For Ikhon, the protection and privacy of your data are of utmost importance. It is Ikhon’s policy to respect your privacy regarding any information and personal data we may collect on our websites and forms.
With this in mind, we have prepared this policy to demonstrate our commitment to ensuring transparency, privacy, and protection of personal data in each of our activities, safeguarding your rights and fundamental freedoms, as provided for in the General Data Protection Law (13.709/18) and related regulations.
Legal Definitions
Get to know the main essential concepts so that you, as the data subject, can understand, in a simple and objective manner, what each definition listed by the LGPD (General Data Protection Law) entails:
- Personal Data: Any information related to a natural person, capable of identifying them or making them identifiable, such as: name, CPF (Brazilian Individual Taxpayer Registry), RG (Identity Card), driver’s license, among others;
- Sensitive Personal Data: Personal data about racial or ethnic origin, religious belief, political opinion, union membership, or organization of a religious, philosophical, or political nature, data related to health or sexual life, genetic or biometric data, when linked to a natural person;
- Data Subject: Natural person to whom the personal data being processed refers;
- Data Processing: Any activity that uses data in the execution of its processes, such as: collection, sharing, transfer, storage, elimination, among other actions;
- Data Controller: Natural or legal person, public or private, responsible for defining the means and purposes of using your personal data;
- Data Processor: Natural or legal person, public or private, who carries out the processing of personal data on behalf of the controller, such as service providers;
- Data Protection Officer: Person appointed by the controller and processor to act as a channel of communication between the controller, data subjects, and the National Data Protection Authority (ANPD);
- National Data Protection Authority (ANPD): The National Data Protection Authority is a public administration body responsible for safeguarding, implementing, and supervising compliance with this Law throughout the national territory.
What personal data may be collected?
Driven by the desire to provide data subjects with the best experience when using our services, Ikhon may collect your personal data.
Collection may be done in two different ways:
- Through contact, registrations, and forms filled in spontaneously by the data subject when using our services, answering questions from our employees, participating in opinion polls or interviews, or by creating accounts or providing references about yourself on our social networks and website, such as: NAME, RG, CPF, DRIVER’S LICENSE, EMAIL, DATE OF BIRTH, FINANCIAL DATA, ADDRESS, PHONE NUMBER, AND WHATSAPP.
- Automatically, through cookies and standard technologies, such as: URL, IP ADDRESS, BROWSER INFORMATION, DATE AND TIME, DEVICE, AND GEOLOCATION.
What are Cookies?
Cookies are files or information that may be stored on your devices when you visit Ikhon’s websites or use its online services. Generally, a cookie contains the name of the site that originated it, its lifespan, and a value, which is randomly generated.
Ikhon uses cookies to enhance the use and adapt its website and applications to the interests and needs of each user, as well as to improve their structure and content. Cookies may also be used to speed up your activities and future experiences on our platforms.
Cookie Categories
Cookies can be categorized into various definitions; however, we will explicitly state in our policy the most commonly used categories, following the guidelines of the National Data Protection Authority:
Cookies According to the Entity Responsible for Management:
- First-Party or Primary Cookies: Those set directly by the site or application the user is visiting.
- Third-Party Cookies: Those created by a domain different from the one the user is visiting.
Cookies According to Need:
- Necessary Cookies: essential for the site and all its applications to load correctly, allowing access to all available features on the site.
- Non-Necessary Cookies: Those whose deactivation does not prevent the normal functioning of the site or application.
Cookies According to Retention Period:
- Session or Temporary Cookies: Those designed to collect information while the data subject accesses the site or application and are usually discarded after the session ends.
- Persistent Cookies: Those in which the collected data can be accessed and processed for a period defined by the controller.
Cookies According to Purpose:
- Analytical or Performance Cookies: Help to see how each user interacts, providing information about visited areas, time spent on the site, if there were any errors in using the features, among others.
- Functionality Cookies: Allow the website to remember your choices to provide a specialized experience, such as choosing the language of the page, as well as allowing the user to use available tools.
- Advertising Cookies: Those used to collect information from users for the purpose of displaying ads.
However, the data subject is guaranteed control over the use of cookies through browser configuration or through the cookie banner on our page, being aware that, if certain cookies are disabled, the use of page resources and functions may be limited.
What is Ikhon’s purpose in data processing?
