1. Introduction and Scope
Deep Wellness Lab ("Company," "we," "us," or "our") is committed to protecting your privacy and ensuring you have a transparent understanding of how we collect, process, use, and safeguard your personal data. This Privacy Policy outlines our practices regarding data collection and your rights as a data subject.
This policy applies to all interactions with our website (https://deepwellnesslab.shop), products, services, and communications. By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy.
2. Legal Foundation and Compliance
Our data processing activities are conducted in compliance with the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados Pessoais - LGPD) and other applicable privacy regulations. We process your personal data only on lawful bases, including:
- Consent: When you explicitly authorize us to process your data for specified purposes
- Contract Execution: Processing necessary to fulfill an agreement you have entered into with us
- Legal Obligation: When required by law or regulatory requirements
- Legitimate Interest: When processing is necessary to protect our legitimate interests or those of third parties
- Protection of Vital Interests: Processing essential for the protection of life or health
3. Types of Personal Data Collected
We collect various categories of personal data depending on your interaction with our services:
3.1 Identification Information
- Full name and date of birth
- National identification documents (CPF, RG, or equivalent)
- Professional credentials and licenses
3.2 Contact Information
- Email addresses and telephone numbers
- Mailing and billing addresses
- Social media profiles (when voluntarily provided)
3.3 Transaction and Service Data
- Purchase history and payment information
- Preferences for wellness services and products
- Communication records and customer support interactions
3.4 Technical Information
- IP addresses and device identifiers
- Browser type, operating system, and usage patterns
- Cookie identifiers and tracking pixels
- Website navigation and interaction analytics
3.5 Health and Wellness Data
- Information about health goals and wellness interests (when voluntarily provided)
- Responses to wellness surveys and questionnaires
- Fitness and nutrition preferences
4. Methods of Data Collection
We collect your personal data through various methods:
- Direct Collection: Information you voluntarily provide through registration forms, contact forms, surveys, or customer service interactions
- Automated Collection: Data collected through cookies, web beacons, and similar tracking technologies when you visit our website
- Third-Party Sources: Information received from payment processors, analytics providers, and advertising partners
- Inferred Data: Information derived from your behavior and interactions to create preferences profiles
5. Purpose and Use of Personal Data
We process your personal data for the following purposes:
5.1 Service Delivery
- Processing and fulfilling your orders and requests
- Providing customer support and handling complaints
- Managing your account and user profile
- Personalizing your experience on our website
5.2 Communications
- Sending transactional emails (order confirmations, receipts, updates)
- Marketing communications (newsletters, promotions, special offers)
- Responding to your inquiries and requests
- Notifying you of changes to our policies or services
5.3 Analytics and Improvement
- Analyzing website usage patterns and user behavior
- Improving our products, services, and website functionality
- Conducting market research and trend analysis
- Creating aggregated, non-identifying statistical reports
5.4 Security and Fraud Prevention
- Detecting and preventing fraudulent transactions
- Protecting against unauthorized access and cyberattacks
- Maintaining the security of our systems and infrastructure
- Investigating and resolving security incidents
5.5 Legal and Compliance
- Complying with legal obligations and regulatory requirements
- Establishing, exercising, or defending legal claims
- Enforcing our terms of service and other agreements
Important: We will not use your personal data for purposes other than those stated in this policy without obtaining your explicit consent. Any new use of your data will require separate notification and authorization.
6. Data Sharing and Third Parties
We may share your personal data with select third parties in the following circumstances:
6.1 Service Providers
We engage third-party service providers to facilitate our operations, including payment processors, shipping carriers, email service providers, and analytics platforms. These providers process your data only on our behalf and in accordance with our instructions.
6.2 Business Partners
With your consent, we may share your data with business partners for co-marketing initiatives, joint products, or complementary services.
6.3 Legal Requirements and Protection
We may disclose your personal data when required by law, court order, or government request, or when necessary to protect our rights, privacy, safety, or property, and that of our users.
6.4 Business Transactions
In the event of a merger, acquisition, bankruptcy, or sale of assets, your personal data may be transferred as part of that transaction. We will provide notice if such changes occur and choices regarding your data.
6.5 Non-Sharing of Health Data
We do not sell, rent, or share sensitive health data with third parties for marketing purposes. Health information is protected with enhanced safeguards.
7. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, or resolve disputes. Retention periods vary based on the type of data and the purpose of processing:
- Account Data: Retained while your account is active and for a reasonable period thereafter for customer service purposes
- Transaction Data: Retained for the duration required by tax laws and accounting regulations (typically 5 years)
- Marketing Data: Retained until you unsubscribe or withdraw consent
- Technical Data: Log files and analytics data retained for 12-24 months
- Legal Claims: Retained for the period required to establish, exercise, or defend legal claims
After the retention period expires, we will securely delete or anonymize your personal data. You may request deletion subject to legal retention requirements.
8. Your Rights as a Data Subject
Under the LGPD and other applicable privacy laws, you have the following rights regarding your personal data:
8.1 Right of Access
You have the right to request confirmation of whether we process your personal data and to obtain a copy of that information in a structured, commonly used, and portable format.
8.2 Right of Correction
You may request that we correct, update, or amend any inaccurate, incomplete, or outdated personal data we hold about you.
8.3 Right of Deletion
You have the right to request deletion of your personal data, subject to certain legal exceptions and obligations. We will process deletion requests without undue delay.
8.4 Right to Restrict Processing
You may request that we limit the processing of your personal data while you contest its accuracy or our lawful basis for processing.
8.5 Right to Data Portability
You have the right to request your personal data in a machine-readable format and to transmit it to another data controller without impediment.
8.6 Right to Withdraw Consent
If processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to the withdrawal.
8.7 Right to Object
You may object to the processing of your personal data for marketing purposes or based on legitimate interests.
8.8 Right to Lodge a Complaint
You have the right to lodge a complaint with the appropriate data protection authority if you believe your rights have been violated.
9. Exercising Your Privacy Rights
To exercise any of the rights outlined above, please submit a written request to our Data Protection Officer or contact us using the information provided in Section 14 (Contact Information). Include sufficient details to identify you and specify your request clearly.
We will verify your identity before processing your request to ensure we are communicating with the legitimate data subject. Upon verification, we will respond within 30 days (extendable to 60 days for complex requests) with confirmation of actions taken or a detailed explanation.
10. Data Security and Protection
We implement comprehensive technical, administrative, and physical safeguards to protect your personal data against unauthorized access, alteration, disclosure, or destruction:
10.1 Technical Measures
- SSL/TLS encryption for data transmission over the internet
- Advanced firewall systems and intrusion detection
- Regular security audits and vulnerability assessments
- Encryption of sensitive data at rest
- Secure backup and disaster recovery procedures
10.2 Administrative Measures
- Access controls and role-based permissions
- Staff training on data protection and security protocols
- Confidentiality agreements with employees and contractors
- Data processing agreements with third-party service providers
10.3 Limitations
While we strive to employ industry-standard security practices, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security, and any transmission of data is at your own risk. We encourage you to use strong passwords and to protect your login credentials.
Security Notice: In the event of a data breach, we will notify affected individuals and relevant authorities without undue delay in accordance with applicable law.
11. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your user experience and gather analytics data. These technologies help us understand how you interact with our site and improve its functionality.
11.1 Types of Cookies
- Essential Cookies: Necessary for website operation and security
- Performance Cookies: Collect analytics data on user behavior and site usage
- Marketing Cookies: Enable targeted advertising and retargeting campaigns
- Functional Cookies: Remember user preferences and personalization settings
11.2 Cookie Consent and Management
When you first visit our website, you will be presented with a cookie consent banner. You may accept all cookies, customize your preferences, or decline non-essential cookies. You can modify your cookie preferences at any time through your browser settings or our preference center.
11.3 Third-Party Analytics
We may use third-party analytics providers to track website usage and user behavior. These providers may also use cookies and other tracking technologies in accordance with their own privacy policies.
12. Children's Privacy
Our services are not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without verifiable parental consent, we will take steps to delete such information promptly.
If you believe we have collected information from a child, please contact us immediately using the information in Section 14.
13. International Data Transfers
Your personal data may be processed and stored in Brazil or other jurisdictions where we maintain operations or utilize service providers. By providing your data, you consent to these transfers. If data is transferred to jurisdictions with different privacy protections, we implement appropriate safeguards, including standard contractual clauses and binding corporate rules.
14. Contact Information and Data Protection Officer
How to Reach Us
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on our website and update the "Last Updated" date at the top of this document.
If we make material changes that affect your rights or how we process your data, we will notify you by email or through a prominent notice on our website. Your continued use of our services after such modifications constitutes your acceptance of the updated Privacy Policy.
16. Additional Resources
For more information about data protection rights and obligations, you may visit:
By accessing and using Deep Wellness Lab's services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. If you do not agree with our practices, please do not use our services.
← Back to Home