Flavors of the World

Privacy Policy

This Privacy Policy describes how WoWines collects, uses, shares and protects the personal data of this site's users and customers, in accordance with Brazilian Federal Law No. 13,709/2018 (General Data Protection Law - LGPD), Law No. 12,965/2014 (Brazilian Civil Rights Framework for the Internet) and Decree No. 7,962/2013.

1. Who we are

WoWines is the data controller for personal data processed through this site. The company's legal name, tax ID (CNPJ) and address are shown in the footer of every page.

2. Data we collect

  • Account data: full name, phone number (used as the login identifier), optional e-mail, and password (stored encrypted).
  • Identity and age verification (KYC) data: date of birth, national tax ID, identity document and selfie, required to confirm the account holder is 18 or older, as legally required to sell alcoholic beverages.
  • Address and delivery data: postal code, street, number, complement, neighborhood, city, state and delivery contact phone.
  • Order data: purchase history, items bought, amounts and selected payment method.
  • Browsing data: cookies and similar identifiers, detailed in our Cookie Policy.

3. Purpose and legal basis (Art. 7 of the LGPD)

  • Contract performance: processing orders, calculating freight, enabling delivery and billing.
  • Legal/regulatory obligation: verifying legal drinking age before selling alcoholic beverages, and complying with tax obligations.
  • Legitimate interest: fraud prevention, platform security and service improvement.
  • Consent: analytics and marketing cookies, and promotional communications, always revocable at any time.

4. Data sharing

We may share personal data with carriers and logistics partners (to enable delivery), payment processors, cloud infrastructure providers (image and document hosting), and public authorities when required by law or court order. We do not sell personal data to third parties.

5. Storage and security

Passwords are stored using a cryptographic hashing algorithm (bcrypt), never in plain text. Identity verification documents are stored in a restricted-access environment, available only to the data subject and to staff authorized to review applications. We adopt reasonable technical and administrative measures to protect data against unauthorized access, loss or improper alteration.

6. Retention

Personal data is kept for as long as necessary to fulfill the purposes described in this policy, including tax record-keeping periods and legal obligations applicable to the sale of alcoholic beverages. After that period, data is deleted or anonymized, unless a legal retention obligation applies.

7. Your rights as a data subject (Art. 18 of the LGPD)

You may request, at any time: confirmation that processing exists and access to your data; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary data or data processed unlawfully; data portability to another provider; deletion of data processed with your consent; information about entities we share your data with; and withdrawal of consent, where applicable.

Requests can be made through the contact channels listed in the site footer. If you are not satisfied with our response, you may file a complaint with Brazil's National Data Protection Authority (ANPD).

8. International data transfer

Part of our storage infrastructure (images and documents) may be hosted on cloud providers with servers outside Brazil. In such cases, we adopt the safeguards required by Art. 33 of the LGPD to ensure an adequate level of protection.

9. Changes to this policy

This policy may be updated periodically. Material changes will be communicated through the site.

10. Contact

Questions about this Privacy Policy or about how we handle your data can be sent through the contact channels listed in the site footer.