Luce Infinita · Last revised on 16 August 2026

1. Who we are
Luce Infinita is the data controller for personal data collected through this website:

• Name/Legal name: Antoninho Colombo - Luce Infinita

• Registered address: Rua Senador Salgado Filho 260, 88523-150, Lages/SC, Brazil

• Taxpayer identification number (CPF): 949.656.929-34

• Email: luce@luceinfinita.com

• WhatsApp: +55 49 99113-1306

This Privacy Policy should be read together with our Terms and Conditions and explains what personal data we collect, why, who we share it with, and what rights the data subject has.

2. What personal data we collect
We collect the following categories of data, depending on your interaction with the website:

• Identification and contact data: name, email, phone/WhatsApp number.

• Order and delivery data: billing and shipping address, products purchased, order history.

• Payment data: processed directly by our certified payment providers; Luce Infinita does not store full payment card data on its servers, as already stated in our Terms and Conditions.

• Account data: if you create an account, login data and associated preferences (wish list, order history).

• Communications: messages exchanged by email or WhatsApp for customer service purposes.

• Technical and browsing data: collected through cookies and similar technologies, detailed in our Cookie Policy.

We do not knowingly collect data from individuals under the age of 18, consistent with the minimum age requirement set out in our Terms and Conditions.
3. Purposes and legal basis for processing

We process your personal data for the following purposes, with the corresponding legal basis under the LGPD and, where applicable, the GDPR:

• Processing and delivering orders — performance of a contract (Art. 7, II, LGPD; Art. 6(1)(b) GDPR).

• Issuing tax documents and complying with legal obligations — compliance with a legal obligation (Art. 7, II, LGPD; Art. 6(1)(c) GDPR).

• Providing customer support, including via email and WhatsApp — performance of a contract and legitimate interest (Art. 7, IX, LGPD; Art. 6(1)(f) GDPR).

• Preventing fraud and protecting website security — legitimate interest (Art. 7, IX, LGPD; Art. 6(1)(f) GDPR).

• Sending marketing communications, only where the data subject has given prior consent, revocable at any time — consent (Art. 7, I, LGPD; Art. 6(1)(a) GDPR).

4. Who we share your data with

Luce Infinita does not sell personal data to third parties. We share personal data, to the extent necessary, with:

• Logistics and fulfillment partners, responsible for processing and shipping orders (for example, dropshipping suppliers such as Zendrop), who receive the delivery data strictly necessary to ship the product to the customer.

• Payment service providers, to process transactions securely.

• Meta/WhatsApp, when you choose to contact us through this channel, subject to that platform's own privacy policy.

• Hosting, website analytics, and technology infrastructure providers, necessary for the website to function.

• Public authorities, when required by law or court order.

All third parties we share data with are contractually required to process it only for the agreed purposes and with appropriate security measures.

5. Data retention
We retain personal data for as long as necessary to fulfill the purposes described in this Privacy Policy. Order, invoicing, and payment data are kept for the period required by applicable Brazilian tax and accounting legislation, generally five years. Account data is kept while your account remains active and for a reasonable period afterward to respond to legal claims. Marketing consent data is kept until you withdraw your consent. Once retention is no longer necessary, data is deleted or anonymized.

6. International data transfers
Because some of our service providers may be located outside Brazil (including in the European Union and the United States), your personal data may be transferred internationally. In these cases, we adopt the safeguards required under the LGPD (Art. 33) and, where applicable, the GDPR (Chapter V), such as standard contractual clauses or transfers to countries recognized as offering an adequate level of data protection.
7. Your rights

Under the LGPD and, where applicable, the GDPR, you may request at any time, by contacting luce@luceinfinita.com: confirmation that we process your data; access to your data; correction of incomplete, inaccurate, or outdated data; anonymization, blocking, or deletion of unnecessary or excessive data; data portability; information about the entities with which we share your data; deletion of personal data processed with your consent; and revocation of consent at any time. Residents of the European Union or European Economic Area may also lodge a complaint with their local data protection authority, and residents of Brazil with the ANPD (Autoridade Nacional de Proteção de Dados).

8. Data security
We adopt reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure, including encrypted connections and restricted access to payment and personal data. No method of transmission or storage is entirely secure, but we work to continuously improve our safeguards.

9. Cookies
This website uses cookies and similar technologies to ensure its proper functioning, remember preferences, and analyze site usage, as described in our Cookie Policy.

10. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect legal changes or changes to our data practices. The updated version will be posted on this page with a new revision date. We recommend reviewing this page periodically.

11. Contact
For questions about this Privacy Policy or to exercise your rights, please contact us at:
Email: luce@luceinfinita.com
WhatsApp: +55 49 99113-1306