The data processing carried out by Ikhon has the main purpose of providing data subjects with the best experience in the acquisition and use of any of our products and services, as well as to provide specialized and targeted customer service, including, but not limited to:
- Performing collections, issuing invoices and related financial documents, proceeding with cancellations of purchases, refunding amounts, or exchanging products, observing the provisions of current legislation;
- Adapting the appearance, organization, and logistics of our stores, the type and quantity of products necessary to meet customers’ expectations and interests;
- Adapting websites and applications to customer preferences to provide them with faster, more enjoyable, personalized, and effective access;
- Commercial relationship and maintenance of a communication channel aiming to constantly adapt and improve the relationship with customers.
We also inform that data may be processed, when necessary, to comply with legal obligations, or in the regular exercise of rights in judicial, administrative, or arbitration proceedings.
There is also the possibility of data being processed based on Ikhon’s legitimate interest, always respecting the rights and fundamental freedoms of the data subject and the other guidelines imposed by the General Data Protection Law.
The use of data provided by data subjects for advertising purposes and marketing campaigns may only be carried out with the collection of the data subject’s consent, as it is our commitment to respect your privacy and ensure your fundamental rights as a data subject.
Sharing of personal data
In the development of certain activities, Ikhon will rely on the support of some partners and suppliers, and may thus share your personal data, as described below:
- With partner companies and service providers necessary for the execution of activities.
- Public administration, in case of legal or judicial obligation, for the protection of rights, fulfillment of duties, guarantee of customer safety, fraud investigation, and/or responses to public inquiries, after officially notified.
The sharing of personal data carried out by Ikhon will observe all necessary security measures to ensure the confidentiality and integrity of your information.
Storage of personal data
The Data will be retained as long as necessary for the fulfillment of the purpose for which they were collected, or for the periods established in specific laws and/or regulations, and will subsequently be deleted or anonymized, if applicable, within the technical limits of the activities.
How do we ensure the security of your personal data?
Ikhon uses technical, administrative, and organizational security measures, all aimed at fully protecting the personal data processed, in accordance with criteria defined by the best market standards and applicable legislation.
The security measures adopted aim to protect personal data against accidental or unlawful situations of destruction, loss, alteration, communication, or any form of inappropriate or unlawful processing, as well as discriminatory processing of information.
Ikhon undertakes to inform the Data Subject and the data protection authorities of any security incidents that may pose risks or relevant damages to the Data Subjects, after prior notification and validation of the request.
Data subjects’ rights
Ikhon aims to maintain the relationship with all data subjects as transparent as possible! Therefore, we respect and guarantee to each user the full applicability of the law, enabling the submission of requests based on the following rights:
- Confirmation of the existence of processing of my personal data;
- Access to my personal data;
- Deletion of unnecessary, excessive, or unlawfully processed data;
- Correction of incomplete, inaccurate, or outdated data;
- Revocation of consent;
- Portability of personal data.
How can you exercise your right?
Your rights as a data subject may be exercised by sending a request to the Data Processing Officer, so that an assessment can be made and the necessary measures related to your rights can be taken.
Therefore, in order to facilitate the exercise of these rights, Ikhon has created a COMMUNICATION CHANNEL for you, as a data subject, to exercise your rights.
Ikhon undertakes to make every effort to respond to requests as quickly as possible, emphasizing that if the requested demands are of great complexity, it will result in a longer time for the demand to be met and the response to be elaborated.
Finally, we inform that some requests may be legally rejected for FORMAL reasons, such as the data subject’s inability to prove their identity, or LEGAL reasons, such as when data maintenance is a right of the controller, for compliance with a legal or regulatory obligation.
If any of the circumstances arise that prevent the fulfillment of data subjects’ rights, Ikhon will present to the Users the pertinent and reasonable justifications.
Who controls personal data?
By using any of our services through our websites and social networks, Ikhon will act as the data controller, as required by the General Data Protection Law.
Data Protection Officer
The data protection officer, also known as DPO (Data Protection Officer), is the professional responsible for communication between IKHON, data subjects, and the National Data Protection Authority (ANPD).
Here at Ikhon, the role of Data Protection Officer is performed by the DPOs Magno Castro Alves and Thiago Castro Alves.
Do you have any questions?
If you have any questions about our privacy policy or any other matters related to the processing of personal data carried out by Ikhon, please contact our Data Protection Officer (DPO) at dpo@ikhon.com.br.
Final Provisions
Ikhon may, at any time, change the terms of this Policy without the need for prior communication to the Data Owner.
If there are any changes, the new version will be immediately disclosed on the official website.
