Privacy Policy

Last updated: May 4, 2026

This Privacy Policy explains how LOUBR AMERICA CORP, as the Data Controller, collects, uses, shares, and protects the personal data of visitors and customers of the website meubrasilonline.com.

This policy is in compliance with applicable U.S. federal and state privacy laws, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), as well as the Children's Online Privacy Protection Act (COPPA) and other applicable regulations.

1. Data Controller Legal Name: LOUBR AMERICA CORP EIN: 33-4763065 Business Address: 2 S. Biscayne Boulevard, Suite No. 2450, Miami, Florida 33131 E-mail: atendimento@meubrasilonline.pt Phone / WhatsApp (US): +1 786 213 8732 Phone / WhatsApp (Brazil): +55 18 99763-7446

1.1. Privacy Contact

For any questions regarding the processing of your personal data, you may contact our Privacy Team through:

E-mail: atendimento@meubrasilonline.pt Mailing Address: 2 S. Biscayne Boulevard, Suite No. 2450, Miami, Florida 33131 — Attn: Privacy Team

2. Personal Data We Collect

We collect only the personal data strictly necessary to provide our services. We distinguish between:

2.1. Data You Provide Directly Identification and contact data: first name, last name, email, phone number Shipping and billing data: address, ZIP code, city, state, country Order data: products purchased, amounts, payment methods (reference only — we never store full card numbers) Account data: username, encrypted password, order history Communications: content of messages sent through our contact form, email, or social media Marketing data: newsletter subscription preferences and interests indicated by you

2.2. Data Collected Automatically Technical data: IP address, device type, operating system, browser, screen resolution Browsing data: pages visited, time spent, products viewed, traffic source, clicks Cookie data: see our Cookie Policy

2.3. Data from Third Parties

We may receive payment validation data from payment service providers and shipping data from carriers, where applicable.

We do not knowingly collect personal data from children under the age of 13 without verifiable parental consent, in accordance with COPPA.

3. Purposes and Legal Bases for Processing

Purpose — Legal Basis Processing and shipping orders — Performance of a contract Billing and tax compliance obligations — Legal obligation Customer account management — Performance of a contract Customer support and response to inquiries — Performance of a contract / legitimate interest Sending newsletters and marketing communications — Consent Fraud prevention and website security — Legitimate interest Statistical analysis and website improvement — Consent (non-essential cookies) Personalized advertising (remarketing) — Consent Compliance with legal obligations and dispute resolution — Legal obligation / legitimate interest

4. Who We Share Your Data With

Your personal data may be shared, strictly to the extent necessary and with appropriate contractual safeguards, with the following categories of recipients:

  • Payment service providers (e.g., Stripe, PayPal)
  • Shipping companies (e.g., UPS, FedEx, USPS) — only data required for delivery
  • E-commerce and hosting platforms (e.g., Shopify, WooCommerce)
  • Email and marketing service providers (e.g., Mailchimp, Brevo, ActiveCampaign)
  • Analytics tools (e.g., Google Analytics) — subject to consent
  • Advertising platforms (e.g., Google Ads, Meta) — subject to consent
  • Accounting and auditing service providers
  • Competent public authorities, when required by law

We never sell your personal data to third parties.

5. International Data Transfers

Some of our service providers may be located outside the United States. Whenever international transfers occur, we ensure that appropriate safeguards are applied, including Standard Contractual Clauses and data processing agreements in compliance with applicable law.

6. Data Retention

Your personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by law:

Type of Data — Retention Period Order and billing data — 7 years (U.S. federal tax obligation) Customer account data — While the account is active + 3 years Customer support communications — 3 years Newsletter and marketing data — Until consent is withdrawn Browsing data and cookies — As indicated in our Cookie Policy Security logs — 1 year

At the end of these periods, data is securely deleted or anonymized.

7. Your Rights

Depending on your state of residence, you may have the following rights regarding your personal data:

  • Right to know — to know what personal data we collect, use, disclose, or sell about you
  • Right to access — to obtain a copy of your personal data
  • Right to correction — to correct inaccurate or incomplete data
  • Right to deletion — to request the deletion of your personal data, subject to legal exceptions
  • Right to opt out of sale or sharing — to opt out of the sale or sharing of your personal data for cross-context behavioral advertising
  • Right to limit use of sensitive data — to limit the use and disclosure of sensitive personal information
  • Right to non-discrimination — we will not discriminate against you for exercising any of your privacy rights
  • Right to withdraw consent — at any time, without affecting the lawfulness of prior processing

7.1. How to Exercise Your Rights

To exercise any of the above rights, please send a request to atendimento@meubrasilonline.pt, including:

  • The right you wish to exercise
  • Your full name
  • A copy of a valid government-issued ID (for identity verification purposes only)

We will respond within 45 days of receiving your request, as required under the CCPA. This period may be extended by an additional 45 days where necessary, with prior notice.

7.2. Right to Lodge a Complaint with a Regulatory Authority

You have the right to lodge a complaint with the relevant supervisory authority. In the United States, you may contact:

8. Data Security

We have implemented appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction, or alteration, including:

  • SSL/TLS encryption across the entire website (HTTPS)
  • Password encryption (hashing)
  • Access control with authentication and user profiles
  • Regular data backups
  • Regular software security updates
  • Confidentiality agreements with employees and subcontractors
  • Internal data privacy training

In the event of a personal data breach posing a risk to your rights, we will notify the relevant authorities within the timeframes required by applicable law and, where required, will notify you directly.

9. Automated Decision-Making and Profiling

We may use content personalization and product recommendation tools based on browsing and purchase history. These actions do not produce legal effects or significantly affect the user.

You have the right to opt out of these actions by contacting atendimento@meubrasilonline.pt.

10. Changes to This Policy

This Privacy Policy may be updated periodically to reflect changes in law, technology, or business practices. The version in force will always be the one published on the website, with the date of the last update indicated.