INTRODUCTION
1.1 Who we are
RediRedi is a company located in Rio de Janeiro. We employ the best privacy and data protection practices to ensure the security of users on our website (https://rediredi.com/). We process (collect, use, and share) personal data necessary to fulfill the purposes of this Privacy Policy, and we do not condone the practice of selling or exchanging such data for promotional purposes.
By using our website, you agree to our terms of use. We may modify this policy and communicate the changes at a later date.
1.2 Purpose
Our policy details how we collect, use, share and protect your personal data. We are committed to ensuring the security and privacy of this information, maintaining transparency and complying with data protection laws.
1.3 Scope
This policy applies to all personal data we collect, whether through our website, apps, services or through direct interactions with users. It is valid for all our data processing operations, regardless of the user’s location, and follows relevant data protection laws, such as the General Data Protection Law (LGPD) in Brazil, the California Consumer Privacy Act (CCPA) in the United States, and the General Data Protection Regulation (GDPR).
1.4 Commitment to Privacy
Our policy reflects our commitment to protecting the privacy and security of your personal data. We understand the importance of processing your information with care, using it only as specified in this policy. We are dedicated to maintaining transparency in our data processing practices, ensuring compliance with applicable data protection laws and regulations, and guaranteeing that you have ongoing control over your personal information.
1.5 Compliance with Applicable Laws
RediRedi strictly follows the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR), and other current data protection legislation, ensuring transparency in the collection, use, storage, and sharing of personal data. We respect users’ rights regarding access, correction and deletion of their data. In accordance with our ethical practices and privacy policy, we do not sell personal data to third parties under any circumstances. Our commitment to privacy is reflected in the requirement that our suppliers also protect this data, guaranteeing users control and visibility over their personal information.
1.6 Overview of Users’ Rights
You have the right to be informed about what personal data we collect and how this data is used, access your information stored by the platform, and delete your data.
1.7 Incident notification
Immediately inform RediRedi of any unauthorized use of your account through the form available on our website https://rediredi.com/contact.
It is important to remember that responsibility for account activities rests with the user, as access is protected by a personal, non-transferable password. In the event of unauthorized access by third parties, prompt communication is necessary to safeguard the account’s security.
PERSONAL INFORMATION COLLECTED
The types of personal data collected, the sources from which this data comes, and the purposes of the collection are as follows:
2.1 Data Collection
Data collected includes name, login, email, password, marketplaces (Amazon, Mercado Livre, Shopee etc.) and social networks (Twitter, Facebook, Instagram etc.) used by you, for integration, and also cookies, web beacons, and in cases of paid plans, payment data.
- Account Data: For the creation and management of your account on our Platform, we collect essential information such as name, login, email address and password. This data is necessary to provide you with secure and personalized access to our services.
- Marketplace Data: We collect information related to the products our clients sell, including details such as quantity, amounts, shipping information, among others. This collection aims to improve sales efficiency and inventory management on marketplace platforms.
- Integration with Social Networks: We do not directly collect personal data through social networks. However, with the user’s authorization, we publish content and make announcements on behalf of the user, using their social media accounts. This integration aims to expand the reach and effectiveness of our clients’ marketing strategies.
- Payment Data: We store information related to the plans contracted by our clients, including financial transaction history, amounts, and tax data such as address and Corporate Taxpayer Registry (CNPJ) number. It is important to note that credit card information is not stored on our platform. For payment processing, we use the third-party service (Stripe), which operates under strict security standards for financial transactions.
- The RediRedi platform
By registering and providing your information to RediRedi, you consent to our use of your data as described in our policy. If you include third-party data, it is your responsibility to ensure that they have authorized the use of that information. You also agree to hold RediRedi harmless from any liability for damages related to the processing of such third party data, even if they are not users of our platform.
To ensure the security and privacy of data at RediRedi, access to the platform is restricted to a personal and non-transferable login and password. These credentials are vital to prevent unauthorized access to your information. The responsibility for maintaining the confidentiality of these credentials rests solely with you, and RediRedi assumes no responsibility for any misuse of this access information.
Users can provide additional information during sign-up or later when editing their personal and business profiles. It is important to note that users’ personal data, with the exception of their identification and product identification, will not be visible to other users. Full access to RediRedi services requires a login and password.
2.2 Using the RediRedi Platform
Your data is collected during registration and use of the platform, as well as automatically obtained information (such as cookies and web beacons).
We use cookies and web beacons to identify users, as well as to improve the quality of information offered on the portal.
