Last updated: July 22, 2026

1. Introduction and identification of the controller

This Privacy Policy explains how Maria Pia Casa collects, uses, stores, shares and protects personal data during browsing, registration, purchases, customer service and other interactions carried out through its digital channels.

The controller of the personal data is RODOLPHO PEREIRA PRADO RIBEIRO, sole proprietor, registered with the Brazilian tax authority (CNPJ/MF) under no. 07.934.085/0001-24, owner of the trade name MARIA PIA CASA, with its place of business at Avenida Tiradentes, 555, Alto da Vila Nova, Itu/SP, 13309-320, Brazil, hereinafter referred to as “Maria Pia Casa”, “we” or the “Controller”.

This Policy applies to the website www.mariapiacasa.com.br, its subdomains, pages, forms, customer service channels and other digital environments operated by Maria Pia Casa, collectively referred to as the “Store”.

By using the Store or providing personal data, you acknowledge that you are aware of this Policy. Data processing is not based on a blanket authorization: each operation is carried out under a legal basis provided for in the applicable legislation.

2. Key definitions

  • Personal data: information relating to an identified or identifiable natural person, such as name, CPF (Brazilian taxpayer number), telephone, email, address, order details and IP address.
  • Sensitive personal data: information about racial or ethnic origin, religious belief, political opinion, trade union membership, health, sex life, genetic or biometric data, among other cases provided for by law.
  • Processing: any operation performed on personal data, including collection, consultation, organization, storage, use, sharing, updating, anonymization and deletion.
  • Data subject: the natural person to whom the personal data relates.

3. Personal data we may collect

The amount and type of data processed depend on how you interact with the Store. We may collect:

  • Identification and contact data: name, CPF, date of birth where required, telephone, email and registration details.
  • Delivery and billing data: address, postal code, city, state, recipient, delivery references and the information required to issue tax documents.
  • Order and transaction data: products purchased, amounts, discounts, payment method, order status, invoice, delivery, exchange, return and customer service history.
  • Limited payment data: the information needed to identify and track the transaction. Full card details, such as the complete card number and security code, are processed by the payment providers and are not stored by Maria Pia Casa.
  • Communications: messages, requests, questions, reviews, complaints, images and other content sent to Customer Service, via WhatsApp, email, forms or other official channels.
  • Browsing and device data: IP address, date and time of access, pages visited, clicks, access source, cookie identifiers, browser, operating system and device characteristics.
  • Preferences and interests: products viewed, items added to the cart, purchase history, communication preferences and interactions with campaigns.

As a rule, Maria Pia Casa does not request sensitive personal data. We ask that you do not send this type of information through our customer service channels, except when strictly necessary and requested with justification.

4. How data is collected

Data may be obtained:

  • directly from you, when you create an account, make a purchase, fill in forms or contact us;
  • automatically, while browsing, through cookies and similar technologies;
  • from providers involved in the transaction, such as payment, anti-fraud, logistics and customer service providers;
  • from advertising platforms, social networks and technology partners, where the interaction and applicable settings allow it.

5. Purposes for which we use data

We may process personal data to:

  • create and manage the customer account;
  • process purchases, payments and orders;
  • issue invoices and comply with tax, accounting and regulatory obligations;
  • calculate shipping, organize deliveries and provide tracking;
  • provide customer service, support and after-sales assistance;
  • handle exchanges, returns, refunds, warranties and fraud prevention;
  • send operational communications about registration, payment, orders, delivery and security;
  • send offers, news and content, respecting the data subject's preferences and the applicable legislation;
  • personalize browsing, recommendations and advertising;
  • measure performance, produce statistics and improve products, services, campaigns and user experience;
  • protect rights, prevent abuse, investigate incidents and maintain the security of the Store;
  • comply with legal, regulatory, administrative or judicial requirements.

6. Legal bases

Processing is carried out on the legal basis appropriate to each purpose, including:

  • performance of a contract and preliminary procedures, to enable purchases, payments, deliveries and customer service;
  • compliance with a legal or regulatory obligation, especially in tax, accounting, consumer protection and security matters;
  • regular exercise of rights, including in administrative, judicial or arbitration proceedings;
  • legitimate interest, where necessary for Maria Pia Casa's activities, with an assessment of necessity, proportionality and respect for the data subject's rights;
  • credit protection and fraud prevention, where applicable;
  • consent, where this is the required legal basis, which may be withdrawn at any time for future processing.

7. Communications and marketing

We may send messages related to orders, payments, deliveries, security and customer service, as these communications are necessary to carry out the relationship with the customer.

Promotional communications may be sent by email, telephone, SMS, WhatsApp or other permitted channels. You can opt out of advertising through the unsubscribe mechanisms included in the messages or by requesting it from our customer service channel. Opting out of advertising does not prevent essential communications about purchases and requested services.

