Privacy Policy

1. Who we are

This website is operated by 63.584.987 ELVIS CARLOS BENITES ROSA (doing business as BNTS Lab), located at Colônia Rio Grande, São José dos Pinhais – PR, CEP 83025-570, Brazil (“we,” “us,” or “our”). Contact: support@bntslab.online.

2. Information we collect

• Identifiers and contact information: your name and email address, which you enter when you place an order.
• Payment information: collected and processed by Stripe in its own secure form. We never receive or store your full card number; we receive only the payment result, the amount, the card network, the last four digits, the billing country and ZIP code, and, if you allow us to save your payment method, an identifier (token) generated by Stripe.
• Order information: products purchased, amounts, dates, payment status, any subscription, and the consents you gave (with date and time).
• Technical information: IP address, browser type, date and time of requests, and a signed technical session cookie, needed to keep the service secure and to prevent abuse and fraud.
• Campaign attribution data: UTM parameters, click identifiers (fbclid, gclid), and the _fbp/_fbc cookies, if present in the link you used to reach the site or in your browser.
• Ad measurement data (Meta Pixel): the pages you visit and the steps you take toward a purchase (such as starting the questionnaire, viewing the offer, finishing the video, opening the payment form, clicking “Pay,” and completing the purchase); the offer’s value, currency, and code; the order number; a browser identifier (_fbp cookie); the ad click identifier (_fbc cookie); and your IP address and browser type. If you enter your email address in the payment form, it is sent to Meta in pseudonymized (hashed) form. We do not send your questionnaire answers to Meta.
• Questionnaire usage statistics: the steps you view and the answer options you select in the questionnaire on our purchase pages, recorded with a random identifier stored in your browser (not with your name or email address) so that we can measure and improve the questionnaire. If you complete a purchase, this record is linked to your order number. We do not send it to Meta.
• Answers to the wellness check-up (program page): these are not sent to our server or stored by us. They stay only in your browser’s memory and are deleted when you close the tab.

3. How we use your information

Your name and email address are required to complete a purchase; all consents are optional, and declining them does not prevent you from buying.

4. Who we share your information with

We share information only with the following service providers, which process it on our behalf or as independent businesses within the scope of their own services:

• Stripe: payment processing, fraud prevention, sending receipts, and saving your payment method if you authorize it.
• Meta Platforms, Inc.: receives the measurement data that the Meta Pixel collects in your browser and, only if you have given your consent when placing your order, the conversion data we send from our server through the Conversions API. Identifiers (email, name) are sent in pseudonymized (SHA-256 hashed) form, together with IP address, browser, and click identifiers.
• Transactional email provider (Resend): sending confirmation, activation, cancellation, and payment notice emails.
• Hosting provider (Hostinger): website hosting and data storage.
• Professional advisors, banks, and government authorities, when required by law.

We do not sell your personal information, and we do not disclose it to third parties for their own direct marketing purposes. Our disclosures to Meta for ad measurement may be considered “sharing” under some U.S. state laws; see section 8.2 to opt out. The site’s fonts are served from our own domain, so your browser does not contact any third-party service to load them.

5. International data transfers

We and some of our providers (Stripe, Meta, the email provider) may process your information in the United States, in the country where we are established, and in other countries. Wherever your information is processed, we protect it as described in this Privacy Policy and in accordance with applicable law.

6. Data retention

• Order and accounting records: 10 years from the date of purchase, for tax obligations and legal defense.
• Saved payment method (Stripe token): until you withdraw your consent or our relationship ends.
• Attribution data and technical logs: up to 12 months.
• Technical session cookie: 24 hours; technical visit identifier: 90 days.
• Meta measurement cookies (_fbp, _fbc): up to 90 days.

7. Your privacy rights

You can ask us at any time to access, correct, or delete your personal information, or to receive a copy of it, and you can withdraw any consent you have given (this does not affect processing done before you withdrew it). To make a request, email support@bntslab.online. We respond within 30 days. We may need to verify your identity before fulfilling your request, using the email address associated with your purchase. If you live in California or in another U.S. state with a consumer privacy law, see section 8 for additional rights.

8. U.S. state privacy rights

This section supplements the rest of this Privacy Policy for residents of California and of other U.S. states with consumer privacy laws. Terms such as “personal information,” “sell,” “share,” and “sensitive personal information” have the meanings given to them in the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”).

8.1 Notice at Collection

In the last 12 months, we have collected the categories of personal information listed below. We collect them directly from you (when you place an order), automatically from your browser or device, from the link you used to reach the site, and from Stripe (the result of your payment). We use them for the purposes described in section 3 and keep them for the periods described in section 6. We disclose them for business purposes to our service providers (Stripe, our email provider, and our hosting provider, see section 4) and, as shown in the last column, to Meta.

