Privacy policy

1. Who we are
Soma Sports ([razão social], CNPJ [CNPJ]), headquartered in Carpina/PE, is responsible for processing your personal data in accordance with this Policy and the Brazilian General Data Protection Law (Law No. 13,709/2018 – LGPD).

2. Data we collect
2.1. Data you provide: first name, last name, phone/WhatsApp and any other information sent when you talk to the team, request a quote, book a workshop service or buy a product — including the form shown before opening WhatsApp, which we keep so we can get back to you even if the conversation isn't completed. If you allow it in your browser, we use your device's location only to identify your city (coordinates are not stored). So we don't ask again, your browser keeps this data for up to 6 months (you can delete it by clearing the site's data). You can request deletion at any time (item 11).
2.2. Automatic technical data: through cookies and pixels (such as the Meta Pixel) — IP address, browser/device, traffic source, ad campaign and interactions with the site.

3. What we use your data for

• customer service, sales, workshop and communication about the store's products and services;

• measuring and optimizing ad campaigns (Meta/Instagram and Google);

• improving the website and browsing experience;

• security, fraud prevention and compliance with legal obligations.

4. Legal basis

• consent (marketing and analytics cookies);

• performance of a contract or preliminary procedures (purchase, quote, service);

• compliance with legal or regulatory obligations;

• legitimate interest, without overriding your fundamental rights.

5. Sharing
With service providers needed to run the business (hosting, WhatsApp, CRM, ad platforms, payment and financing providers) and with authorities, when required by law.

6. International transfer
Some providers (e.g., Meta, Google, Cloudflare) may process data outside Brazil, with the safeguards provided for by the LGPD.

7. Security and retention
We adopt technical and administrative measures to protect your data and keep it only for as long as necessary for the purposes above or as required by law.

8. Your rights
You may request confirmation and access, correction, anonymization, blocking or deletion, portability, information about sharing, and withdrawal of consent.

9. Cookies
Analytics and marketing cookies are only activated after you consent in the site banner. You can change your choice at any time through the "Configurar cookies" link in the footer.

9.1. Website access statistics
To know how many people visit the site and the links page, where they come from (source and campaign) and which buttons are used, we log on our own server (Cloudflare), without cookies: page visited, source and campaign parameters (UTM), approximate city, state and country based on the network, device type and browser. Without your analytics consent, the IP is stored truncated (without the last digits); with consent, the full IP. The IP is deleted within 90 days and the logs within 13 months. Legal basis: legitimate interest (site statistics) and, for the full IP, consent.

10. Changes
This policy may be updated; the current version is always published on this page, with the update date.

11. Contact
Questions and requests about your data: [e-mail do encarregado] or via WhatsApp +55 81 99494-3981.