Privacy Policy

Privacy Policy
Last Updated: 04/05/2026

1. Who We Are

Connection Supply is operated by Conexões Elétricas do Brasil,
headquartered at 4000 Estrada do Conde, Eldorado do Sul, RS
92990-000, Brazil.

For questions about this Privacy Policy or your personal data,
contact us at: contact@connection-supply.com

2. What Data We Collect

We collect only the personal data necessary to process and
deliver your order, provide customer support, and comply with
legal obligations. This includes:

2.1 Data you provide directly:
- Full name
- Email address
- Billing and shipping address
- Phone number (if provided)
- Payment method details (processed by our payment provider;
  we do not store full card numbers)
- Messages sent through our contact form or email

2.2 Data collected automatically:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited, time spent, and navigation path on our website
- Referring URL (how you arrived at our website)
- Cookie identifiers (see Section 6)

2.3 Data from third parties:
- Payment processors may share transaction status and fraud
  signals with us
- Shipping carriers may share delivery status and address
  validation data

3. How We Use Your Data

We use your personal data for the following purposes:

- Order processing: to confirm, fulfill, and deliver your
  purchase and issue invoices
- Customer support: to respond to questions, process returns,
  and resolve disputes
- Shipping: to transmit your address and contact details to
  carriers and fulfillment partners
- Fraud prevention: to detect and prevent unauthorized
  transactions
- Legal compliance: to meet obligations under applicable tax,
  customs, consumer protection, and data protection law
- Website improvement: to understand how visitors use our site
  and improve performance (aggregate, anonymized data)
- Marketing emails: only if you have explicitly opted in.
  You may unsubscribe at any time via the link in any
  marketing email

We do not use your data for automated decision-making or
profiling that produces legal or similarly significant effects.

4. Legal Basis for Processing (EU/UK Customers)

For customers in the European Union or United Kingdom, our
legal basis for processing your personal data is:

- Contract performance (Art. 6(1)(b) GDPR): processing
  necessary to fulfill your order and provide our services
- Legal obligation (Art. 6(1)(c) GDPR): processing required
  by applicable law (e.g. tax records, customs documentation)
- Legitimate interests (Art. 6(1)(f) GDPR): fraud prevention,
  website security, and aggregate analytics
- Consent (Art. 6(1)(a) GDPR): marketing communications and
  non-essential cookies, where you have opted in

5. Who We Share Your Data With

We share personal data only with parties necessary to operate
our business:

- Payment processors: to authorize and process transactions
  (e.g. Stripe). These processors are PCI-DSS compliant and
  handle card data under their own privacy and security
  programs.
- Shipping carriers and fulfillment partners: to deliver your
  order. This includes our US-based fulfillment partner and
  international carriers such as DHL, FedEx, or equivalent.
- Customs authorities: shipments from Brazil to international
  destinations may require disclosure of recipient information
  to customs agencies in the destination country as required
  by law.
- Analytics providers: anonymized or aggregated usage data
  may be shared with tools such as Google Analytics for
  website performance analysis.
- Legal authorities: we will disclose personal data when
  required to do so by law, court order, or government
  authority in any applicable jurisdiction.

We do not sell, rent, or trade your personal data to third
parties for commercial purposes.

6. Cookies

We use cookies and similar tracking technologies to operate
and improve our website. Cookies are small text files stored
on your device.

6.1 Essential cookies: required for the website to function
(e.g. shopping cart, session authentication). Cannot be
disabled without affecting site functionality.

6.2 Analytics cookies: used to understand visitor behavior in
aggregate. These are only placed if you accept cookies.

6.3 Marketing cookies: used to serve relevant advertising
across platforms. Only placed with your explicit consent.

You may manage your cookie preferences at any time through
the cookie consent banner on our website, or through your
browser settings. Note that disabling essential cookies may
affect your ability to place orders.

For more information on how Google uses data collected via
our site, visit: policies.google.com/technologies/partner-sites

7. International Data Transfers

Connection Supply is operated from Brazil. If you are located
in the European Union, the United Kingdom, or another
jurisdiction with data transfer restrictions, please be aware
that your personal data will be transferred to and processed
in Brazil.

Brazil's data protection framework is governed by the Lei
Geral de Proteção de Dados (LGPD — Law No. 13,709/2018),
which establishes protections broadly comparable to the GDPR.

Where required by law, we apply appropriate safeguards for
international data transfers, including Standard Contractual
Clauses (SCCs) or equivalent mechanisms, upon request.

Data may also be processed in the United States by our
payment processors and fulfillment partners, which operate
under their own data protection frameworks.

8. Data Retention

We retain your personal data for as long as necessary to:

- Fulfill the purposes described in this Policy
- Comply with applicable legal retention periods (e.g. tax
  and invoicing records: typically 5 years)
- Resolve disputes and enforce agreements

Order and transaction records are retained for a minimum of
5 years in compliance with Brazilian tax law and applicable
international standards.

Marketing data is retained until you unsubscribe or withdraw
consent. Analytics data is retained in aggregate form only.

9. Your Rights

9.1 Rights for EU and UK customers (GDPR / UK GDPR):

You have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Request erasure of your data ("right to be forgotten"),
  subject to legal retention obligations
- Restrict or object to processing in certain circumstances
- Receive your data in a portable, machine-readable format
- Withdraw consent at any time (where processing is based
  on consent), without affecting prior processing
- Lodge a complaint with your national data protection
  authority

9.2 Rights for California customers (CCPA / CPRA):

California residents have the right to:
- Know what personal data we collect, use, and share
- Request deletion of personal data, subject to exceptions
- Opt out of the sale or sharing of personal data
  (we do not sell personal data)
- Non-discrimination for exercising privacy rights
- Correct inaccurate personal data

9.3 Rights for all customers:

Regardless of location, you may contact us at any time to:
- Update or correct your personal data
- Request a copy of the data we hold about you
- Ask us to stop sending marketing communications

To exercise any of these rights, email us at
contact@connection-supply.com with the subject line
"Privacy Request" and we will respond within 15 business
days.

10. Children's Privacy

Our website and services are intended for adults aged 18 and
over. We do not knowingly collect personal data from anyone
under 18 years of age. If you believe we have inadvertently
collected data from a minor, contact us immediately at
contact@connection-supply.com and we will delete it promptly.

11. Security

We implement appropriate technical and organizational
measures to protect your personal data against unauthorized
access, alteration, disclosure, or destruction. These include:

- Encrypted data transmission (HTTPS/TLS)
- Access controls limiting who can view customer data
- PCI-DSS compliant payment processing (no card data stored
  on our servers)

No transmission over the internet is completely secure.
While we use commercially reasonable measures, we cannot
guarantee absolute security.

12. Third-Party Links

Our website may contain links to third-party websites,
including manufacturer pages (e.g. TE Connectivity, Amphenol)
and carrier tracking portals. This Privacy Policy does not
apply to those websites. We encourage you to review the
privacy policies of any third-party sites you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes
will be posted on this page with an updated "Last Updated"
date. For material changes, we will notify registered
customers by email where possible.

Your continued use of our website after changes are posted
constitutes acceptance of the updated Policy.

14. Contact and Complaints

For privacy-related questions, data requests, or complaints:

Email: contact@connection-supply.com
Subject line: Privacy Request
Response time: within 15 business days

Operating entity: Conexões Elétricas do Brasil
4000 Estrada do Conde
Eldorado do Sul, RS 92990-000
Brazil

EU customers who are not satisfied with our response have
the right to lodge a complaint with the data protection
authority in their EU member state.

UK customers may contact the Information Commissioner's
Office (ICO) at ico.org.uk.