National | International Privacy Policy

Last Updated: November 28, 2025

FÁBIO ROBERTO CRISCI DA FONSECA, a private legal entity headquartered at Avenida do Café, 77, Vila Guarani, São Paulo, SP, Brazil, ZIP Code 04311-000, registered with the Brazilian National Registry of Legal Entities (CNPJ/MF) under No. 33.528.042/0001-59 ("Merchant"), takes your privacy seriously and is committed to protecting the personal data of all customers, partners, suppliers, and users ("Users" or "you") of the website https://www.fabrinicrisci.com.br, as well as all channels operated by the Artist, including https://loja.fabrinicrisci.com.br, and any other website, online store, or application operated by the Merchant (collectively referred to as the "Store").

This Privacy Policy ("Privacy Policy") explains how we collect, use, process, store, and disclose information obtained through your visits to our Store and through communications exchanged with you ("Communications"). This Privacy Policy applies exclusively to information collected through the Store.

BY ACCESSING THE STORE, SENDING COMMUNICATIONS, OR PROVIDING ANY PERSONAL DATA, YOU ACKNOWLEDGE THAT YOU HAVE READ AND AGREE TO THE TERMS OF THIS PRIVACY POLICY, WHICH DESCRIBES THE PURPOSES AND METHODS OF PROCESSING YOUR PERSONAL DATA.

This Privacy Policy provides an overview of our privacy practices, the choices available to you, and the rights you may exercise regarding your Personal Data. If you have any questions about how your Personal Data is processed, please contact us at [email protected].

This Privacy Policy does not apply to third-party applications, products, services, websites, or social media platforms that may be accessible through our Store. Accessing such links may cause you to leave our Store and may result in third parties collecting or sharing information about you. We do not control, endorse, or assume responsibility for the privacy practices of such third parties. We encourage you to review their privacy policies before providing any Personal Data.

If you provide us with Personal Data relating to another individual, you represent that you are legally authorized to do so and that you have obtained the necessary consent for such disclosure.

This Privacy Policy explains how the personal data of customers, visitors, partners, and suppliers is collected, processed, and protected in accordance with the Brazilian General Data Protection Law (LGPD), the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and any other applicable data protection legislation in the jurisdictions where our services are available.

1. Definitions

Personal Data: Any information relating to an identified or identifiable natural person, including but not limited to name, email address, postal address, identification documents (passport, CPF, tax identification number), IP address, and similar information.

Sensitive Personal Data: Information concerning racial or ethnic origin, religious beliefs, political opinions, health, sexual orientation, biometric data, or genetic information.

Processing of Personal Data: Any operation performed on Personal Data, whether by automated or non-automated means, including collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, making available, alignment, combination, restriction, erasure, or destruction, as defined under applicable data protection laws.

User: Any individual who accesses, browses, interacts with, or conducts transactions through the Store.

Data Protection Laws: All applicable laws governing the processing of Personal Data, including but not limited to the Brazilian General Data Protection Law (Law No. 13,709/2018 – LGPD), the GDPR, the CCPA, and any other applicable privacy legislation.

2. Collection of Personal Data

Depending on your location and your interaction with our services, we may collect:

  • Identification and contact information, including full name, address, email address, telephone number, country of residence, and legally required identification documents (such as CPF, passport, or tax identification number).

  • Browsing information, including IP address, approximate geographic location, browser type, operating system, pages visited, visit duration, cookies, and analytical data.

  • Information voluntarily provided by the User, including messages, completed forms, purchasing preferences, comments, and uploaded files.

For customers residing in Brazil, a CPF or CNPJ may be required for invoice issuance.

For international customers, an equivalent identification document may be requested when legally necessary (such as a passport or local tax identification number).

3. Purposes of Processing

Your Personal Data may be processed to:

  • Process and deliver artwork purchases;

  • Issue invoices and legally required tax documents;

  • Manage customer registration and communications;

  • Improve website navigation, performance, and services;

  • Send news, updates, and promotional communications (with your consent where required);

  • Comply with applicable legal, tax, and regulatory obligations in Brazil and internationally;

  • Protect our systems, prevent fraud, and safeguard legal rights.

4. Legal Bases for Processing

Your Personal Data is processed based on one or more of the following legal grounds:

  • Your freely given and informed consent;

  • Performance of a contract (such as the purchase of artwork);

  • Compliance with legal or regulatory obligations;

  • Legitimate interests, provided that your fundamental rights and freedoms are respected.

For residents of the European Union and the United Kingdom, all processing activities are conducted in accordance with the legal bases established by the GDPR.

5. Sharing of Personal Data

Your Personal Data may be shared with:

  • Payment service providers (such as Stripe, PayPal, Mercado Pago);

  • Shipping companies and logistics providers (such as DHL, FedEx, and Correios);

  • Hosting providers, CRM platforms, email service providers, and technology partners (such as Hostinger, Google, and Meta);

  • Tax, governmental, or regulatory authorities whenever legally required.

We do not sell, rent, or transfer your Personal Data to third parties for commercial purposes without your consent.

6. Data Storage and Retention

Your Personal Data is stored in secure environments protected through restricted access, encryption, and appropriate technical and organizational security measures.

We retain Personal Data only for as long as necessary to fulfill the purposes described in this Privacy Policy or to comply with applicable legal and regulatory obligations.

7. Your Rights

Depending on your jurisdiction, you have the right to:

  • Obtain confirmation as to whether your Personal Data is being processed;

  • Access, update, or correct your Personal Data;

  • Request deletion, restriction, anonymization, or blocking of your Personal Data;

  • Withdraw your consent at any time where processing is based on consent;

  • Request data portability;

  • Receive information regarding the sharing of your Personal Data.

Residents of the European Union also have the right to object to certain automated processing activities.

California residents may exercise their rights under the California Consumer Privacy Act (CCPA), including the right to opt out of the sale of Personal Data where applicable.

Requests should be submitted to:

Email: [email protected]

8. Information Security

The Merchant adopts appropriate technical and organizational measures to protect Personal Data against unauthorized access, loss, misuse, disclosure, alteration, or destruction.

However, no electronic transmission or storage system can be guaranteed to be completely secure. If you suspect any security incident involving your Personal Data, please contact us immediately through our official communication channels.

9. Children's Privacy

We do not knowingly collect Personal Data from minors as defined under the applicable laws of each jurisdiction.

If you believe that Personal Data relating to a child has been improperly collected, please contact us immediately so that we may remove such information.

10. Cookies and Similar Technologies

We use cookies and similar technologies to improve user experience, personalize content, analyze website performance, and enhance our services.

You may manage your cookie preferences through your browser or device settings.

11. Third-Party Websites

Our Store may contain links to third-party websites or platforms.

We are not responsible for the privacy practices of such third parties and encourage you to review their respective privacy policies before providing any Personal Data.

12. Updates to this Privacy Policy

This Privacy Policy may be amended at any time to reflect legislative, operational, or technological changes.

The most current version will always be available at:

https://loja.fabrinicrisci.com.br

The revision date will be displayed at the top of this document.

13. Data Protection Officer (DPO)

Name: Fábio Roberto Crisci da Fonseca

Email: [email protected]

Primary Jurisdiction: Brazil

This Privacy Policy applies internationally in accordance with the jurisdictions where our services are offered.