Privacy Policy

GENERAL INFORMATION

This Privacy Policy contains information about the collection, use, storage, treatment, and protection of personal data of users and visitors to websites held under the address “luminapharma.com.br”. It aims to demonstrate complete transparency on the matter and inform all interested parties about the types of data collected, the reasons for the collection, and how users can manage or delete their personal information.

This document has been prepared in accordance with the General Data Protection Law (Law 13.709/18), the Brazilian Civil Rights Framework for the Internet (Law 13.853/19), and considering the effectiveness of Law 14.010/20. Additionally, the document may be updated due to potential regulatory changes, which is why users are invited to periodically check this section.

HOW DO WE COLLECT THE PERSONAL DATA OF USERS AND VISITORS?

1.When a user sends a message or requests their contract through www.luminapharma.com.br or domains connected to “luminapharma.com.br”: this data includes basic identification information, such as email, name, CNPJ (Brazilian corporate tax ID), phone number, and product of interest, depending on the relevance to the intended use of these data, as specified in the same form where the information is entered. Phone numbers might be requested to facilitate returning the requested contact; the company’s CNPJ might be requested to identify whether it’s a pharmaceutical industry or compounding pharmacy, thus optimizing the team’s preparation before the first response; topic of interest for similar preparation; email for sending necessary files, and name for user identification. With these data, we can identify the user and ensure greater well-being regarding their needs. Users and visitors should be aware that the data they send through the platform are not accessible to other users and visitors.

2.When a user accesses www.luminapharma.com.br or addresses related to “luminapharma.com.br”, the company collects information on interaction and access to ensure a better user experience. These data might include keywords used in a search, sharing of a specific document, comments, page views, profiles, the URL where the user and visitor came from, the browser they use, and their access IPs, among others, which may be stored via API and retained.

3.Through third-party intermediaries: www.luminapharma.com.br may receive data from third parties, like Facebook and Google, when a user logs in with their profile from one of these sites. The use of this data is authorized in advance by the users along with the respective third party. Lumina Pharma is committed to maximum protection of your data, ensuring they are never shared among other users, companies, or easily susceptible to invasion and theft of personal information.

5.All data collection follows the legal basis pattern of the new LGPD, Law No. 13.853. Data collection is always based on: Providing Consent (when the user clearly understands the internal company purpose of using their data and authorizes its use), Legitimate Interest (when the user clearly understands the internal company purpose for using their data and is subject to communication connected to the topic of interest for the product or service they contacted for, with the user’s permission), or by Contract (when the user hires a product or consultancy from this company, which requires data collection, clarified in the contract and direct communication with the team). There are also additional legal bases that enable and permit data collection from users: (I) legal obligation, (II) study by research organizations or internal research, or (III) judicial order. User

WHAT PERSONAL DATA DO WE COLLECT ABOUT THE USER?

The personal data collected about users may vary depending on the product, service, or contact need that connected the user to Lumina Pharma. The necessity of the data is justified by the user’s interest in the item or service. The purpose of data usage is made clear by Lumina Pharma at the time of collection, and the possible types of information are:

1. Data for creating an account/profile on the platform (e.g., email, name, CNPJ, city of residence, and phone number).

2. Data for navigation optimization: e.g., access to pages, keywords used in searches, recommendations, comments, interaction with other profiles and users, profiles followed, IP address.

3. Data related to contracts: upon formalizing a purchase and sale contract or a service provision agreement between the platform and the user, data related to the contractual execution may be collected and stored, including communications between the company and the user.

4. Phone or mobile number for alternative contact methods for security reasons or to optimize communication.

5. CPF, CNPJ, or company name for formalizing potential contracts, agreements, or registrations.

FOR WHAT PURPOSES DO WE USE THE USER'S PERSONAL DATA?

The personal data collected and stored by the platform www.luminapharma.com.br, with transparent disclosure of the data collection purpose at the time of collection, are intended for the following purposes:

1. **User Well-being**: To enhance the requested contact regarding the offered product and/or service, facilitate, expedite, and fulfill the commitments established between the user and the company, improve the user experience, and provide specific features depending on the basic characteristics of the user.

2. **Platform Improvements**: To understand how the user utilizes the platform’s services, aiding in business and technique development, only with the user’s authorization and knowledge.

3. **Advertisements**: To display personalized advertisements to the user based on the provided and authorized data, such as (I) cookie authorization, (II) provided email and/or phone number, (III) mailing address.

4. **Commercial**: To customize the offered content and generate subsidies for the platform to improve the quality and functioning of our work, only with the user’s authorization and knowledge.

5. **User Profile Forecasting**: Automated processing of personal data to evaluate platform usage.

6. **Registration Data**: To enable user access to specific platform content, exclusive to registered users.

7. **Contract Data**: To provide legal security to the parties and facilitate the business’s conclusion.

8. **Ensure the user’s personal data is updated and protected by Lumina Pharma (CNPJ 30.498.135/0001-90).**

Processing personal data for purposes not covered by this Privacy Policy will only occur with the user’s prior authorization, ensuring that the rights and obligations described here remain applicable and comply with the company’s legal obligations.

HOW LONG ARE PERSONAL DATA STORED?

Personal data from users and visitors are stored by the platform for as long as necessary to provide the service or meet the purposes outlined in this document, in accordance with section I of article 15 of Law No. 13.853. The data can be deleted or anonymized at the user’s request, except in cases where the law requires different treatment.

Additionally, personal data from users can only be retained after the end of its processing in the following cases:

1. Compliance with legal or regulatory obligations by the controller.

2. Research conducted by a research organization, always ensuring, whenever possible, the anonymization of personal data.

3. Acceptance and authorization by the user in case of non-removal requests.

4. Contracting new services or purchasing products by the same user.

SECURITY OF STORED PERSONAL DATA

The platform commits to applying technical and organizational measures to protect personal data from unauthorized access and from situations of destruction, loss, alteration, communication, or dissemination of such data.

Lumina Pharma commits to notifying the user in case of any security breach involving their personal data. Stored personal data are treated with confidentiality, within legal limits. However, we may disclose your personal information if we are required by law to do so or in case of a breach of our Terms of Service, as outlined in contracts.

DATA SHARING

Lumina Pharma commits, except in cases of legal obligation due to legal processes or when there is mandatory interaction with ANVISA, importers, and/or exporters, which is necessary for the proper execution of the work contracted by each client, not to share any personal data or information from their companies with third parties. The data authorized by users are used solely by internal teams to ensure communication permitted by the user, as well as for their commercial or contracted service. All users have the right to access their own data stored on our platform, as well as the entire history of their processing.

Consent

By using the services and providing personal information on the platform, the user consents to this Privacy Policy. When registering, the user acknowledges and can exercise their rights to cancel their registration, access, and update their personal data, and guarantees the truthfulness of the information they provide.

The user has the right to withdraw their consent at any time, for which they must contact via email at sac@luminapharma.com.br.

CHANGES TO THIS PRIVACY POLICY.

We reserve the right to modify this Privacy Policy at any time due to national legislative changes. Therefore, it’s advisable for users and visitors to review it periodically.

JURISDIÇÃO PARA RESOLUÇÃO DE CONFLITOS

For resolving disputes arising from this instrument, Brazilian law will be fully applied. Any litigation must be presented in the jurisdiction of the São Paulo SP court, where the company’s administrative headquarters are located.