We request explicit consent from users for the use of cookies, especially those used for tracking or analysis. When visiting our website, you will be presented with a cookie notice that will explain the purpose of the use of cookies and provide you with the option to consent to or refuse their use. The use of cookies is essential to improve your experience and offer relevant content. You can also set your browser to receive prior notifications or refuse cookies if you wish.
In addition to personal information provided by Users, the RediRedi Platform may also collect technical information such as IP address, operating system, browser type, and referring websites.
We do not share your information with third parties, except for the provision of our services, or when necessary to comply with legal requests from governmental authorities, within the legally established limits.
The RediRedi Platform reserves the right to verify the information stored in its databases for legal and security purposes, such as identifying multiple user identities or pseudonyms, in order to resolve disputes, solve problems, and ensure that the platform is not used for illicit activities.
2.3 Permission for the Processing of Information by the RediRedi Platform
The information provided and collected by you while using the system, and that does not personally identify you, such as browsing patterns (referred to as “anonymized data”), may be used by the RediRedi Platform for market analysis, statistical generation and targeting of marketing strategies.
In addition, the information you provide is used to:
- Manage your account, to customize the services offered;
- Execute your commands directly on the RediRedi Platform, at the time of registration or later, and/or debit amounts from credit cards, when expressly authorized by you;
- Communicate updates to the RediRedi Platform;
- Communicate news and marketing actions of the RediRedi Platform or partners;
- Comply with legal requirements to fulfill requests for investigation by legal authorities.
Changes such as closing your account on the RediRedi Platform, updating or correcting your data, or requesting to unsubscribe from receiving messages can be made directly from the settings panel available on the Platform.
When we indicate that we use your personal information in the context of an order, command, transaction or agreement (or for its preparation) or to provide services requested by you (such as access to the RediRedi Platform), this information is necessary for the correct provision of the services.
2.4 Collection Purposes
This data is used to facilitate navigation on the platform, integrate payment systems, personalize your experience, and improve the quality of services offered by RediRedi.
2.5 User Obligations
It is the user’s responsibility to comply with the Terms of Use, which are updated from time to time and published by the RediRedi Platform on its website, as well as to respect this Privacy Policy.
You must not download, upload, or otherwise disseminate material or information that is violent, offensive, racist, xenophobic, or that violates the spirit and goals of the RediRedi Platform and its community of Users.
It is forbidden to provide the RediRedi Platform or any other user with information that they believe is harmful to them, professionally or socially.
Therefore, when posting comments in public areas of the RediRedi Platform or any of its communication channels, you should be aware that this information will be viewed by other users and the general public.
2.6 Minors
Our services are not intended for children under the age of 16, and we do not knowingly collect data from these people.
If you are under the age of 16, please do not use our services or provide your information through the website or otherwise.
2.7 Cookies
A cookie is a small text file that is saved by storing certain information about the user and access to the website. The purpose of this cookie is to allow the proper execution of some functionalities of the website, to obtain more accurate information about your access and to optimize our marketing and advertising campaigns.
These cookies can be classified as own, that is, they belong to the RediRedi domain, or of third parties, when related to a different domain, such as YouTube or Google.
The types of cookies found on our website were diagnosed through the OneTrust tool and classified based on the information provided by Cookiepedia.
The following categories of cookies were found on our pages:
| Description | Quantity |
| Essential or strictly necessary cookies: allow for the proper functioning of our website, not collecting or storing information about you or your preferences. Typically, they are only configured in response to actions taken by users, such as saving their privacy preferences, logging in, or saving information to fill out forms. For this reason, it is not possible to disable them. | 1 |
| Advertising cookies: These are used to check visitor preferences. This information enables us to identify your choices and use them in advertising campaigns or other similar services, always respecting your preferences and privacy. They may also be used by third parties to show you ads related to you on other websites. | 8 |
| Performance cookies: This type of cookie collects information about how users use and navigate the website, such as “What pages users access most often”, or “If the user receives error messages from our pages”. This type of cookie does not collect information that can identify a user. All information that these cookies collect is anonymous, serving only to improve the functioning of the website. | 2 |
| Functionality cookies: They allow the site to remember the choices that the user makes (such as the username), providing improved and more personal features. An example of this type of cookie is the storage of the products and items that the holder adds to their shopping cart on a sales website. | 1 |
DATA SUBJECT’S RIGHTS
3.1 Right to Know
You have the right to request information about the personal data collected by the RediRedi Platform, including what data was collected, the purpose of its processing, and third parties with whom the data was shared.
3.2 Right of Access
You have the right to request a copy of your personal data that RediRedi has collected. Categories of data include, but are not limited to: personally identifiable information (such as name and contact), registration data, financial transaction history, and any other categories of personal data collected and processed by the platform.
