This Privacy Policy explains how Weepar Capital S/A (“Weepar”, “we”) processes the personal data of people who visit weepar.com and get in touch with us, in accordance with Brazil’s General Data Protection Law (Law No. 13,709/2018 — LGPD) and, where applicable, the EU General Data Protection Regulation (GDPR) and the UK GDPR.
1. Data controller
Weepar Capital S/A is the controller of the personal data processed through this website. For any privacy matter, please contact our data protection officer at [email protected].
2. Data we collect
- Data you provide through the chat or by email: name, company (optional), email address, country and phone number — and, where applicable, the product you asked about and the content of any messages you send us.
- Technical browsing data: IP address, browser and device type, pages visited, date and time — recorded automatically by our hosting provider and our protection network (Cloudflare) for security and to keep the website running.
- Preferences stored in your browser: the language, region and currency you choose, kept only on your own device.
We do not collect sensitive data and we do not use advertising or marketing tracking tools.
3. Why we use your data and on what legal basis
- To reply to your enquiry — including an automatic confirmation email with your reference number — and follow up on commercial, pricing, partnership or investment requests — pre-contractual steps and legitimate interest (LGPD art. 7, V and IX; GDPR art. 6(1)(b) and (f)).
- To protect the website against fraud, abuse and attacks — legitimate interest.
- To meet legal and regulatory obligations, including anti-money-laundering rules applicable to transactions in commodities, precious metals and stones — compliance with a legal obligation.
4. Who we share data with
We never sell or rent personal data. We only share what is necessary with service providers that help us run the website and our communications, under confidentiality obligations:
- website hosting (HostGator);
- content delivery and protection network (Cloudflare);
- corporate email service (Titan);
- providers of the market content shown on the website, such as TradingView (quotes), the LBMA (gold price) and Frankfurter (European Central Bank reference exchange rates), which receive technical data from your browser when that content loads, under their own policies.
We may also share data with public authorities where required by law or court order.
5. International transfers
Some of these providers store or process data outside Brazil, including in the United States and the European Union. In such cases we apply the safeguards set out in LGPD art. 33 — and, where the GDPR applies, its Chapter V — such as contractual clauses and the selection of providers with recognised data protection standards.
6. How long we keep data
Messages sent through the chat or by email are kept for as long as needed to handle your request and any resulting business relationship, and then for the periods required by law or needed to exercise legal rights. Technical access logs are kept for 6 months, as required by Brazil’s Internet Civil Framework. After these periods, data is deleted or anonymised.
7. How we protect data
We use encrypted connections (HTTPS), protection against automated access, restricted access to data — chat messages are kept in an administrative area available only to our team — and providers with appropriate security measures. No system is entirely immune to incidents; should one occur that may cause significant risk or harm, we will notify the affected data subjects and the competent authorities as required by law.
8. Your rights
At any time and free of charge, you may request: confirmation that we process your data; access to your data; correction of incomplete, inaccurate or outdated data; anonymisation, blocking or deletion of unnecessary or excessive data; portability; information about who we share your data with; and review of decisions based solely on automated processing, if any. If you are in another country, you may exercise the equivalent rights under your local law, such as the GDPR and the UK GDPR, including the right to object to processing.
To exercise your rights, email [email protected]. You may also lodge a complaint with Brazil’s data protection authority (ANPD) or with the data protection authority of your country.
9. Cookies and local storage
This website does not use advertising or analytics cookies. We only use:
- browser local storage, to remember your chosen language, region and currency;
- technical security cookies from Cloudflare, which are essential to protect the website against bots;
- anonymous usage statistics: we count, in aggregate, visits, page views and clicks on the contact buttons, together with the country of access (provided by Cloudflare), the language chosen, the type of device and the referring website. We do not use cookies or store your IP address: to prevent abuse we only use a code derived from it, discarded within 10 minutes, plus a temporary session marker in your browser;
- third-party content (TradingView charts and quotes), which may set its own cookies when it loads. You can decline them in the cookie notice; in that case the TradingView quotes are not shown.
You can delete or block this data in your browser settings; some website features may stop working.
10. Children
This website is intended for companies, investors and professionals. We do not knowingly collect data from anyone under 18.
11. Changes to this policy
We may update this policy to reflect changes in the law or in our services. The date of the latest update is shown at the top of this page.
12. Contact
Weepar Capital S/A — data protection officer: [email protected].