Privacy Policy

Welcome to Honey Rose ("we," "us," or "our"). We are an emerging fashion brand specializing in mid-to-high-end synthetic hair wigs and wefts, dedicated to serving our customers across Brazil and internationally.

This Privacy Policy describes how Honey Rose collects, uses, stores, shares, and protects information about you when you visit our website, make a purchase, or interact with us through any of our digital or physical channels.

By accessing or using our services, you agree to the terms outlined in this Privacy Policy. If you do not agree, please discontinue use of our services.

This policy applies to all users of our website, e-commerce platforms, retail partner integrations, salon partnerships, and any other service we provide.

We collect information in the following categories depending on how you interact with us:

Personal Identification Information

• Full name, email address, phone number
• Billing and shipping address
• Date of birth (when provided for personalization)
• CPF or other tax identification numbers (for Brazilian legal compliance)

Transaction & Purchase Data

• Order history, product preferences, and purchase frequency
• Payment method details (processed securely via third-party processors; we do not store full card numbers)
• Returns, exchanges, and customer service interactions

Technical & Usage Data

• IP address, browser type, operating system, and device identifiers
• Pages visited, time spent on site, and referral URLs
• Clickstream data and interaction logs

Voluntarily Provided Data

• Survey responses, product reviews, and feedback forms
• Social media handles and user-generated content you share with us
• Communication records (email, chat, WhatsApp inquiries)

We use the information we collect for the following purposes:

Order Fulfillment & Customer Service

To process your orders, arrange delivery, handle returns or exchanges, and respond to your inquiries promptly and effectively.

Personalization & Product Recommendations

To tailor our product recommendations, promotions, and communications to better match your style preferences and purchase history.

Marketing & Communications

To send you newsletters, promotional offers, new collection announcements, and event invitations--only where you have given us your consent or where we have a legitimate interest to do so.

Business Operations & Analytics

To analyze website traffic, understand customer behavior, improve our product offerings, and optimize our e-commerce and retail operations.

Legal & Compliance

To comply with applicable laws, regulations, and legal processes, including Brazilian consumer protection law (CDC) and the Lei Geral de Proteção de Dados (LGPD).

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your data in the following limited circumstances:

Service Providers

We engage trusted third-party vendors to assist with payment processing, logistics and shipping, email communications, analytics platforms, and customer support tools. These providers are contractually obligated to protect your data and use it only for the services they provide to us.

Retail & Salon Partners

When you purchase through one of our authorized retail partners or salon studios, limited transaction data may be shared to fulfill your order and provide after-sales support.

Legal Requirements

We may disclose your information when required by law, court order, or government authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections.

Our website uses cookies and similar tracking technologies to enhance your browsing experience and gather usage analytics.

Types of Cookies We Use

• Essential cookies: Required for the website to function correctly (e.g., shopping cart, login sessions).
• Analytics cookies: Help us understand how visitors interact with our site (e.g., Google Analytics).
• Marketing cookies: Used to deliver relevant advertisements and track campaign performance.
• Preference cookies: Remember your settings and personalization choices.

Managing Cookies

You can control or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website. You may also opt out of interest-based advertising by visiting NAI Opt-Out.

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

• Purchase and transaction records are retained for a minimum of 5 years to comply with Brazilian tax and consumer protection regulations.
• Marketing consent records are retained until you withdraw consent, plus an additional period for legal compliance.
• Customer service communications are retained for up to 2 years after your last interaction.
• Technical and analytics data is retained in aggregated, anonymized form indefinitely.

When data is no longer needed, we securely delete or anonymize it in accordance with our data destruction procedures.

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

• All data transmissions are encrypted using SSL/TLS protocols.
• Payment information is handled by PCI-DSS compliant payment processors.
• Access to personal data is restricted to authorized personnel on a need-to-know basis.
• We conduct regular security assessments and vulnerability testing.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. In the unlikely event of a data breach, we will notify affected users in accordance with applicable law.

Under the Lei Geral de Proteção de Dados (LGPD - Law No. 13,709/2018) and other applicable regulations, you have the following rights regarding your personal data:

• Right of access: Request confirmation that we process your data and obtain a copy.
• Right of correction: Request correction of inaccurate or incomplete data.
• Right of deletion: Request deletion of your personal data, subject to legal retention obligations.
• Right of portability: Receive your data in a structured, machine-readable format.
• Right to withdraw consent: Withdraw consent for marketing or non-essential data processing at any time.
• Right to object: Object to processing based on legitimate interests.
• Right to information: Be informed about third parties with whom your data has been shared.

To exercise any of these rights, please contact us using the details in Section 12. We will respond to your request within 15 business days.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately and we will take steps to delete such information from our systems.

If we become aware that we have inadvertently collected personal information from a minor without appropriate parental consent, we will delete it promptly.

As a brand with international supply chain and technology partnerships, your personal data may be transferred to and processed in countries outside of Brazil. When such transfers occur, we ensure that appropriate safeguards are in place to protect your data in accordance with the LGPD and other applicable privacy laws.

These safeguards may include standard contractual clauses, adequacy decisions, or other legally recognized transfer mechanisms. You may request information about the specific safeguards applied to your data by contacting us.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Notify you via email (if you have an account with us) or through a prominent notice on our website.
• Where required by law, seek your renewed consent.

We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer: