Introduction
JC Automação Comercial Ltda ("JC Automação", "we", "us", or "our") is a Brazilian company registered under CNPJ and headquartered in . We specialize in the supply, integration, and technical support of commercial automation solutions — including fiscal printers, NFC-e issuance systems, point-of-sale hardware and software — for retail, food service, and service-sector businesses across Brazil.
This Privacy Policy governs all personal data that JC Automação Comercial Ltda collects and processes in connection with the website located at jcautomacao.site (the "Site"), our direct sales communications, and our after-sales support channels. It also applies to any personal data shared with us by corporate customers on behalf of their employees or representatives.
By visiting or using this Site, or by communicating with us via any channel listed herein, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use this Site or share personal data with us.
For the purposes of the LGPD, JC Automação Comercial Ltda acts as the Controller (Controlador) of personal data collected through this Site. Where we engage service providers that process data on our behalf, those parties act as Operators (Operadores) bound by data-processing agreements.
Information We Collect
We collect personal data only to the extent necessary to provide our services, respond to enquiries, and operate this Site lawfully. The categories of data we may hold are described below.
| Category | Examples | How collected |
|---|---|---|
| Identity & Contact | Full name, company name, job title, CNPJ / CPF (when required for a fiscal document) | Provided by you via email, telephone, or WhatsApp when requesting a quote or technical support |
| Contact Details | Email address, telephone or mobile number, physical address | Provided voluntarily when contacting us through any channel |
| Communication Records | Content of emails, WhatsApp messages, or call logs regarding service requests | Generated when you communicate with our sales or support team |
| Technical / Device Data | IP address, browser type and version, operating system, referring URL, pages viewed, time spent on page | Collected automatically via server logs and analytics tools when you browse this Site |
| Cookie & Tracker Data | Session identifiers, preference cookies, analytics event data | Set by first- and third-party scripts running on this Site (see Section 4) |
| Commercial Data | Products enquired about, purchase or service history, support ticket details | Generated during our commercial and after-sales relationship |
Data you provide directly. The primary way we receive personal data is when you initiate contact — by sending an email to contato@jcautomacao.site, calling our telephone line, or messaging us via WhatsApp. In these cases, you decide what information to share. We encourage you to provide only what is necessary to resolve your enquiry.
Data collected automatically. Like most websites, our server automatically records certain technical information whenever your browser makes a request. This data is used to maintain website security, diagnose technical issues, and understand aggregate traffic patterns. It does not, on its own, allow us to identify you as a specific individual unless combined with other data you have provided.
Data from third parties. We do not purchase or rent marketing lists. On occasion a business partner or existing customer may refer a new contact to us; in those cases we process only the data necessary to respond to that referral, and we rely on the referring party to have obtained any necessary consents.
How We Use Your Information
We process personal data only when there is a lawful basis for doing so under the LGPD and, where applicable, the GDPR. The lawful bases we rely on include: contract performance (processing necessary to provide a product or service you have requested), legitimate interests (where our interests in running a lawful business do not override your rights), legal obligation (where we are required to retain data by Brazilian tax or commercial law), and consent (where you have freely given a specific, informed, unambiguous indication of agreement, such as opting in to marketing communications).
Specifically, we use personal data for the following purposes:
- Responding to enquiries: to understand your commercial automation needs and provide accurate quotations or technical guidance.
- Delivering products and services: to fulfill orders, arrange logistics, and provision software licences or hardware configurations.
- After-sales technical support: to diagnose and resolve hardware or software issues, including remote access where explicitly authorised by you.
- Issuing and managing fiscal documents: where Brazilian tax law requires us to include identity information (e.g. CNPJ or CPF) in NF-e or NFC-e invoices.
- Commercial communications: to send you relevant information about product updates, new solutions, or promotions — only where you have opted in or we have a pre-existing commercial relationship that justifies contact under applicable law.
- Website analytics and improvement: to understand which pages are most visited, how users navigate our Site, and where we can improve content and performance.
- Fraud prevention and security: to detect and investigate suspicious activity, protect our systems, and comply with obligations under applicable cybersecurity regulation.
- Legal and regulatory compliance: to fulfil obligations under Brazilian tax law, accounting regulations, consumer protection legislation, and any applicable court or regulatory order.
We do not use your personal data for automated decision-making or profiling in a way that produces legal or similarly significant effects. We do not sell, lease, or broker personal data to third parties for their own marketing purposes, under any circumstances.
