Flavors of the World

LGPD

WoWines processes personal data in accordance with Brazilian Federal Law No. 13,709/2018 (General Data Protection Law - LGPD). This page summarizes our compliance program; for full details on data collection and use, see our Privacy Policy.

1. WoWines' role

WoWines acts as the controller of personal data collected through this site and, where applicable, as processor for data handled on behalf of logistics and payment partners.

2. Data Protection Officer (DPO)

Under Art. 41 of the LGPD, we maintain a contact channel for our Data Protection Officer, available through the means listed in the site footer, for communications from the ANPD and from data subjects.

3. Legal bases used (Art. 7)

  • Contract performance - order processing and delivery;
  • Legal/regulatory obligation - age verification and tax obligations;
  • Legitimate interest - fraud prevention and security;
  • Consent - analytics/marketing cookies and promotional communications.

4. Security measures

  • Passwords protected with cryptographic hashing (bcrypt), never stored in plain text;
  • Encrypted connections (HTTPS/TLS) across the entire site;
  • Restricted access to sensitive identity verification (KYC) documents;
  • Audit logging for identity verification approval/rejection decisions.

5. Data subject rights (Art. 18)

You may request access, correction, portability, anonymization, blocking, deletion of data and information about data sharing, as well as withdraw previously given consent, through the contact channels listed in the site footer.

6. Brazil's National Data Protection Authority (ANPD)

If you believe your rights have not been adequately addressed, you may file a complaint with the ANPD, the authority responsible for enforcing the LGPD in Brazil.

7. Minimum age and protection of minors

Our products are intended exclusively for adults 18 and older. We perform age verification (KYC) before releasing any purchase, in line with Brazil's Child and Adolescent Statute (Law No. 8,069/1990), and we do not knowingly collect data from minors.