Privacy Policy

1. Data Controller Identification

The processing of personal data described in this Policy is carried out by [Controller Name / Legal Entity], registered under [Tax ID], headquartered at [Address], hereinafter referred to simply as the "Controller".

To exercise any rights provided for in this Policy, contact us at mydrinkbooking@gmail.com.

2. Personal Data Collected

We collect only the data strictly necessary for the sale and delivery of the e-book:

• Identification data: full name and email.
• Payment data: processed directly by the payment provider (we do not store card data).
• Browsing data: IP address, device type, pages visited and cookies (see section 6).

3. Purposes and Legal Bases

We process your personal data for the following purposes:

• Performance of the contract (LGPD art. 7, V / GDPR art. 6(1)(b)): process payment and deliver the e-book.
• Compliance with legal obligation (LGPD art. 7, II / GDPR art. 6(1)(c)): tax invoicing and accounting retention.
• Consent (LGPD art. 7, I / GDPR art. 6(1)(a)): sending marketing communications, when authorized.
• Legitimate interest (LGPD art. 7, IX / GDPR art. 6(1)(f)): security, fraud prevention and service improvement.

4. Data Sharing

We do not sell your data. We may share it with the following operators, under contract and duty of confidentiality:

• Payment processors (e.g.: Stripe, Hotmart, Mercado Pago).
• Email sending and digital delivery providers.
• Cloud hosting and infrastructure providers.
• Public authorities, when required by law or court order.

5. International Transfer

Some operators may be located outside Brazil or the European Union. In such cases, we ensure the transfer occurs to countries with an adequate level of protection or under standard contractual clauses, as required by LGPD (art. 33) and GDPR (arts. 44–49).

6. Cookies and Similar Technologies

We use essential cookies for the site to function and analytics cookies to measure audience. You can manage preferences in your browser. Refusing non-essential cookies does not prevent reading this page.

7. Data Retention

We keep your data for the time necessary to fulfill the described purposes, observing legal deadlines (e.g.: five years for tax documents). After that period, data is anonymized or securely deleted.

8. Data Subject Rights

You may exercise, at any time and free of charge, the following rights:

• Confirmation of processing and data access (LGPD art. 18, I–II / GDPR art. 15).
• Correction of incomplete, inaccurate or outdated data (LGPD art. 18, III / GDPR art. 16).
• Anonymization, blocking or deletion of data (LGPD art. 18, IV / GDPR art. 17).
• Data portability to another provider (LGPD art. 18, V / GDPR art. 20).
• Deletion of data processed with consent (LGPD art. 18, VI).
• Information about sharing (LGPD art. 18, VII).
• Withdrawal of consent (LGPD art. 8, §5 / GDPR art. 7(3)).
• Objection to processing (LGPD art. 18, §2 / GDPR art. 21).
• Complaint to the supervisory authority (ANPD in Brazil; local authority in the EU).

To exercise these rights, send your request to mydrinkbooking@gmail.com.

9. Information Security

We adopt appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration or destruction — including encryption in transit (TLS), access control and continuous monitoring.

10. Data Protection Officer (DPO)

Our Data Protection Officer can be contacted at mydrinkbooking@gmail.com.

11. Changes to this Policy

We may update this Policy periodically. The current version will always be available on this page, with the last updated date at the top. Material changes will be communicated through the registered channels.