use their content as a means of evidence in court, for the provision of our Services, or in other instances specified by law.
8. Duration of data processing
Your data will be stored for as long as necessary for the complete execution of the Services, for judicial, arbitration, or administrative defense, compliance with legal and regulatory obligations, fraud prevention and credit protection.
9. Applicable law and jurisdiction
This Privacy Policy shall be interpreted according to Brazilian law, in the Portuguese language, with the jurisdiction of the relevant courts of the city of Porto Alegre elected to settle any dispute or controversy involving this document, except for specific cases of personal, territorial, or functional jurisdiction as provided by applicable law.
10. Changes to this Policy
PagBrasil may change this Policy at any time. In the event of changes to the Policy, PagBrasil commits to informing Users about such changes by means of a post on our website or by email. For significant changes requiring the consent of the Merchant and User, PagBrasil shall obtain the respective consents.
If the Merchant or the User do not agree with the new Policy, the Merchant or User may reject it, however, they will not be able to use the Services or the Website.
11. Contact us
If you have any questions or complaints regarding this Privacy Policy or if you wish to exercise any of your rights provided in this Policy or applicable law, please contact us through our support channel. You can also contact our data protection officer, Júlia Fichtner, via email at dpo@pagbrasil.com.
