Privacy Policy

1. Who we are

This website is operated by 63.584.987 ELVIS CARLOS BENITES ROSA (doing business as BNTS Lab), located at Colônia Rio Grande, São José dos Pinhais – PR, CEP 83025-570, Brazil (“we,” “us,” or “our”). Contact: support@bntslab.online.

2. Information we collect

• Identifiers and contact information: your name and email address, which you enter when you place an order.
• Payment information: collected and processed by Stripe in its own secure form. We never receive or store your full card number; we receive only the payment result, the amount, the card network, the last four digits, and, if you allow us to save your payment method, an identifier (token) generated by Stripe.
• Order information: products purchased, amounts, dates, payment status, any subscription, and the consents you gave (with date and time).
• Technical information: IP address, browser type, date and time of requests, and a signed technical session cookie, needed to keep the service secure and to prevent abuse and fraud.
• Campaign attribution data: UTM parameters, click identifiers (fbclid, gclid), and the _fbp/_fbc cookies, if present in the link you used to reach the site or in your browser.
• Answers to the wellness check-up (program page): these are not sent to our server or stored by us. They stay only in your browser’s memory and are deleted when you close the tab.

3. How we use your information

Your name and email address are required to complete a purchase; all consents are optional, and declining them does not prevent you from buying.

4. Who we share your information with

We share information only with the following service providers, which process it on our behalf or as independent businesses within the scope of their own services:

• Stripe: payment processing, fraud prevention, sending receipts, and saving your payment method if you authorize it.
• Meta Platforms, Inc.: receives conversion data through the Conversions API, only if you have given your consent. Identifiers (email, name) are sent in pseudonymized (SHA-256 hashed) form, together with IP address, browser, and click identifiers.
• Transactional email provider (Resend): sending confirmation, activation, cancellation, and payment notice emails.
• Hosting provider (Hostinger): website hosting and data storage.
• Professional advisors, banks, and government authorities, when required by law.

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes. The site’s fonts are served from our own domain, so your browser does not contact any third-party service to load them.

5. International data transfers

We and some of our providers (Stripe, Meta, the email provider) may process your information in the United States, in the country where we are established, and in other countries. Wherever your information is processed, we protect it as described in this Privacy Policy and in accordance with applicable law.

6. Data retention

• Order and accounting records: 10 years from the date of purchase, for tax obligations and legal defense.
• Saved payment method (Stripe token): until you withdraw your consent or our relationship ends.
• Attribution data and technical logs: up to 12 months.
• Technical session cookie: 24 hours; technical visit identifier: 90 days.

7. Your privacy rights

You can ask us at any time to access, correct, or delete your personal information, or to receive a copy of it, and you can withdraw any consent you have given (this does not affect processing done before you withdrew it). To make a request, email support@bntslab.online. We respond within 30 days. We may need to verify your identity before fulfilling your request, using the email address associated with your purchase.

8. California residents

If you are a California resident, you have the right to know what personal information we collect, use, and disclose; to request deletion or correction of your personal information; and to opt out of the sale or sharing of your personal information. We do not sell your personal information. We send conversion data to Meta for ad measurement only if you consent at checkout, and you can withdraw that consent at any time by emailing support@bntslab.online. We will not discriminate against you for exercising any of these rights. To submit a request, email support@bntslab.online.

9. Cookies and measurement tools

The site uses only technical cookies (a signed session cookie and a visit identifier), which are necessary for checkout to work and for security. Stripe’s payment form sets its own technical anti-fraud cookies. We do not place advertising pixels or tracking scripts in your browser. Meta campaign measurement takes place exclusively server-to-server (Conversions API), and only if you gave your consent when placing your order.

10. Automated decision-making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you. Stripe applies automated fraud checks to transactions, as described in its own privacy policy.

11. Children’s privacy

The service is intended only for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time; the “Last updated” date at the top shows the latest version. We will notify customers with an active subscription of material changes by email.