Other Informations

Privacy Policy

Due to our commitment to your security and privacy, we at UNICASA INDÚSTRIA DE MÓVEIS S/A (“UNICASA”), CNPJ 90.441.460/0001-48 (National Registry of Legal Entities – Brazil), present our Privacy Policy. This document was created with the aim of making our relationship more transparent about the processing of personal data of users and customers, here we will present the necessary information about the collection, use, storage and deletion of information of Data Subjects who use our website, as the rules of the General Personal Data Protection Law – LGPD (Law No. 13.709/2018) and other applicable legislation.

Unicasa is bound by the provisions of this Privacy Policy, maintaining its commitment with the holder to follow the data protection rules prevailing in Brazil and the United States, as well as observing the principles brought by art. 6 of the LGPD, notably the principle of free access as a guarantee of easy and free consultation for holders on the form and duration of the treatment, as well as the completeness of their personal data.

If you have any doubts about this document or about the treatment of your personal data, please contact our Data Supervisor (DPO), CLRA Consultoria, in the person of Flávia Coêlho Leite by the email address privacidade@unicasamoveis.com.br

1. GLOSSARY

Personal Data

It is any information related to an identified or identifiable individual, such as full name, personal and professional document numbers, personal signatures, phone number, location data, email address, among others.

Sensitive Personal Data

It is any data on racial or ethnic origin, religious conviction, political opinion, union membership or to a religious, philosophical or political organization, data relating to health or sexual life, genetic or biometric data, when linked to an individual.

Personal Data Processing

Any operation performed with personal data, such as those related to collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, deletion, evaluation or information control, modification, communication, transfer, diffusion or extraction.

Data Subject

It is the individual to whom the personal data refers to.

Data Processing Agents

• Controller: an individual or legal entity, under public or private law, who is responsible for decisions regarding the processing of personal data.
• Operator: an individual or legal entity, under public or private law, who processes personal data on behalf of the controller.
• Sub-operator: It is the one hired by the operator to help him carry out the processing of personal data on behalf of the controller.

Pseudonymization

It is a data management procedure by which a data loses the possibility of association, directly or indirectly, with an individual. E.g., Using the ID with numbers and letters to make it difficult to view (111.xxx.23x.444-xx).

Anonymization

It is the use of technical means by which data loses the possibility of association, directly or indirectly, with an individual.

2. What personal data does UNICASA COLLECT?

When you register on our websites or use our services, depending on the purpose and the nature of the relationship established, UNICASA may collect and process personal data such as your name, contact information (email and phone number), identification document numbers, date of birth, marital status, address, nationality, and educational background, strictly to the extent necessary to achieve the specified purposes.

The processing of this personal data will be carried out based on the legal grounds established by the LGPD, particularly for the performance of a contract, compliance with legal or regulatory obligations, the regular exercise of rights, or, when applicable, with the consent of the data subject, which will be requested freely, in an informed and unequivocal manner.

UNICASA may process sensitive personal data, such as information related to health or dietary restrictions, only when strictly necessary, with the specific and prominent consent of the data subject, or in other situations legally permitted by the LGPD.

The processing of personal data of children and adolescents will always be conducted in accordance with applicable law and requires the specific and prominent consent of at least one parent or legal guardian, as stipulated by relevant legislation.

3. What is the legal provision for the use of personal data by UNICASA?

When a subject registers on our platforms and provides personal data for UNICASA to contact it, whether for service, budget or investment, we consider the hypothesis of consent, demonstrating the client/partner’s interest in obtaining our services.  UNICASA will endeavor to answer what was requested strictly to meet the indicated purpose.

As a consumer of one of the stores authorized by Unicasa, we treat your personal data with the purpose of executing a contract, as well as complying with any legal or regulatory obligation. In this case, the consumer’s personal data may also be processed by Unicasa to meet their legitimate interest, with the aim of evaluating product satisfaction and customer service.

