Privacy and cookies policy Veloso Green Coffee

1. INTRODUCTION AND COMMITMENT

We are VELOSO GREEN COFFEE, and we are committed to respecting your privacy and handling your personal data securely.
For this reason, we present our Privacy and Cookies Policy so that users understand the rules related to how we collect, record, store, use, share, and delete personal data, in accordance with Brazilian legislation and best practices in Data Governance.

As a condition for providing our coffee export and sales services, by accessing the website https://www.veloso.com.br/, the USER declares their free and express consent and acknowledges full agreement with the terms of this Privacy Policy.

2. DATA COLLECTION AND ACTIVITY LOGS

Registration data is collected, stored, and processed through the website. The information we collect includes:
a) For “Contact Us” inquiries: name, phone number, email, country, city, state/region/province, and reason for contacting.

VELOSO GREEN COFFEE seeks to ensure the quality of the personal data it uses. However, this depends on you, the user, providing accurate and up-to-date information.

3. CHILDREN’S PERSONAL DATA AND COMPANY RESPONSIBILITY

The processing of children’s and adolescents’ personal data will always prioritize their best interests.

Considering the vulnerability of children as data subjects, the processing of their data requires the specific and highlighted consent of at least one parent or legal guardian, when applicable.

Although we do not offer services directed at this audience, if we do need to interact with them, we will use language that raises awareness about the importance of protecting their personal data.

4. SECURITY MEASURES AND DATA RETENTION

All personal data stored by us will be kept in a secure environment following applicable technical standards. Access to user data is restricted to authorized professionals, aligned with the principles of proportionality, necessity, and adequacy for the purposes for which the data was collected, and bound by confidentiality and privacy commitments.

We maintain a Privacy and Data Protection Governance Program, with specific rules and a specialized team to ensure proper handling of personal data in accordance with legal requirements and company values.

5. SHARING OF PERSONAL DATA

We will only share your personal information in specific situations, for legitimate purposes that are clearly communicated to the data subject.

Third parties that may use shared data include:
• Compliance with judicial, administrative, or arbitral orders;
• Fulfillment of legal or regulatory obligations;
• Automatically and legitimately, in cases of corporate transactions such as mergers, acquisitions, or reorganizations, and within the same corporate group.

By browsing our website, the USER may be directed through links, content, or services to other websites or platforms that may collect data and maintain their own privacy policies. The USER is responsible for reviewing and accepting or rejecting such policies. We are not responsible for the content or privacy practices of third-party websites or services, even if linked from our portal.

6. USE OF COOKIES AND SIMILAR TECHNOLOGIES

We may use cookies and similar technologies to automatically collect information about users who access our website. We may also use web beacons to collect behavioral data.

We may use your collected data and activity logs to improve your experience with our digital interfaces.

By using our platform, the user freely consents to the collection of their personal data.

Our digital interface may record all activities performed by users through logs. We use WordPress and Google Analytics, which collect user information. Whenever you visit or interact with the site, various technologies may automatically or passively collect information about how the site is accessed. Usage data includes statistics such as visit counts, time spent on pages, and any hyperlinks clicked.

All technologies used comply with applicable regulations and this Policy.

We use cookies to understand how you interact with our content and to improve your experience. Specifically, we use cookies for:
• Assisting navigation;
• Supporting event registration, login, and feedback features;
• Analyzing use of our services;
• Measuring site usage (statistics and video player);
• Enabling social media sharing.

Types of cookies used:
Essential/Strictly Necessary Cookies – Enabled in response to user actions (privacy preferences, login, form submissions).
Performance Cookies – Measure page visits and navigation patterns.
Functional Cookies – Remember user preferences for future visits.
Targeting/Tracking Cookies – Build interest profiles and display relevant ads on other websites.

If the user does not provide consent, the services dependent on cookies may not be available.

Users may disable cookies at any time through browser settings. However, disabling cookies may reduce functionality on some pages.

Guides for disabling cookies:
(Links preserved exactly as provided in the original text.)
— AboutCookies.org
— Google Analytics Opt-Out Tool
— Internet Explorer
— Safari
— Chrome
— Firefox
— Opera

7. DATA STORAGE AND RECORDS

Data and activity logs will be stored in a secure and controlled environment for at least six (6) months, in accordance with the Brazilian Internet Civil Rights Framework.

Data may be deleted earlier upon user request, unless legal exceptions require retention.

The user is aware that data (personal or not) may be stored on servers in Brazil or cloud-based environments, which may involve international data transfers.

For audit, security, fraud prevention, and legal protection purposes, we may retain data for longer periods when required by law.

The user may unsubscribe from marketing emails at any time by contacting: dpo@veloso.com.br

8. RIGHTS OF DATA SUBJECTS

In accordance with applicable data protection laws, we ensure data subjects the possibility to make requests regarding the following rights:

  1. a) Confirmation of data processing;
    b) Access to data (simple or complete);
    c) Correction of inaccurate, incomplete, or outdated data;
    d) Anonymization, blocking, or deletion of unnecessary or excessive data;
    e) Data portability;
    f) Withdrawal of consent (without affecting prior lawful processing);
    g) Deletion of data processed under consent;
    h) Information about public and private entities with whom data is shared;
    i) Information about the option not to provide consent and consequences of refusal;
    j) Review of automated decisions.

Requests will be:
• Provided free of charge;
• Subject to identity verification;
• Evaluated by our privacy team, which may request additional information.

If a request cannot be fulfilled, we will communicate the justification.

Concerns or questions regarding data use or this Policy may be directed to dpo@veloso.com.br.

9. LEGAL BASES FOR DATA PROCESSING

Our legal bases for processing personal data, under Brazilian Law 13.709/2018 (LGPD), include:
i. Your consent (Art. 7, I);
ii. Legal or regulatory obligations (Art. 7, II);
iii. Contract formation or execution (Art. 7, V);
iv. Legitimate interests, provided they do not override data subject rights (Art. 7, IX).

10. CONTACT INFORMATION

  1. a) Data Controller
    VELOSO GREEN COFFEE
    • veloso@veloso.com.br
    • +55 (34) 3851-7500
    • Av. João Batista da Silva, 801 – Amazonas, Carmo do Paranaíba – MG
  2. b) Data Protection Officer: Marcos Francisco dos Santos
    dpo@veloso.com.br
    • +55 (34) 3851-7540
    • Av. João Batista da Silva, 801 – Amazonas, Carmo do Paranaíba – MG

11. GENERAL PROVISIONS

This policy may be updated or modified at any time. The most recent version will always be available on our website. Significant updates requiring new consent will be communicated through the contact details provided. Users must keep their information up to date.

The user acknowledges that communication via email, SMS, messaging apps, or other digital means is valid and sufficient for all matters related to this relationship.

This Policy is governed by Brazilian law in Portuguese. The competent court for resolving disputes with USERS is the Court of Carmo do Paranaíba/MG, unless legal exceptions apply.

Last updated: November 3, 2025