1. Commitment to Privacy

Poli Cucina respects privacy and processes personal data in accordance with the Brazilian General Data Protection Law — LGPD (Law No. 13,709/2018) and other applicable regulations.

This Privacy Policy explains what data may be processed, the purposes for which it may be used, with whom it may be shared, and how data subjects may exercise their rights.

2. Data That May Be Collected

When using the website, creating an account, booking, or participating in experiences, the following data may be collected:

• full name
• email address
• telephone number or WhatsApp
• CPF or CNPJ, when required for payment, registration, or issuance of tax documents
• billing address, where applicable
• details of the selected experience, including date, number, and names of participants
• information provided for the creation of customized experiences
• dietary preferences
• dietary restrictions and allergies, when necessary for the safety and proper delivery of the experience
• messages and information submitted through forms or customer service channels
• browsing data, technical logs, cookies, and information regarding interactions with the website
• communication preferences and consent records, where applicable

Full payment card details are processed by the payment platform and its respective financial partners in accordance with their own security measures and policies.

3. Sensitive Personal Data

Information regarding allergies or other health-related conditions may be considered sensitive personal data under the LGPD.

Poli Cucina will only request and use such information when necessary to ensure the safety or proper delivery of the experience, in accordance with the applicable legal basis and limiting the processing to what is necessary.

4. Purposes of Data Processing

Personal data may be used to:

• create and manage user accounts
• process payments and confirm bookings
• manage reservations and registrations
• organize and provide experiences
• send confirmations, instructions, and updates
• take dietary preferences, restrictions, and allergies into account
• prepare proposals for customized experiences
• issue tax documents, when necessary
• provide customer service and support
• prevent fraud and protect the security of the website and transactions
• comply with legal, regulatory, and administrative obligations
• improve the operation, security, and browsing experience of the website
• send newsletters, updates, and marketing communications where an appropriate legal basis exists, including consent where required

5. Legal Bases for Processing

Depending on the circumstances, personal data may be processed for the performance of a contract or preliminary procedures related to entering into a contract, compliance with legal or regulatory obligations, the regular exercise of rights, legitimate interests, protection of life or physical integrity, consent of the data subject, and other circumstances provided for under the LGPD.

For sensitive personal data, the specific legal grounds authorized by applicable legislation will be observed.

6. Data Sharing

When necessary for the operation of the website or provision of services, personal data may be shared, to the extent necessary for each specific purpose, with:

• Wix and companies responsible for the website’s hosting, infrastructure, and functionalities
• Wix Payments, financial institutions, acquiring institutions, and other payment processing partners
• email, communication, and customer service tools
• systems used to issue tax documents
• service providers and partners involved in delivering the experiences, when necessary
• analytics, advertising, and marketing tools that may be activated on the website
• public authorities or third parties where required by law, regulation, or a valid legal order

Poli Cucina does not sell or otherwise commercialize personal data.

7. Cookies and Similar Technologies

The website may use cookies and similar technologies that are necessary for the operation of the platform, authentication, security, preferences, statistics, and improvement of the user experience. As the website is developed using Wix, the platform’s native analytics features may be used.

If tools such as Google Analytics, Meta Pixel, Google Ads, or similar services are activated, the use of these technologies will comply with applicable consent settings and the information provided on the website, where required.

Users may manage cookies through the options provided by the website and/or their browser. Please note that disabling essential cookies may affect certain website functionalities.

8. Marketing Communications

Poli Cucina may send newsletters and other promotional communications in the future.

Where required, such communications will be sent based on the data subject’s consent or another valid legal basis. Data subjects may unsubscribe from these communications using the mechanisms provided within the communication itself or through Poli Cucina’s contact channels.

9. Data Storage, Security, and Retention

Poli Cucina adopts reasonable security measures to reduce the risk of unauthorized access, alteration, loss, disclosure, or improper destruction of personal data.

Personal data will be retained for as long as necessary to fulfill the purposes described in this Policy, perform contracts, comply with legal or regulatory obligations, exercise rights, and protect legitimate interests. Data will be deleted or anonymized when applicable.

10. International Data Transfers

Some technology providers used by the website may store or process data outside Brazil.

Where international transfers of personal data occur, the requirements and mechanisms established under the LGPD and applicable regulations will be observed.

11. Data Subject Rights

Under the LGPD, data subjects may, where applicable, request:

• confirmation of whether their personal data is being processed
• access to their personal data
• correction of incomplete, inaccurate, or outdated data
• anonymization, blocking, or deletion of data that is unnecessary, excessive, or processed in violation of the LGPD
• data portability, where applicable and in accordance with applicable regulations
• deletion of personal data processed based on consent, subject to legally permitted or required retention
• information regarding data sharing and the possibility of refusing consent, where applicable
• withdrawal of consent
• objection to data processing in the circumstances provided by law

Requests may require verification of the data subject’s identity in order to protect against unauthorized access or improper changes to personal data.

12. How to Exercise Your Rights

Data subjects may submit requests regarding their personal data through the official contact channels available on the Poli Cucina website, including the contact form or WhatsApp.

Requests will be handled in accordance with the deadlines and procedures established by applicable legislation.

13. Updates to This Privacy Policy

This Privacy Policy may be updated to reflect changes to the services, tools used, data processing activities, or applicable legislation.

The current version of this Privacy Policy will be made available on this page.