Privacy Policy
This policy explains how ARB Distribuidora Ltda, a Brazilian company registered under CNPJ 02.410.057/0001-94 and owner of the Engarb brand, handles personal data, in compliance with Brazilian Law 13.709/2018 (LGPD).
In one sentence: we use your data only to deliver what you bought, issue the tax invoice and support you afterwards. We never sell, rent or share personal data for anyone to advertise to you.
1. Who we are
ARB Distribuidora Ltda, CNPJ 02.410.057/0001-94, Rua Palmeiras das Missões, 48, fundos, Cidade Patriarca, São Paulo/SP, Brazil, 03550-060. We sell to consumers exclusively through marketplaces, under the Engarb brand.
2. What data we handle, and where it comes from
We collect no data on this website. This is an informational site: it has no form, no cart, no login, and no tracking or advertising cookies.
The personal data we handle reaches us from the marketplace where you bought, at the moment the order is created:
| Data | Why we need it |
|---|---|
| Recipient name | To identify the order and issue the tax invoice |
| Shipping address | To dispatch the goods |
| Taxpayer number (CPF or CNPJ) | To issue the tax invoice, where the law requires it |
| Phone and e-mail, where the marketplace provides them | To contact you about delivery or support |
| Items, amounts and order history | To pick, dispatch, support and honour warranty |
| Messages you send us | To answer questions, returns and complaints |
We do not handle payment card data. Payment happens entirely inside the marketplace, and that data never reaches us.
3. Why we process it, and on what legal basis
- Performance of a contract (LGPD art. 7, V): picking, packing, dispatching and delivering your order, and supporting you after the purchase.
- Compliance with a legal obligation (art. 7, II): issuing tax invoices and keeping tax and accounting records for the period the law requires.
- Legitimate interest (art. 7, IX): preventing fraud and defending our rights in legal proceedings, to the extent necessary.
We do not use your data for advertising, and we perform no profiling or automated decision making that affects you.
4. Who we share it with
We share only what is necessary, and only with parties involved in delivering your order:
- Carriers and the postal service, to deliver the goods.
- The marketplace where you bought, which is already the source of the data.
- Our management system and our accountants, for tax invoicing and bookkeeping.
- Public authorities, where there is a legal obligation or a court order.
We never sell, rent or share personal data for third-party marketing.
5. Where the data is stored
Data is stored and processed in Brazil. Our database and our application run on servers in the São Paulo region. Our operation involves no international transfer of personal data.
6. How long we keep it
We keep order data for as long as needed to run the business and to comply with Brazilian tax and commercial law, which is generally five years from the close of the financial year. After that, data is deleted or anonymised. Support messages are kept while useful for warranty and dispute resolution.
Where a marketplace or integration partner relationship ends, we delete the data obtained through that partner from our production systems and backups, except records we are legally required to keep.
7. How we protect it
All traffic is encrypted in transit and data is encrypted at rest. Internal access is restricted by individual permission, granted on the principle of least privilege, and revoked on the day a person leaves. There is no public sign-up in our system: accounts are created only by the administrator.
In the event of a security incident that may create relevant risk, we notify the Brazilian data protection authority (ANPD) and the affected individuals within the period set by law, and we notify any marketplace partner whose data is involved without undue delay and in any case within 72 hours of becoming aware of it.
8. Your rights
Under the LGPD you may confirm whether we process your data, access it, correct it, request anonymisation, blocking or deletion of unnecessary or excessive data, request portability, learn who we share it with, and withdraw consent where applicable.
To exercise any of these, write to alan@arbmateriais.com.br. We reply within the legal deadline. We may ask for information confirming your identity first, so that we never hand your data to someone else.
If you bought through a marketplace and ask us to delete your data, we comply and we also assist the marketplace with whatever it needs to do on its side.
9. Data protection officer
Alan Ruffato Bezerra, director. Contact: alan@arbmateriais.com.br.
10. Cookies
This website uses no tracking, advertising or analytics cookies.
11. Changes to this policy
We review this policy at least once a year, and whenever something relevant changes in how we handle data. The effective date at the top indicates the current version.