Privacy Policy

1. Who is responsible for your data

Take Time Brazil Ltda, registered under CNPJ 33.240.267/0001-05, headquartered at Avenida Presidente Altino, 1925, Jaguaré, São Paulo/SP, CEP 05323-002, is the controller of the personal data processed on this website.

For any privacy matter, contact us at contato@taketime.com.br or on WhatsApp at +55 (11) 91675-4622.

2. What data we collect

• Registration: registration type (CNPJ or CPF), document number, legal name or full name, trade name, state registration, contact person, phone/WhatsApp, email and delivery address.
• Sign in with Google (if you choose it): name and email provided by Google.
• Orders: products, quantities, amounts, payment method and payment status.
• Card payments: card details are entered directly in Stripe's form; they never pass through our website and are not kept by Take Time.
• Preferences: whether you agreed to receive promotions, the language you use on the site and the theme (light or dark).
• Website usage: aggregated visit statistics without personal identification (Vercel Analytics), plus technical access logs for security.

3. Why we use it and the legal basis

• To create and maintain your account and to process orders, charges, invoices and deliveries (performance of a contract, LGPD art. 7, V).
• To comply with tax and legal obligations, such as keeping invoices and sales records (legal obligation, art. 7, II).
• To protect your company and the website against fraud, for example by reviewing registrations with a CNPJ that is already our customer before the first purchase (legitimate interest, art. 7, IX).
• To send promotions and news by email and WhatsApp, only if you tick that option (consent, art. 7, I). You can untick it at any time in "My account".
• To assist you on WhatsApp and by email when you contact us.

4. Who we share it with

We only share data with the providers needed for the website to work:

• Omie: Take Time's management system (ERP), which holds customer records, orders, charges (PIX and boleto) and invoices.
• Supabase: the website's database and sign-in system.
• Stripe: card payment processing.
• Google: sign-in, if you choose to sign in with your Google account.
• Vercel: website hosting and visit statistics without personal identification.
• Melhor Envio: receives the delivery postal code and the products' weight and dimensions, to calculate shipping.
• Email service: sending registration confirmation and password reset emails.
• ViaCEP: receives only the postal code (CEP) you type, to fill in the address automatically.
• Carriers and the postal service: name, phone and address, for delivery.
• Public authorities, when required by law or court order.

5. International transfers

Some of these providers (such as Supabase, Stripe, Google and Vercel) may store or process data outside Brazil. In these cases, we use providers that offer data protection safeguards compatible with the LGPD (art. 33).

6. How long we keep it

We keep account data while the account is active. Order, payment and invoice data are kept for the period required by tax law (generally 5 years). After that, the data is deleted or anonymized.

7. Your rights

Under the LGPD (art. 18), you may request at any time:

• confirmation that we process your data and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
• portability of your data to another provider;
• deletion of data processed based on your consent;
• information about who we share your data with;
• withdrawal of your consent to receive promotions.

To do so, write to contato@taketime.com.br. We may ask you to confirm your identity first. Some data may be kept when required by law (for example, tax records).

8. Cookies and data in your browser

We only use what is needed for the website to work: a session cookie to keep you signed in, and your browser's local storage to keep your cart and chosen theme. We do not use advertising or cross-site tracking cookies.

9. Security

Data is transmitted with encryption (HTTPS), access to our systems is restricted and access keys are kept only on our servers. Card data stays exclusively with Stripe, which follows the PCI DSS security standard.

10. Minors

The website is intended for companies and people over 18. We do not knowingly collect data from children or teenagers.

11. Changes to this policy

We may update this policy. The date of the last update is shown at the top of the page, and significant changes will be announced on the website or by email.