UNICASA processes the personal data of job applicants, collected through recruitment platforms, resume submissions, or selection processes. This includes identification, contact, professional, and academic information provided by the applicant, with the purpose of conducting recruitment processes, evaluating professional profiles, and facilitating communication throughout the recruitment stages. The processing is based on preliminary contractual procedures, the regular exercise of rights, or, when applicable, the candidate’s consent, in accordance with the LGPD. Data is retained only for the period necessary to fulfill these purposes or as required by law.

4. How is my Personal Data stored?

UNICASA reinforces its commitment to the security and confidentiality of personal data with strict standards, keeping them stored in a safe place, and with restricted access. These data are accessed and kept only for the necessary period to achieve the storage purpose. At the end of the period, we carry out the process of deleting or anonymizing the data, observing the limitation and decay periods, in accordance with Art. 16 of the LGPD.

5. What is UNICASA’s procedure regarding the anonymization or deletion of personal data?

After the end of the stipulated period by the legislation for the processing of personal data according to its purpose, the data will be securely deleted or anonymized, as established in Art. 16 of the LGPD. Note that the limitation and decay periods provided by law will be observed.

6. Can my data be shared?

Unicasa may share personal data, only when necessary, with: service providers and suppliers (processors), such as technology, hosting, CRM, marketing, logistics, and support companies, as well as public authorities, when required by law or by court order.

All third parties are contractually obligated to handle personal data in compliance with the LGPD and with adequate information security standards.

7. What are the rights of the data subject over his or her personal data?

Observing the free access principle, UNICASA guarantees free and easy consultation on the form and duration of data processing, as well as the completeness of your personal data. As established in Art. 18 of the LGPD, the data subject rights are:

• Information about the possibility of not providing consent, as well as the consequences of denial.
• Revocation of consent at any time, in whole or in part, when applicable.
• Access to data and confirmation of the data processing existence, as well as correction of these if incomplete or out of date.
• Data portability to another supplier or order, upon express request.
• The anonymization, blocking and deletion of unnecessary, excessive or processed data in violation of the LGPD.
• Information about entities the company has shared data or entities the data has been shared, as well as its purpose.

8. What is UNICASA’s procedure in case of incidents involving personal data?

We have implemented appropriate technical and organizational measures to safeguard personal data, including but not limited to:

• Profile- and privilege-based access control;
• Encryption of data in transit and, where applicable, at rest;
• Monitoring of systems and access logs;
• Internal information security policies;
• Employee training and awareness programs;
• Appointed DPO.

9. In which cases can international transfer of personal data by UNICASA occur?

In our commitment to the data subject’s privacy, we maintain strict security policies and will notify both the data subject and the National Data Protection Authority (ANPD) of any security incident that could pose a risk or significant harm to the data subject, within a reasonable period. UNICASA considers it essential to uphold high security standards to ensure the appropriate processing of personal data, in accordance with best practices and governance across its systems.

10. In which cases may UNICASA carry out the international transfer of personal data?

The personal data processed by UNICASA may be transferred to and stored on servers located outside of Brazil, including in cloud computing environments and corporate systems used to support its operations, such as information technology, communication, security, and data storage platforms.

These international transfers take place only when necessary to fulfill the legitimate purposes described in this Policy and are conducted in strict accordance with articles 33 to 36 of the LGPD and CD/ANPD Resolution No. 19/2024, through the adoption of appropriate safeguards, such as:

• the execution of standard contractual clauses or specific clauses approved by the ANPD;
• the adoption of contractual instruments that guarantee data subjects' rights and data protection obligations equivalent to those established under Brazilian law;
• the selection of suppliers and partners that adhere to high standards of information security and personal data protection.

UNICASA implements technical, organizational and contractual measures to ensure that the processing of personal data transferred internationally maintains a level of protection that is adequate and consistent with the LGPD.

11. Changes to this Privacy Policy?

UNICASA reserves the right to modify this Privacy Policy without prior notice. The changes take effect as of the publication date of the policy, which is January 18, 2022, with the most recent update on March 9, 2026. We recommend visiting our website regularly to stay up to date with the latest terms, as the use of our services, as well as the registration with your personal data, implies acceptance of this policy.