Privacy Policy

Privacy Policy

Ecobraz respects the privacy of users, clients, partners, visitors and other individuals who interact with its digital channels. This Privacy Policy explains, in objective terms, what information may be collected, how it may be used, in which situations it may be shared and which rights may be exercised by the data subject.

This policy applies to the use of the website, contact forms, service channels, collection requests, newsletter subscriptions, commercial communications and other interactions carried out with Ecobraz through digital or operational means.

1. Information We May Collect

We may collect information provided directly by the user, including:

• full name;
• company or institution represented;
• position or area of activity;
• email address;
• telephone or WhatsApp number;
• city, state and address required for collection assessment;
• information about equipment, waste or assets to be disposed of;
• messages sent through forms, email, telephone, WhatsApp or other service channels.

We may also automatically collect technical browsing information, such as:

• IP address;
• browser type;
• device used;
• pages accessed;
• date and time of access;
• visit origin;
• interactions with forms, pages and website content;
• cookies and similar technologies.

2. Purposes for Using Information

The information collected may be used for the following purposes:

• to respond to contact, quotation, collection or service requests;
• to assess the technical and operational feasibility of reverse logistics, electronic waste disposal, asset disposal and media sanitization services;
• to organize operational records related to collection, destination and environmental documentation;
• to issue documents, proof, records or reports related to the contracted service;
• to comply with legal, regulatory, environmental, tax or contractual obligations;
• to improve website navigation, security, functionality and performance;
• to send institutional, technical or commercial communications, when there is an appropriate legal basis or applicable consent;
• to prevent fraud, unauthorized access, misuse of digital channels or security incidents;
• to support internal governance, audit, supplier control and risk management processes.

3. Legal Bases for Data Processing

The processing of personal data may occur based on the legal grounds provided by Brazil’s General Data Protection Law (Law No. 13,709/2018), including:

• consent of the data subject, when applicable;
• performance of a contract or preliminary procedures related to a contract;
• compliance with a legal or regulatory obligation;
• regular exercise of rights in administrative, judicial or arbitration proceedings;
• legitimate interest of Ecobraz or third parties, respecting the fundamental rights and freedoms of the data subject;
• credit protection, when applicable;
• protection of life, safety or physical integrity, when applicable.

4. Sharing of Information

Ecobraz may share personal data only when necessary and within legitimate purposes, including with:

• technical, operational, technological, logistics, accounting, legal or administrative service providers;
• partners or suppliers involved in the execution of contracted services;
• public authorities, regulatory, environmental, tax or judicial bodies, when there is a legal obligation or legitimate request;
• hosting, analytics, security, communication, service or customer relationship management platforms;
• companies or institutions involved in audit, governance, compliance or documentary control processes, when applicable to the contracted service.

Sharing will be limited to what is necessary for the corresponding purpose and must observe reasonable security, confidentiality and data protection measures.

5. Cookies and Browsing Technologies

The website may use cookies and similar technologies to improve the browsing experience, measure performance, understand access patterns, protect the digital environment and improve content and services.

Cookies may be used to:

• remember browsing preferences;
• enable technical operation of the website;
• analyze traffic and performance;
• identify the most accessed pages;
• improve security and prevent abuse;
• support institutional or commercial campaigns, when applicable.

The user may configure their browser to block or delete cookies. However, some website features may be affected.

6. Storage and Retention of Data

Personal data will be kept for the period necessary to fulfill the purposes described in this policy, observing legal, regulatory, tax, environmental, contractual and accountability obligations.

Data related to contracted services, environmental documentation, collection, disposal, destination or audit records may be retained for the period necessary for compliance, governance, defense of rights and documentary proof purposes.

When the data is no longer necessary, it may be deleted, anonymized or kept in restricted form when there is a legal, regulatory or legitimate need for preservation.

7. Information Security

Ecobraz adopts reasonable technical, administrative and organizational measures to protect personal data against unauthorized access, misuse, alteration, loss, destruction or unauthorized disclosure.

Despite protection efforts, no digital environment is absolutely secure. Ecobraz works to reduce risks and respond to any incidents in accordance with applicable law and internal security procedures.

8. Rights of Data Subjects

Under the LGPD, the personal data subject may request:

• confirmation of the existence of data processing;
• access to personal data;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary, excessive or unlawfully processed data;
• data portability, when applicable;
• information about data sharing;
• revocation of consent, when the processing is based on consent;
• objection to processing, when applicable;
• deletion of data processed based on consent, subject to legal retention hypotheses.

Requests will be analyzed according to applicable legal, technical and operational requirements.

9. Contacting Ecobraz

To exercise rights related to personal data, clarify doubts about this Privacy Policy or request information about data processing, the data subject may contact Ecobraz through its official channels.

Email: [email protected]

Telephone: +55 (11) 4329-2001

Ecobraz may request additional information to confirm the requester’s identity and protect personal data against unauthorized access.

10. Links to Third-Party Websites

The Ecobraz website may contain links to third-party websites, platforms or services. Ecobraz is not responsible for the privacy, security, content or operation practices of these external environments.

We recommend that users read the privacy policies of the respective websites or platforms before providing personal data.

11. Updates to this Policy

This Privacy Policy may be updated periodically to reflect legal, regulatory, technical, operational or institutional changes.

The current version will be published on this website, with the update date indicated when applicable.

12. Final Provisions

By using the website, filling out forms, requesting service, contracting services or interacting with Ecobraz through digital channels, the user acknowledges the terms of this Privacy Policy.

This policy must be interpreted together with other terms, contracts, operational documents and communications applicable to the services provided by Ecobraz.

Last updated: May 2026.