Privacy Policy

1. General Information

Coopera Siquercredi Ltda, registered under Tax ID No. 52.477.955/0001-38, headquartered at R. Uruguai, 223 - Room 704, 7th Floor, Centro, Itajaí - SC, ZIP 88302-201, is committed to protecting the personal data of its customers and website visitors, in compliance with the Brazilian General Data Protection Law (LGPD - Law No. 13.709/2018).

This Privacy Policy describes how we collect, use, store, and protect your personal information in the context of financial services.

2. Data Collected

We may collect the following information:

• Identification data: Full name, Tax ID (CPF/CNPJ), date of birth, ID documents
• Contact data: Email, phone number, address
• Financial data: Income information, bank account details, financial history
• Professional data: Employment information, profession, company
• Transaction data: Service history, financial operations
• Credit data: Credit bureau information, credit score
• Payment data: Information necessary for transaction processing
• Browsing data: IP address, browser type, pages visited

3. Purpose of Data Processing

The collected data is used to:

• Provide financial services
• Evaluate and approve credit applications
• Process financial transactions
• Provide investment advisory services
• Manage banking services
• Process insurance applications
• Conduct risk analysis and fraud prevention
• Provide customer service
• Send financial updates and information (with consent)
• Comply with financial regulatory obligations
• Comply with legal and fiscal obligations
• Improve our services

4. Legal Basis for Processing

Data processing is performed based on:

• Consent: When you expressly authorize the use of your data
• Contract execution: To fulfill financial service contracts
• Legal obligation: To comply with Central Bank, CVM, and other financial regulatory obligations
• Legitimate interest: For risk analysis, fraud prevention, and customer relationship management

5. Data Sharing

Coopera Siquercredi does not sell or commercialize personal data. We may share data only with:

• Credit bureaus: Serasa, SPC, for credit analysis
• Financial institutions: For service coordination
• Insurance companies: For insurance product processing
• Payment processors: For transaction processing
• Service providers: Financial management systems, accounting
• Central Bank of Brazil: To comply with regulatory obligations
• CVM (Securities Commission): When applicable
• Tax authorities: To comply with tax obligations
• Legal authorities: When required by law or court order

6. Data Security

We implement technical and organizational measures to protect your data:

• Encryption of financial and personal data
• Multi-factor authentication
• Access controls to customer information
• Secure financial management systems
• Fraud detection and prevention systems
• Security system monitoring
• Regular backups and secure storage
• Employee training on data protection
• Periodic security audits
• Compliance with financial sector security standards

7. Your Rights as Data Subject

Under LGPD, you have the following rights:

• Confirmation and access: Confirm the existence of processing and access your data
• Correction: Request correction of incomplete, inaccurate, or outdated data
• Anonymization, blocking, or deletion: Request removal of unnecessary data
• Portability: Request data portability
• Deletion: Request deletion of data processed with consent (subject to legal retention requirements)
• Information: Obtain information about data sharing
• Revocation: Revoke consent at any time (subject to contractual and legal obligations)
• Opposition: Object to the processing performed

8. Cookies and Similar Technologies

We use cookies to improve your browsing experience and security. You can configure your browser to refuse cookies.

9. Data Retention

We retain your data for the time necessary to:

• Fulfill the purposes described in this policy
• Duration of customer relationship and contracts
• Financial records: as required by Central Bank regulations
• Legal prescription periods (generally 5-10 years for financial obligations)
• Financial regulatory obligations
• Anti-money laundering compliance
• Exercise of legal rights

After these periods, data will be securely deleted or anonymized.

10. International Data Transfer

Your data is stored and processed in Brazil. We do not perform international data transfers except when necessary for service provision with adequate protection in compliance with LGPD requirements.

11. Minors

Our services are intended for individuals over 18 years of age. We do not intentionally provide financial services to minors.

12. Changes to This Policy

This Policy may be updated periodically. Significant changes will be communicated by email or website notice.

13. Data Protection Officer (DPO)

We have appointed a Data Protection Officer responsible for ensuring LGPD compliance.

14. Contact

To exercise your rights or clarify questions:

We will respond to your requests within 15 calendar days, extendable by another 15 days with justification.

15. Applicable Law and Jurisdiction

This Policy is governed by the laws of the Federative Republic of Brazil, especially Law No. 13.709/2018 (LGPD), Central Bank regulations, and financial sector regulations. The jurisdiction of Itajaí/SC is elected to resolve any disputes.

Last updated: December 2025