Privacy Policy

Rukam respects the privacy of its customers, users, suppliers, partners and other individuals who interact with our physical and digital channels. This Privacy Policy explains which personal data may be processed, for what purposes, with whom it may be shared, how long it may be retained and what rights data subjects have.

This Policy applies to Rukam's online store, customer service channels, WhatsApp Business, the Rukam Virtual Nerd, forms, quotation requests, proposals, support, warranty, after-sales services, analytics tools, digital services and other interactions related to the company's operations.

Personal data is processed in accordance with applicable law, particularly Brazilian Law No. 13,709/2018 — the Brazilian General Data Protection Law (LGPD).

1. Who is the data controller

For personal data processing activities in which it determines the purposes and essential means of processing, the controller is:

WINSLEY DE OLIVEIRA EPP
Trade name: RUKAM Informática
CNPJ: 04.013.594/0001-26
State Registration: 134.729.583.113
CCM: 7.267.758-9
Rua Tapes, 736 — Jardim Aeroporto
CEP 04631-011 — São Paulo — SP — Brazil

Requests related to privacy and personal data protection may be sent to:

Email: [email protected]
Subject: Dados LGPD

To facilitate identification and proper routing of the request, please use “Dados LGPD” in the email subject line.

2. What personal data and processing mean

Personal data means information relating to an identified or identifiable natural person, such as name, CPF, telephone number, address, email address and other information that, alone or together, may allow identification.

Processing of personal data includes operations such as collection, use, access, storage, organization, consultation, updating, sharing, transmission, archiving, anonymization and deletion of personal data.

3. Personal data we may process

Depending on how the data subject uses the website, makes a purchase, requests assistance or otherwise interacts with Rukam, the following data may be processed:

  • registration and identification data: name, CPF, telephone number, email address, address and information required for registration;
  • data related to legal entities: information about representatives, responsible persons, purchasers, contacts and other natural persons involved in the transaction;
  • commercial and order data: purchased products, amounts, order history, quotations, shipping method, delivery address and communications related to the purchase;
  • tax data: information required for issuing and maintaining tax documents and complying with tax obligations;
  • payment-related data: information required to identify, approve and reconcile the transaction, according to the payment method used;
  • customer service data: messages, emails, requests, support records, warranty, after-sales service and other communications with Rukam;
  • data voluntarily submitted: images, photographs, PDFs, proposals, technical documents and other attachments sent by the user;
  • technical data: IP address, browser, device, operating system, date and time of access, pages visited, navigation events, security records and other technical identifiers required for operation, protection and analysis of the services.

4. Data processed by the e-commerce platform

Rukam's online store uses the technological infrastructure provided by Nuvemshop. As part of providing these services, the platform may process personal data, technical records, cookies and other information required for operation of the online store, according to its applicable policies and terms.

Rukam does not have direct access to all technical data or information processed exclusively through the platform's infrastructure.

5. How personal data is obtained

Personal data may be obtained:

  • directly from the data subject during registration, purchase, customer service, quotation requests, support, warranty or after-sales service;
  • during conversations through WhatsApp Business, the Rukam Virtual Nerd, email, telephone, forms or other official channels;
  • from companies and representatives involved in a commercial transaction;
  • from service providers used for payments, logistics or other activities required for our operations;
  • from public databases and officially available sources when consultation is necessary and legally permitted, including registration, tax or commercial validation.

6. How we use personal data

Rukam may process personal data to:

  • create and manage customer records;
  • process orders, payments, invoicing, picking, shipping and delivery;
  • issue and retain tax documents and comply with legal, tax, accounting and fiscal obligations;
  • perform registration, tax and commercial checks required for transactions;
  • provide customer service, technical support, warranty service, exchanges, returns and after-sales support;
  • respond to requests, questions and communications submitted by customers;
  • prepare quotations, proposals and technical information requested by users;
  • maintain continuity and context of ongoing customer service interactions;
  • prevent fraud, abuse, unauthorized access and security incidents;
  • measure performance, identify failures and improve digital services;
  • maintain records required in connection with purchases, payments, deliveries, customer service and warranties;
  • comply with legal, regulatory or contractual obligations or orders from competent authorities.

Rukam's processing of personal data will be carried out in accordance with the legal grounds permitted under the LGPD and other applicable laws.

7. Rukam Virtual Nerd and artificial intelligence features

Rukam provides the Rukam Virtual Nerd, a tool designed to assist users with technical questions, product information, hardware compatibility, documentation, proposals, customer service, support and other matters related to the company's operations.

Messages sent to the Nerd may be processed by automated systems and artificial intelligence technologies for interpretation of the user's question and generation of responses.

Depending on the request, the Nerd may use information from catalogs, technical manuals, manufacturer documentation, product data, authorized commercial context and other relevant technical sources.

When the user submits an image, photograph, PDF, proposal or other document, its content may be processed to understand the request, extract technical information and maintain the context of the interaction.

Interactions may be recorded for continuity of customer service, security, quality control, correction of responses, identification of failures and improvement of services, while observing the principles of necessity, adequacy and minimization under applicable law.

Responses produced by automated systems are assistive in nature. For technical procedures that may affect equipment availability, security or operation, users should also consult official documentation and instructions from the applicable manufacturer.

8. Customer service through WhatsApp Business

When users contact Rukam through WhatsApp Business, data such as telephone number, account name, message content, date and time of interactions and files voluntarily submitted by the user may be processed.

Customer service may involve members of the Rukam team, automated systems, or both, depending on the nature of the request.

Conversation content may be used for continuity of customer service, technical support, commercial follow-up, recording requests, security, quality control and improvement of services.

