Privacy Policy

Who is the controller

SCB Comércio e Soluções Industriais Ltda, registered under CNPJ 08.022.811/0001-03, headquartered at Rua Profa. Clarice Baruque Dodson, 171, Planalto do Sol 2, Santa Bárbara d'Oeste - SP, CEP 13453-827, Brasil, is the controller of the personal data processed on this site, under Brazilian Law No. 13,709/2018 (LGPD).

What data we collect

We collect only what you voluntarily provide in the site's forms:

• Name, email, company and phone — provided at sign-up, in the contact form or when requesting a certificate.
• Account access data when you register: email and password (stored encrypted and inaccessible to us).
• A record of your consent: date, time and the exact text you accepted.
• Technical access data such as IP address and browser type, generated automatically by the hosting services for security reasons.

We do not collect sensitive data, use advertising cookies or perform cross-site tracking.

What we use it for

• Responding to your commercial and technical enquiries.
• Allowing lookup and download of certificates of analysis by batch.
• Sending communications you have requested, such as the newsletter.
• Keeping the site secure and preventing abuse.

Legal basis

We process your data based on your consent (art. 7, I of the LGPD), given when you tick the acceptance box in the forms. For technical security data, the basis is legitimate interest (art. 7, IX). You may withdraw consent at any time.

Who we share with

We do not sell or transfer your data. We use the following service providers, acting as processors:

• Supabase — database and authentication
• Vercel — site hosting
• Cloudflare — DNS, bot protection and file storage
• Resend — transactional email delivery
• Microsoft 365 — corporate email

Some of these services store data outside Brazil. International transfers follow art. 33 of the LGPD, with providers that adopt contractual protection clauses.

How long we keep it

We keep your data for as long as the commercial relationship lasts, or until you request deletion. Consent records are retained for as long as needed to demonstrate LGPD compliance.

Your rights

The LGPD grants you, at any time, the right to:

• Confirm whether we process your data and access it
• Correct incomplete or outdated data
• Request deletion of data processed based on consent
• Request portability to another provider
• Withdraw consent
• Know who we share your data with

To exercise any of these rights, write to contato@scb.ind.br. We respond within 15 days.

How we protect it

We apply technical measures to protect your data: encrypted connection (HTTPS), role-based access control, isolation through database rules and logging of administrative actions. Passwords are stored with irreversible encryption.

Cookies

We use only cookies necessary for the site to work: keeping your session when you log in, and your language preference. We do not use advertising or behavioural analytics cookies.

Changes to this policy

We may update this policy. The last update date is shown at the top. Relevant changes will be communicated through the contact channels you provided.

Contact

Questions about this policy or about how your data is handled can be sent to contato@scb.ind.br.