3.3 Right to Deletion
You can delete your personal data, with a few exceptions, including cases where the data is necessary to complete a transaction, detect security, or is being used internally in a legal manner, among others.
HOW TO EXERCISE YOUR RIGHTS:
4.1 Request Instructions
You can request information about or access to your personal data stored by RediRedi at any time. You may also request that we delete any personal data we hold about you. This does not include any data that we need to retain for administrative, legal or security purposes.
To do so, make your request by contacting us through the form available on our website https://rediredi.com/contact.
4.2 Response Time
We respond to users’ rights requests within the legal deadlines established by law.
4.3 Communication Channels
You can contact us through the form available on our website https://rediredi.com/contact for any questions, assistance in formulating requests or for more information on how your personal data is processed. We are prepared to offer guidance and clarification, aiming at a transparent and secure experience.
NON-DISCRIMINATION
We do not discriminate against users who exercise their privacy rights, and no user will be subject to unfair treatment, such as differentiated fees, reduced quality of service, or penalties. Equal access and quality in RediRedi’s services will be maintained for all users, regardless of whether they exercise their privacy rights.
EMBEDDED CONTENT FROM OTHER SITES
Embedded content from other sites, such as videos and images, behaves as if you are visiting those sites directly. These websites may collect data, use cookies, use third-party tracking, and monitor your interaction with embedded content. RediRedi is not responsible for the actions of these websites. It is your responsibility to be aware of the respective Terms of Use and Privacy Policies of these websites.
DATA SECURITY AND RETENTION
We have implemented robust security measures to protect your personal data from unauthorized access, use or disclosure. Key safety practices include
the use of password encryption and confirmation protocols via email. As for the data retention period, we retain personal information for as long as necessary to fulfill the purposes described in the policy, respecting legal and regulatory requirements. After this period, the data is permanently and securely deleted.
In respect of your right to information privacy, we periodically review our database. This process ensures that the information remains up-to-date for the purpose initially intended.
You have the option to request deletion of your account data, automations and connected accounts upon request to site administrators via email at https://rediredi.com/contact. Your account and all your data will be deleted within 7 business days.
When you cancel your registration, all your data will be deleted from the platform and RediRedi will no longer guarantee the availability of your data. You will also lose access to your history on the RediRedi Platform and will no longer be able to export your data. Therefore, we recommend that you export your data before requesting account deletion.
After deletion, we will no longer have access to your personal data, except for any that must be retained due to legal obligation. In these situations, we will delete this data as soon as there is no longer a reason for its retention.
Finally, the RediRedi Platform reserves the right to archive certain data, always anonymized, for statistical analysis purposes, such as monitoring the growth rate of the use of tools integrated with the RediRedi Platform.
INTERNATIONAL TRANSFER OF DATA
RediRedi performs international data transfers to AWS in the USA. To ensure data protection during this transfer, we have implemented appropriate security measures, including signing EU standard contractual data protection clauses with AWS. These measures aim to ensure that users’ personal data remains protected in compliance with GDPR privacy regulations. For more information on the safeguards applied, please contact us through our support channels.
DATA BREACH NOTIFICATION
We have implemented procedures for notifying data breaches. In the event of a personal data breach that poses a risk to the rights and freedoms of data subjects, we will notify the competent data protection authority and the affected data subjects within the period required by law. The notification will include detailed information about the breach, its consequences and the measures taken to mitigate the risk. In addition, we will cooperate with the authorities and take steps to remedy the breach and prevent future occurrences.
IDENTIFICATION OF THE DATA PROTECTION OFFICER (DPO)
RediRedi’s Data Protection Officer (DPO), according to the GDPR, is Mr. Carlos Alves, responsible for ensuring compliance with data protection laws, supervising data processing activities and acting as a point of contact for issues related to privacy and data protection. You can contact
Carlos Alves at the following email: dpo@rediredi.com. We are at your disposal for any questions or concerns related to data privacy.
POLICY UPDATES
Our privacy policy is subject to periodic updates to reflect changes in data practices or applicable law. Our users will be notified of any significant changes through RediRedi’s official communication channels. It is important that you review this policy regularly, to stay informed on how your personal data is processed and protected.
- 1.0 – 2024-04-21
CONTACT AND FEEDBACK
If you have any questions about RediRedi’s privacy policy or suggestions for improvements, contact us through the form available on our website https://rediredi.com/contact. We value your feedback and are committed to considering all suggestions to improve personal data protection and management.