Privacy Policy

1. Introduction

Casa Leon LTDA ("we", "our", or "us"), registered under CNPJ 09.307.788/0001-58, with its principal place of business at R. Mato Grosso, 253, Centro, Poços de Caldas - MG, 37701-006, is committed to protecting your privacy and personal data.

This Privacy Policy describes how we collect, use, store, and share your personal information in compliance with Brazil's General Data Protection Law (Lei Geral de Proteção de Dados — LGPD, Law No. 13.709/2018) and other applicable regulations.

2. Data We Collect

• Identification data: full name, CPF/CNPJ, date of birth
• Contact data: email address, phone number, physical address
• Purchase data: product selections, style preferences, order history, room-type preferences
• Gift registry data: registrant names, event type, item selections, and recipient details (provided voluntarily)
• Delivery data: delivery address and scheduling preferences
• Payment data: billing information processed through secure payment systems
• Fiscal data: information required for NF-e/NFC-e and tax compliance
• Navigation data: IP address, browser type, cookies, access logs

3. How We Use Your Data

• Processing home goods and personal product purchases
• Managing gift registries and event-related orders
• Providing personalized product recommendations based on style and room preferences
• Processing exchanges and returns in compliance with consumer protection regulations
• Processing payments and issuing invoices (NF-e/NFC-e)
• Sending new collections, seasonal arrivals, and promotions (with consent)
• Complying with consumer protection and legal obligations

4. Legal Basis for Processing

• Consent provided by the data subject
• Performance of a contract or preliminary procedures related to a contract
• Compliance with legal or regulatory obligations
• Legitimate interests of the controller, provided fundamental rights are preserved

5. Data Sharing

• Product suppliers for special orders and sourcing
• Delivery partners for order fulfillment
• Payment processors for secure transaction handling
• Tax authorities as required by fiscal regulations
• Government authorities when required by law

6. Data Retention

Your personal data will be retained only for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law. Gift registry data is retained until the event date plus a reasonable post-event period for exchanges. Style preference profiles are retained until you request deletion. Transaction and fiscal data are retained as required by tax regulations. Upon expiration, your data will be securely deleted or anonymized.

7. Your Rights

Under the LGPD, you have the following rights:

• Confirmation of the existence of data processing
• Access to your personal data
• Correction of incomplete, inaccurate, or outdated data
• Anonymization, blocking, or deletion of unnecessary or excessive data
• Portability of data to another service provider
• Deletion of data processed with your consent
• Information about entities with which your data has been shared
• Information about the possibility of denying consent and its consequences
• Revocation of consent

To exercise any of these rights, please contact us using the information in Section 10.

8. Cookies

Our website may use cookies and similar technologies to enhance your browsing experience. You may configure your browser to refuse cookies; however, some features may not function properly without them.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Despite our efforts, no method of electronic transmission or storage is completely secure.

10. Contact Information

11. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page with a revised "Last updated" date.