8. Cookies and similar technologies

Cookies are small files stored in the browser or device. They help the Store function, remember preferences, understand browsing and offer more relevant content.

We may use:

  • necessary cookies, essential to the operation of the Store, security, the cart and checkout;
  • functionality cookies, used to remember choices and preferences;
  • performance and analytics cookies, used to measure audience, browsing and performance;
  • advertising cookies, used to measure campaigns and display more relevant ads.

Non-necessary cookies are used according to the choices available in the banner or preference manager, where applicable. Necessary cookies may remain active because they are essential to providing the requested service.

You can also block, delete or limit cookies in your browser settings. Disabling certain cookies may affect functions such as login, cart, preferences and checkout.

9. Sharing of personal data

Maria Pia Casa does not sell personal data. Sharing occurs only when necessary and within the purposes described in this Policy, and may involve:

  • e-commerce platforms, hosting, database and technology infrastructure providers;
  • financial institutions, payment methods, acquirers and anti-fraud services;
  • carriers, logistics operators, postal services and delivery partners;
  • customer service, CRM, communication, email and messaging providers;
  • analytics, advertising, measurement and personalization tools;
  • technology, information security, accounting, auditing and legal advisory providers;
  • companies involved in corporate reorganization, acquisition, merger or transfer of assets, subject to the applicable legal measures;
  • public, administrative, regulatory or judicial authorities, where there is a legal obligation or a valid request.

We require providers and partners to process data in accordance with instructions compatible with this Policy, adopt security measures and use the information only for the contracted purposes.

10. International data transfers

Some technology, storage, communication, analytics or advertising providers may process data in other countries. Where an international transfer takes place, the mechanisms and safeguards provided for in Brazilian legislation will be adopted to preserve the rights of data subjects and an adequate level of protection.

11. Storage, retention and deletion

Personal data is kept for as long as necessary to fulfill the stated purposes, perform contracts, meet legal and regulatory obligations, prevent fraud and exercise rights in administrative or judicial proceedings.

Once the purpose has ended and there is no legal obligation or justification for retention, the data will be deleted, anonymized or kept securely in the cases authorized by legislation.

12. Information security

Maria Pia Casa seeks to adopt appropriate technical, administrative and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure or improper destruction.

No digital environment is entirely free of risk. If a security incident that may cause relevant risk or harm is identified, the appropriate measures will be taken, including the notifications required by legislation.

Maria Pia Casa never requests passwords, security codes or full card numbers via WhatsApp, email or telephone. If you receive a suspicious message, do not provide any information and contact our official channels.

13. Behavioral profiling and automated decisions

Browsing data, preferences and interaction history may be used to build interest profiles, recommend products, prevent fraud and personalize communications or ads. Where a decision based solely on automated processing affects your interests, you may request information and a review, under the terms of the applicable legislation.

14. Children and adolescents

Purchases through the Store are intended for persons over 18 years of age or duly represented or assisted by their legal guardians. Maria Pia Casa does not intentionally request data from children for commercial purposes. Should it be necessary to process data of children or adolescents, the processing will comply with the applicable legislation and their best interests.

15. Rights of data subjects

Under the LGPD (Brazil's General Data Protection Law), you may request, as applicable:

  • confirmation of the existence of processing;
  • access to personal data;
  • correction of incomplete, inaccurate or outdated data;
  • anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of the law;
  • portability, subject to the applicable regulations and to trade and industrial secrets;
  • deletion of data processed on the basis of consent, except in the cases of retention provided for by law;
  • information about the public and private entities with which data has been shared;
  • information about the possibility of not providing consent and the consequences of refusal;
  • withdrawal of consent;
  • objection to processing carried out in breach of the legislation;
  • review of decisions made solely on the basis of automated processing, where applicable;
  • filing a complaint with the Brazilian National Data Protection Authority (ANPD), following the legal procedures.

To protect privacy and prevent improper access, we may request additional information to confirm the identity of the requester. Certain requests may be limited or not fulfilled immediately where there is a legal obligation to retain data, a need for fraud protection or the regular exercise of rights.

16. Third-party links and services

The Store may contain links to websites, applications, social networks or services managed by third parties. The privacy practices of those environments are defined by their respective operators. We recommend reading the applicable policies before providing personal data.

17. Updates to this Policy

This Policy may be updated to reflect legal, regulatory, technological or operational changes. The current version will always be available on this page, with its update date. When a change is significant, we may communicate it through the available channels.

18. Privacy and Data Protection Channel

To exercise your rights, ask questions or report matters related to personal data, contact us through our official channels:

Email: [email protected]

Customer Service WhatsApp and telephone: +55 (11) 94901-2751

Address: Avenida Tiradentes, 555, Alto da Vila Nova, Itu/SP, 13309-320, Brazil.