Privacy Policy

1. General Information

Bela & Cesar Instituto de Beleza Ltda, registered under Tax ID No. 63.573.798/0001-80, located at Av das Americas, 4666 - Loja 225 D, Barra da Tijuca, Rio de Janeiro - RJ, ZIP 22640-902, is committed to protecting the personal data of its clients and website visitors, in compliance with the Brazilian General Data Protection Law (LGPD - Law No. 13.709/2018).

This Privacy Policy describes how we collect, use, store, and protect your personal information in the context of beauty services.

2. Data Collected

We may collect the following information:

• Identification data: Full name, Tax ID (CPF), date of birth
• Contact data: Email, phone number, address
• Appointment data: Service history, preferred services, appointment dates
• Health data: Allergies, skin sensitivities, medical conditions relevant to treatments
• Financial data: Payment information, billing details
• Preference data: Service preferences, stylist preferences
• Photo data: Before/after photos (with explicit consent)
• Browsing data: IP address, browser type, pages visited

3. Purpose of Data Processing

The collected data is used to:

• Schedule and manage beauty service appointments
• Provide personalized beauty treatments
• Ensure safe and appropriate service delivery
• Maintain service history and client preferences
• Process payments and issue invoices
• Send appointment reminders and confirmations
• Recommend appropriate products and services
• Provide customer service and support
• Communicate promotions and special offers
• Comply with legal and fiscal obligations
• Improve our services and customer experience

4. Legal Basis for Processing

Data processing is performed based on:

• Consent: When you expressly authorize the use of your data, especially for health and photo data
• Contract execution: To fulfill beauty service contracts
• Legal obligation: To comply with tax laws and health regulations
• Legitimate interest: For service improvement and customer communication

5. Data Sharing

Bela & Cesar does not sell or commercialize personal data. We may share data only with:

• Beauty professionals: Stylists and therapists providing services
• Product suppliers: For product recommendations (with consent)
• Payment processors: For transaction processing
• Appointment systems: For scheduling management
• Accounting services: For fiscal compliance
• Health authorities: If required for safety compliance
• Legal authorities: When required by law or court order

6. Data Security

We implement technical and organizational measures to protect your data:

• Secure payment processing systems
• Protected client information storage
• Access controls to sensitive health data
• Encrypted photo storage
• Regular security monitoring
• Employee training on data protection and confidentiality
• Strict confidentiality procedures
• Regular backups

7. Your Rights as Data Subject

Under LGPD, you have the following rights:

• Confirmation and access: Confirm the existence of processing and access your data
• Correction: Request correction of incomplete, inaccurate, or outdated data
• Anonymization, blocking, or deletion: Request removal of unnecessary data
• Portability: Request data portability
• Deletion: Request deletion of data processed with consent
• Information: Obtain information about data sharing
• Revocation: Revoke consent at any time
• Opposition: Object to the processing performed

8. Cookies and Similar Technologies

We use cookies to improve your browsing experience. You can configure your browser to refuse cookies.

9. Data Retention

We retain your data for the time necessary to:

• Fulfill the purposes described in this policy
• Duration of client relationship
• Service history: for continuity of care
• Health data: as required by health regulations
• Financial records: for fiscal purposes (generally 5 years)
• Photo data: until consent is revoked
• Legal prescription periods
• Exercise of legal rights

After these periods, data will be securely deleted or anonymized.

10. International Data Transfer

Your data is stored and processed in Brazil. We do not perform international data transfers.

11. Minors

Services for minors require parental or guardian consent. We collect data from minors only with proper authorization.

12. Changes to This Policy

This Policy may be updated periodically. Significant changes will be communicated by email or in-salon notice.

13. Data Protection Officer (DPO)

For data protection inquiries, please contact us using the information below.

14. Contact

To exercise your rights or clarify questions:

We will respond to your requests within 15 calendar days, extendable by another 15 days with justification.

15. Applicable Law and Jurisdiction

This Policy is governed by the laws of the Federative Republic of Brazil, especially Law No. 13.709/2018 (LGPD). The jurisdiction of Rio de Janeiro/RJ is elected to resolve any disputes.

Last updated: December 2025