This policy explains which personal data we process, why, and what you can ask of us. It follows Brazil’s General Data Protection Law (LGPD, Law 13.709/2018) and the data protection laws that apply to you.
Who controls your data
The business that operates netstore.blog. Privacy contact: [email protected].
What we collect
- Account: name, email address and, if you provide it, phone number.
- Orders: products bought, amounts, order history, support messages and the details a product needs for delivery or activation (for example, the email or account ID to activate).
- Payment: processed by the payment provider. We only receive the confirmation and, for cards, the last digits — we never store the full card number or the security code.
- Browsing: IP address, browser, device, pages viewed and where the visit came from, through cookies.
How we use it
- To process orders, take payment, deliver products and provide support and warranty;
- To meet tax and legal obligations;
- To prevent fraud and abuse;
- To send order updates and, if you agree, news and offers;
- To measure traffic and improve the store.
Legal basis
Performance of a contract for everything an order requires; legal obligation for tax and record keeping; legitimate interest for fraud prevention and measurement; consent for marketing and non-essential cookies, which you can withdraw at any time.
Who we share it with
- The payment provider, to authorise the charge;
- The supplier that fulfils the product — only what delivery needs, such as the email or account ID you give us for activation;
- Tax and accounting providers, when the law requires it;
- Hosting, email and analytics providers.
We do not sell personal data. Some providers may process data outside your country, with safeguards compatible with the applicable law.
How long we keep it
Order and invoice data for the period tax law requires (usually 5 years). Account data while the account exists. After that, we delete or anonymise it.
Your rights
You can ask for confirmation, access, correction, anonymisation, portability, deletion, information about sharing and withdrawal of consent. Write to [email protected] with [Privacy] in the subject — we reply within 15 days. Some data cannot be deleted while a legal retention period applies.
Security
The site uses an encrypted connection and payments run in the provider’s environment. If an incident creates a relevant risk, we will notify you and the authorities as the law requires.
Children
The store is not intended for people under 18 and does not knowingly process children’s data.