1. Data Controller

LeBlank Comércio de Flores e Presentes LTDA., enrolled with the CNPJ under No. 29.799.356/0001-19, is the controller responsible for the personal data processed through its digital channels.

2. Personal Data We Collect

Depending on your interaction with LeBlank, we may collect:

• Name, email address, phone number, CPF or other identification data when applicable;
• Billing and delivery address;
• Order, payment, transaction, and customer service information;
• Account login information, if you create an account;
• Browsing, cookie, device, and usage data collected through our digital channels.

3. Purposes of Processing

We may process personal data to:

• Process orders, payments, deliveries, exchanges, returns, and customer service requests;
• Provide and improve our products, services, and digital channels;
• Send transactional communications and, when permitted, marketing communications;
• Prevent fraud, protect our systems, and maintain security;
• Comply with legal, tax, accounting, and regulatory obligations;
• Exercise or defend legal claims.

4. Legal Bases for Processing

Where GDPR applies, LeBlank may process personal data based on:

• Performance of a contract with you;
• Compliance with legal obligations;
• Legitimate interests, provided such interests are not overridden by your rights and freedoms;
• Your consent, where required;
• Establishment, exercise, or defense of legal claims.

5. Sharing of Personal Data

We may share personal data with authorized service providers, such as payment processors, logistics companies, ecommerce platforms, technology providers, marketing providers, fraud prevention providers, legal advisors, and public authorities when required by law.

LeBlank does not sell personal data.

6. International Transfers

Your personal data may be transferred to and processed in countries outside your place of residence. When required, LeBlank will adopt appropriate safeguards to protect personal data in accordance with applicable data protection laws.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements.

8. Your GDPR Rights

Subject to legal requirements, you may have the right to:

• Access your personal data;
• Request correction of inaccurate or incomplete data;
• Request deletion of your personal data;
• Request restriction of processing;
• Object to certain processing activities;
• Request data portability;
• Withdraw consent, where processing is based on consent;
• Lodge a complaint with a competent supervisory authority.

9. Security

LeBlank applies technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, misuse, or disclosure. However, no system is completely secure.