Cookies & Tracking Technologies
Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently and to provide analytical information to site owners. Some cookies are essential for the Site to function correctly; others are optional and used only with your consent.
| Cookie type | Purpose | Consent required? |
|---|---|---|
| Strictly Necessary | Enable core website functionality, maintain session state, and ensure security. Without these the Site cannot function properly. | No — essential |
| Performance / Analytics | Measure page views, traffic sources, and user behaviour in aggregate to help us improve Site content. We use Google Analytics 4 for this purpose, with IP anonymisation enabled. | Yes — optional |
| Advertising / Remarketing | Where we run Google Ads campaigns, Google may set a conversion-tracking cookie to measure whether a visit to this Site resulted from an ad click. This data is aggregated and does not identify you personally to us. | Yes — optional |
| Preference | Remember your cookie consent choice so we do not prompt you on every visit. | No — functional |
Google Analytics 4. We use GA4 to understand how visitors interact with our Site. The data collected includes pages visited, session duration, geographic region (country / state level), and device type. We have configured GA4 to anonymise IP addresses and have disabled advertising personalisation features. Google's privacy practices are governed by the Google Privacy Policy.
Google Ads Conversion Tracking. If you arrive at this Site via a Google Ads advertisement, Google may place a conversion-tracking cookie on your device. This allows us to measure the aggregate number of enquiries generated by advertising campaigns. The cookie does not contain information that personally identifies you.
Managing your cookie preferences. You can withdraw or adjust your consent for non-essential cookies at any time by clicking the "Cookie Preferences" link in the footer, or by adjusting your browser settings. Note that disabling certain cookies may affect the functionality of this Site. For guidance on managing cookies in your browser, refer to your browser's help pages or visit allaboutcookies.org.
Sharing With Third Parties
JC Automação Comercial Ltda does not sell or trade your personal data. We share data only in the specific, limited circumstances described below, and only to the extent necessary for the stated purpose.
Service providers (Operators). We engage carefully selected third-party companies to support our business operations. These include: hosting and cloud-infrastructure providers that store our website and business data; email and communication platform providers used to send and receive correspondence; analytics service providers (currently Google LLC, for Google Analytics 4); and accounting software providers that process billing and fiscal data. Each service provider is subject to a data-processing agreement that restricts them from using your data for any purpose other than the specific service they provide to us.
Technology and product partners. In our capacity as an authorised reseller and integrator of commercial automation brands, we may share your technical support case details with manufacturers or their authorised repair centres when a warranty claim or complex technical issue requires escalation. Only the data necessary to resolve the issue is shared.
Legal and regulatory requirements. We may disclose personal data when required to do so by law, court order, or a binding request from a competent Brazilian regulatory authority (such as the Receita Federal or ANPD). We will, where legally permissible, notify you of such a request before disclosing data.
Business reorganisation. In the event of a merger, acquisition, or sale of a substantial portion of our business assets, personal data held by JC Automação may be transferred to the successor entity. We will notify affected individuals and, where required, obtain fresh consent before any such transfer.
International transfers. Some of our service providers — particularly Google LLC for analytics — are based outside Brazil. Where data is transferred to countries that have not been formally recognised by Brazil's National Data Protection Authority (ANPD) as providing an adequate level of protection, we rely on the use of Standard Contractual Clauses or equivalent safeguards to protect your rights.
Data Retention
We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable Brazilian law. Below are our principal retention criteria:
- Sales and commercial records: retained for a minimum of five (5) years following the date of the transaction, in compliance with Brazil's Código Civil and fiscal legislation.
- Fiscal documents (NF-e / NFC-e): retained for a minimum of five (5) years as required by the Receita Federal do Brasil.
- Support correspondence and technical records: retained for two (2) years after the resolution of the support case, in case follow-up or warranty claims arise.
- Marketing communications (opt-in lists): retained until you withdraw consent or we determine the data is no longer accurate, whichever is sooner.
- Website server logs: retained for up to ninety (90) days for security and diagnostic purposes, then deleted or anonymised.
- Analytics data: Google Analytics data is retained at property level for up to fourteen (14) months, consistent with GA4 default settings.
When a retention period expires, data is securely deleted, anonymised, or archived in accordance with our internal data governance procedures. In some cases legal obligations may require us to retain data beyond these periods; in those cases, the data will be held strictly for compliance purposes and not used for any commercial activity.
Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:
- Encrypted data transmission: this Site is served exclusively over HTTPS (TLS 1.2 or higher), ensuring that data exchanged between your browser and our servers is encrypted in transit.
- Access controls: personal data held in our internal systems is accessible only to employees and contractors who require it to perform their job function, under the principle of least privilege.
- Password security: all internal accounts protecting business data use strong, unique passwords and, where supported, multi-factor authentication.
- Vendor due diligence: we assess the security posture of service providers before engaging them and require contractual commitments to appropriate security standards.
- Regular review: our security practices are periodically reviewed in light of technological developments, emerging threats, and changes in applicable law.
Despite these measures, no method of electronic transmission or storage is completely secure. If you become aware of any security vulnerability or suspect your personal data may have been compromised in connection with our services, please contact us immediately at contato@jcautomacao.site.
In the event of a data breach that is likely to pose a risk to the rights and freedoms of affected individuals, we will notify the ANPD (Brazil's National Data Protection Authority) and the affected individuals within the timeframes required under the LGPD.
Your Rights
Brazilian data subjects have the following rights under the LGPD (Article 18). Individuals in the European Economic Area have equivalent or broader rights under the GDPR (Articles 15–22). We honour both sets of rights for all data subjects who contact us.
Right of Access
You may request confirmation of whether we hold personal data about you, and if so, a copy of that data along with information about how it is being used.
Right of Correction
If any personal data we hold is inaccurate, incomplete, or out of date, you have the right to request that we correct it without undue delay.
Right of Deletion
You may request deletion of personal data that we processed on the basis of your consent, or data that was not processed in compliance with the LGPD. Note: data we are required by law to retain cannot be deleted before the legally mandated period expires.
Right of Portability
You may request a copy of your personal data in a structured, commonly used, machine-readable format, and ask us to transmit it directly to another controller where technically feasible.
Right to Object
Where we process your data on the basis of legitimate interests or for direct marketing, you have the right to object. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.
Right to Restrict Processing
In certain circumstances — for example, while the accuracy of data is being contested — you may request that we restrict our use of your data to storage only.
Right to Complain
You have the right to lodge a complaint with Brazil's ANPD (Autoridade Nacional de Proteção de Dados) at gov.br/anpd if you believe your data rights have been infringed.
How to exercise your rights. To make any of the requests listed above, please contact our designated privacy contact by email at contato@jcautomacao.site with the subject line "Privacy Rights Request". Please include your full name, the specific right you wish to exercise, and enough information to allow us to identify your records. We will acknowledge your request within five (5) business days and aim to fulfil it within fifteen (15) business days, extendable to thirty (30) days in cases of complexity.
We will not charge a fee for exercising your rights unless the request is manifestly unfounded or repetitive, in which case we may charge a reasonable administrative fee or decline the request, with written justification.
Children's Privacy
This Site and our commercial automation services are directed exclusively at businesses and adult professionals. We do not knowingly collect personal data from children under the age of eighteen (18). If you are a parent or legal guardian and believe your child has provided personal data to us without your consent, please contact us immediately at contato@jcautomacao.site and we will take steps to delete that data as promptly as possible.
In the event we become aware that we have collected personal data from a child without appropriate parental or guardian consent, we will delete the data without delay and, where required by law, report the incident to the ANPD.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our data-processing activities, evolving legal requirements, or operational developments. When we make material changes, we will update the "Last updated" date at the top of this page and, where required by law or where the changes significantly affect your rights, we will notify you directly — typically by email to the address we hold on file, or by displaying a prominent notice on this Site.
We encourage you to review this Privacy Policy periodically. Your continued use of this Site or our services following the effective date of any update constitutes acknowledgement of the revised policy. If you do not agree with the changes, you should discontinue use of this Site and contact us to request deletion of any personal data we hold.
Archive access. Previous versions of this Privacy Policy are available on request by emailing contato@jcautomacao.site. We retain prior versions for two (2) years following the date each version was superseded.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which JC Automação Comercial Ltda handles personal data, please reach out using the details below. We treat all privacy-related enquiries with priority and in strict confidence.
JC Automação Comercial Ltda — Data Controller
Our privacy contact is responsible for overseeing data-protection compliance and serves as the primary point of contact for all rights requests, complaints, and data-related enquiries from data subjects and supervisory authorities.