República da Cachaça values your privacy. This Privacy Policy explains how we collect, use, store, and share personal data when you browse our website, make purchases, or interact with RdC, in accordance with Brazil's General Data Protection Law (Lei Geral de Proteção de Dados Pessoais — LGPD, Law No. 13,709/2018).

1. Who We Are

República da Cachaça is operated by:

Trade Name: República da Cachaça
CNPJ (Brazilian Corporate Taxpayer Registry): 64.944.521/0001-8
Address: Av. Alfredo Ignácio Nogueira Penido, 300, Suite 57, Terraço Aquarius Building, Parque Residencial Aquarius, São José dos Campos, São Paulo, Brazil

The company identified above acts as the controller of the personal data processed in the course of its activities.

2. What Data We Collect and Why

We may collect identification and contact information, such as your name, CPF (Brazilian Individual Taxpayer Registry), address, telephone number, and email address; information about orders, payments, and deliveries; customer service records; and browsing data, such as IP address, device information, pages visited, and cookies.

We use this data to process purchases and payments, fulfill deliveries, issue tax documents, provide customer support, manage accounts, handle returns, prevent fraud, comply with legal obligations, improve our services, and send marketing communications where permitted.

Data processing is based on the applicable legal grounds, such as contract performance, compliance with legal obligations, the establishment, exercise, or defense of legal claims, legitimate interests, or consent, as applicable.

3. Data Sharing

Where necessary, we share data with Shopify, payment processors, shipping carriers, technology providers, customer service providers, analytics tools, and marketing partners, as well as public authorities when required or permitted by law.

Data sharing is limited to what is necessary for each purpose, subject to applicable safeguards.

4. Shopify and International Data Transfers

Our e-commerce store uses Shopify, which may process personal data to provide, operate, and protect the platform. Some service providers may also store or process data outside Brazil.

Where applicable, international data transfers will comply with the requirements of the LGPD and the regulations issued by Brazil's National Data Protection Authority (Autoridade Nacional de Proteção de Dados — ANPD).

5. Cookies and Marketing

We use cookies and similar technologies to operate the website, remember preferences, analyze browsing activity, and, where applicable, support advertising and marketing activities.

Non-essential cookies will be handled in accordance with users' choices and applicable consent mechanisms.

You may unsubscribe from promotional communications at any time using the mechanism provided in the message or by contacting us. This will not prevent us from sending communications necessary for your purchase or customer support.

6. Data Security and Retention

We adopt appropriate technical and administrative measures to protect personal data against unauthorized access, loss, alteration, or improper disclosure.

Data will be retained for as long as necessary to fulfill the purposes for which it was processed and may be retained where there is a legal basis to do so, including to comply with legal obligations or exercise legal rights. When data is no longer necessary, it will be deleted or anonymized, as applicable.

7. Your Rights

Under the LGPD, you may request, as applicable:

• Confirmation of whether your personal data is being processed and access to such data;

• Correction of incomplete, inaccurate, or outdated data;

• Information about the use and sharing of your data;

• Anonymization, blocking, or deletion of data where applicable;

• Data portability, subject to applicable regulations;

• Deletion of data processed on the basis of consent, where applicable;

• Withdrawal of consent and objection to processing where provided by law.

To exercise your rights, contact us at rdc@republicadacachaca.com.br. We may request information to verify your identity and will respond within the time limits established by applicable law.

8. Children and Adolescents

RdC does not target children or adolescents for the sale of alcoholic beverages. Brazilian law prohibits the sale, supply, or delivery of alcoholic beverages to anyone under the age of 18. We do not knowingly seek to collect children's personal data for registration, marketing, or profiling purposes.

9. Third-Party Services and Changes

Our website may contain links to or integrations with third-party services, which are subject to their own privacy policies.

This Privacy Policy may be updated to reflect changes in our practices, services, or legal obligations. The current version will be available on this page, together with its respective update date.

10. Contact

If you have any questions about this Privacy Policy or the processing of your personal data, please contact us at rdc@republicadacachaca.com.br.

Last updated: October 9, 2026.