WhatsApp operations depend on technology infrastructure provided by Meta Platforms and are also subject to the applicable WhatsApp terms, policies and conditions. Rukam does not control processing independently performed by Meta on its own platform.

9. Images, PDFs and other attachments

When users voluntarily submit images, photographs, documents, PDFs, proposals or other files through Rukam's channels, such content may be processed only to the extent necessary to fulfill the request, provide customer service, interpret technical information, maintain the context of the conversation or fulfill another legitimate purpose related to the requested service.

Users should avoid submitting passwords, access credentials, private keys, complete payment card data, sensitive personal data or other confidential information that is not necessary for customer service.

10. Data sharing

Rukam does not sell personal data as a business activity. However, certain data may be processed or shared, to the extent necessary for the relevant operation, with:

  • Nuvemshop, as provider of the technological platform used by the online store;
  • Meta Platforms / WhatsApp, when users interact with Rukam through WhatsApp Business;
  • cloud infrastructure, security, processing, storage, communications and artificial intelligence providers required for operation of the services;
  • financial institutions, acquirers, payment intermediaries and payment providers;
  • carriers, logistics operators and delivery-related providers;
  • accounting, tax or technology service providers required for our operations;
  • public authorities, tax authorities, regulators or courts when there is a legal obligation, valid request or requirement to comply with an applicable order.

Sharing will be limited to the information necessary for the relevant purpose and operation.

11. Payment methods and intermediaries

Available payment methods and their respective intermediaries may change over time and will be displayed in the payment options shown on the website.

Processing of data related to each payment method will follow the conditions applicable to the relevant transaction and service provider.

Rukam may receive and retain information related to payment identification and reconciliation, transaction status and records required for customer service, invoicing and compliance with legal obligations.

12. Google Analytics, YouTube Studio and usage metrics

Rukam uses or may use services such as Google Analytics, YouTube Studio and other performance measurement and analytics tools. These services may independently process data and technical information according to their respective privacy policies and terms.

Rukam may have access to metrics such as pages visited, traffic source, session duration, language, device, clicks, navigation events and other information made available by the respective tools.

This information is used to evaluate performance, identify errors, understand user interests, improve content and enhance the services offered.

13. Cookies and platform technologies

The e-commerce platform used by Rukam may use cookies and similar technologies required for operation of the online store, session maintenance, shopping cart functionality, security and other platform features.

Nuvemshop and other technology providers may also process information related to the use of their infrastructure in accordance with their respective privacy policies and terms.

Rukam does not have direct access to all technical data, identifiers or information processed exclusively through these providers' infrastructure.

When accessing the online store, users may see the cookie notice provided by the platform.

14. Data retention and deletion

Personal data will be retained for as long as necessary to fulfill the purposes that justified its processing and, subsequently, for the periods necessary to comply with legal, regulatory, tax, contractual, security, warranty, fraud prevention and regular exercise of rights obligations.

Retention periods may vary according to the nature of the information and the purpose of processing.

When there is no longer a legal basis for retention, data may be deleted, anonymized, blocked or otherwise handled as permitted by applicable law.

15. Information security

Rukam adopts technical and administrative security measures appropriate to the nature of its operations in order to protect personal data against unauthorized access and accidental or unlawful destruction, loss, alteration, disclosure or inappropriate processing.

Such measures may include access controls, authentication, encryption, environment segregation, monitoring, technical logging, infrastructure protection mechanisms, backups and internal procedures.

Transmission of information through the website and digital services uses security features provided by the applicable platforms and technology providers. No digital environment can be considered completely risk-free.

Users should also contribute to account security by keeping credentials confidential and notifying Rukam of any suspected unauthorized access.

16. Rights of data subjects

Under the LGPD and subject to applicable legal conditions and limitations, data subjects may request, among other rights:

  • confirmation of the existence of processing;
  • access to personal data;
  • correction of incomplete, inaccurate or outdated data;
  • anonymization, blocking or deletion of unnecessary, excessive or unlawfully processed data;
  • data portability, when applicable and according to applicable regulation;
  • information about public and private entities with which data has been shared;
  • information about the possibility of refusing consent and the consequences, where consent is the applicable legal basis;
  • withdrawal of consent, where applicable;
  • deletion of data processed based on consent, subject to legal retention requirements;
  • objection to processing performed in violation of the LGPD, where applicable;
  • review of decisions made solely on the basis of automated processing that affect the data subject's interests, where applicable;
  • filing a petition with the Brazilian National Data Protection Authority, subject to applicable procedures.

17. How to exercise your rights

Requests related to personal data processing should be sent to [email protected], using “Dados LGPD” as the email subject.

To protect the data subject and prevent fraudulent requests, Rukam may request sufficient information to confirm the identity and legitimacy of the requester before fulfilling certain requests.

Requests will be reviewed and answered according to the timeframes and conditions provided by applicable law.

18. International data transfers and processing

Some technology providers used by Rukam may process or store personal data on infrastructure located outside Brazil.

Where international transfers of personal data occur, the requirements and mechanisms permitted under Brazilian data protection law and applicable protection measures will be observed.

19. Security incidents

If a security incident involving personal data occurs, Rukam will adopt assessment, containment and response measures appropriate to the circumstances and, where legal or regulatory requirements are met, will make the applicable notifications to data subjects and the Brazilian National Data Protection Authority.

20. Third-party links and services

Rukam's digital channels may contain links to manufacturers, carriers, payment providers, technical documentation, technology services and other third-party websites or services.

When accessing an external service, users will also be subject to that third party's policies and practices. Rukam does not control processing independently performed by such third parties.

21. Changes to this Policy

This Privacy Policy may be updated to reflect changes in legislation, services, technologies used or Rukam's internal procedures. The current version will always be available on this page.

Last updated: September 27, 2026.