Privacy Policy

1) Who is the controller and how can I contact us?

Controller: Reverie Brasil Comércio Atacadista Ltda ME – Sítio Reverie – CNPJ: 37.996.806/0001-91 Address: Rua Átila Brandão, 49. Santa Maria. Carangola – MG. CEP: 36801-158 Privacy Contact (Data Protection Officer/DPO): contato@sitioreverie.com

2) What data do we collect?

2.1. Data provided by you (contact) In the Site's contact form, we may collect: name, surname, email, phone number, and message.

2.2. Newsletter (subscription and communications) To subscribe to the newsletter and receive notifications, we may collect: email and, optionally, technical information to verify subscription and manage preferences (date/time of subscription, origin, and confirmation/cancellation logs). You can unsubscribe at any time (see section 10).

2.3. Trade and Sample Requests To respond to sample, availability, and commercial term requests, we may collect: name, company, email, phone, country or destination market, buyer profile, expected volume, and message.

2.4. Negotiation and Logistics When a negotiation progresses, we may request additional information required for quotations, sample dispatch, contracts, invoicing, and international logistics.

2.5. Automatically collected data (navigation) When browsing the Site, we may collect: IP address, date/time, pages accessed, clicks, and events; device and browser information; cookies/identifiers, as per section 6.

2.6. AI-Powered Chatbot When using the Site's chatbot, messages sent are processed by a language model (LLM) to generate responses. Conversations are not permanently stored and are not used to train models. No personal data is collected beyond the message content during the session.

2.7. IoT Monitoring Dashboard For authenticated users with access to the monitoring dashboard, we collect authentication data (via OAuth) and dashboard usage data. IoT sensor data relates exclusively to plots and equipment and does not constitute personal data.

2.8. Traceability Traceability records relate to products, lots and the origin chain. They generally do not require buyer personal data beyond what is necessary for trade service, dispatch and support.

3) For what purposes do we use your data?

We use personal data to: • Respond to requests submitted via the contact form. • Process sample, availability, and commercial term requests. • Support negotiations, sample dispatch, documentation, and logistics when applicable. • Send newsletters and communications about harvests and new coffees when consent is provided. • Measure and optimize marketing and site performance, including campaigns and conversions. • Ensure the security and integrity of the site and forms. • Operate the AI-powered customer service chatbot. • Comply with legal and regulatory obligations (especially tax/accounting and consumer protection). • Exercise rights in administrative/judicial proceedings, if necessary.

4) Legal basis (LGPD)

We process personal data in accordance with applicable legal bases, including: • Contract execution and preliminary procedures (Article 7, V): trade requests, sample dispatch, negotiation, logistics, and support. • Legitimate interest (Article 7, IX): security, fraud prevention, Site improvement and essential metrics, respecting your rights. • Consent (Article 7, I): when necessary, such as for newsletters and non-essential cookies/trackers. • Compliance with legal/regulatory obligations (Article 7, II): tax/accounting and other obligations. • Regular exercise of rights (Article 7, VI): defense and management of disputes/complaints.

5) Who we share your data with

We may share personal data, when necessary, with: • Website hosting and infrastructure services, database, and emails. • Marketing and measurement tools: Meta Ads and Meta Pixel; Google Ads (tags); Google Analytics. • Email delivery services (when used for newsletters/transactional emails). • Logistics, contract, and payment partners when required for an approved negotiation. • Public authorities when there is a legal obligation or valid order.

We do not sell personal data.

6) Cookies, Pixel, Tags, and Analytics

6.1. We may use cookies and similar technologies for: • Functionality and security (e.g., session management and fraud prevention). • Metrics and improvement (Google Analytics). • Advertising and conversions (Meta Pixel, Google Ads Tags).

6.2. How to manage You can adjust preferences in a cookie banner/center (if available) and/or manage cookies in your browser. Blocking cookies may affect some Site functionality.

7) International transfer

Tools like Meta and Google may involve international data transfers. In these cases, the processing will follow the applicable mechanisms and safeguards and the policies of the respective providers, seeking compliance with the LGPD.

8) How long do we keep the data (retention)?

We retain personal data for the time necessary for the purposes of this Policy, including legal obligations. In general: • Contact: for the time necessary to process the request and maintain operational history. • Newsletter: while you remain subscribed. After unsubscribing, we may keep a minimum opt-out record. • Trade requests: for the time necessary for service, negotiation, dispatch, support, and compliance with applicable obligations. • Chatbot: conversations are not permanently stored after the session ends. • Logs and security: for the period technically necessary and/or required by law.

When possible, data will be deleted or anonymized at the end of the applicable period.

9) Information security

We have adopted reasonable technical and organizational measures to protect personal data (access controls, security best practices, monitoring, and fraud prevention). Even so, no environment is entirely risk-free; in the event of a significant incident, we will take measures and make communications in accordance with the law.

10) Your rights (LGPD) and how to exercise them

You can request: • Confirmation and access; • Correction; • Anonymization, blocking, or deletion (when applicable); • Portability (when applicable); • Information about sharing; • Objection (when applicable); • Revocation of consent (when the basis is consent).

How to request: send an email to contato@sitioreverie.com. We may ask for identity verification for security reasons.

Newsletter Unsubscription: you can unsubscribe via the unsubscribe link in the email (when available) or by requesting via contato@sitioreverie.com.

11) External links

The Site may contain links to third-party pages (e.g., social media). We do not control the practices of these third parties; we recommend reading their respective policies.

12) Children and teenagers

This Site is not directed at children. If you believe that a child's data has been submitted, please contact contact@sitioreverie.com for evaluation and action.

13) Changes to this Policy

We may update this Policy periodically. The current version will be posted on this page, with the "Last updated" date.

14) Contact

Reverie Brasil Comércio Atacadista Ltda ME – Sítio Reverie CNPJ: 37.996.806/0001-91 Address: Rua Átila Brandão Nº 49, Santa Maria, Carangola – MG. CEP: 36801-158 Privacy email: contato@sitioreverie.com