We have not sold personal information in the last 12 months, and we do not knowingly sell or share the personal information of consumers under 16 years of age.

8.2 Do Not Sell or Share My Personal Information

We do not sell your personal information. However, some of our disclosures to Meta may be considered “sharing” for cross-context behavioral advertising under California law (and “targeted advertising” under the laws of other states), because Meta may also use the data to show you ads on other websites and apps:

• the Meta Pixel on our purchase pages (questionnaire, offer, payment, and order confirmation) sends Meta the data described in section 2 directly from your browser;
• if you consent at checkout, we send conversion data to Meta from our server through the Conversions API.

How to opt out. Email support@bntslab.online with the subject line “Do Not Sell or Share.” You do not need an account, and we will not ask you for more information than we need to find your records: just include the email address you used for your purchase, if any. We will act on your request as soon as possible, and no later than 15 business days after we receive it. From then on, we will stop sending your information to Meta through the Conversions API (this also withdraws the consent you gave at checkout).

The Meta Pixel runs in your browser, so we cannot turn it off for you from our server. To stop it, block third-party cookies and trackers in your browser settings or use a content blocker, as described in section 9.

Authorized agents. You may use an authorized agent to submit a request on your behalf. We may ask the agent for proof that you gave signed permission and, for requests other than opt-outs, ask you to confirm your identity directly with us.

No discrimination. We will not deny you goods or services, charge you a different price, or give you a different level of quality because you exercised any of your privacy rights. Opting out does not affect your purchase, your access to the program, or any subscription.

8.3 Your California privacy rights

• Right to know and access: the categories of personal information we have collected about you, the categories of sources, the purposes for collecting it, the categories of third parties we disclosed it to, and the specific pieces of personal information we hold about you.
• Right to delete the personal information we collected from you, subject to legal exceptions (for example, records we must keep for tax purposes, see section 6).
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of your personal information (section 8.2).
• Right to limit the use of sensitive personal information: we do not use sensitive personal information for any purpose that gives rise to this right (section 8.4).

To exercise these rights, email support@bntslab.online. To protect your information, we verify requests to know, delete, or correct by matching the email address you write from (or give us) with the one associated with your purchase, and we may ask you to confirm the request from that address. We will confirm receipt within 10 business days and respond as described in section 7.

8.4 Sensitive personal information

Your answers to the wellness check-up on the program page are processed only in your browser: they are not sent to our server, stored by us, or sent to Meta or anyone else. The questionnaire on our purchase pages is recorded only as the usage statistics described in section 2, which we do not send to Meta. We never receive your full card number. We do not use sensitive personal information to infer characteristics about you, and we do not sell or share it.

8.5 California “Shine the Light”

California Civil Code § 1798.83 allows California residents to request information about the personal information a business disclosed to third parties for their own direct marketing purposes in the preceding calendar year. We do not disclose personal information to third parties for their own direct marketing purposes. You can send any questions to support@bntslab.online.

8.6 Residents of other states

If you live in another U.S. state with a consumer privacy law (such as Virginia, Colorado, Connecticut, Utah, Texas, or Oregon), you have rights similar to those described above, depending on your state’s law: to confirm whether we process your personal information and to access it, to correct it, to delete it, to get a portable copy of it, and to opt out of targeted advertising, the sale of personal information, and profiling in furtherance of decisions that produce legal or similarly significant effects (we do not engage in such profiling, see section 10). To opt out of targeted advertising, follow the steps in section 8.2. For any other request, email support@bntslab.online.

Appeals. If we decline to take action on your request, you can appeal our decision by emailing support@bntslab.online with the subject line “Privacy Appeal.” We will respond to your appeal in writing within the time required by your state’s law (generally 45 to 60 days) and explain our decision. If you disagree with the outcome, you can contact your state’s attorney general.

9. Cookies, tracking technologies, and your choices

The site uses technical cookies (a signed session cookie and a visit identifier), which are necessary for checkout to work and for security. Stripe’s payment form sets its own technical cookies to prevent fraud. The questionnaire usage statistics described in section 2 use a random identifier stored in your browser, not a cookie.

Our purchase pages (questionnaire, offer, payment, and order confirmation) also include the Meta Pixel, which sets the _fbp and _fbc cookies in your browser and sends Meta the data described in section 2 so that we can measure and improve our ad campaigns. Server-to-server measurement (Conversions API) takes place only if you gave your consent when placing your order.

Your choices:

• Browser settings: you can block or delete cookies, including third-party cookies, in your browser settings. If you block technical cookies, checkout may not work.
• Content blockers: browser extensions and apps that block trackers also block the Meta Pixel.
• Meta ad settings: in Meta’s Accounts Center (Ad preferences), you can limit how Meta uses information from ad partners, such as us, to show you ads.
• Industry opt-outs: you can opt out of interest-based advertising from participating companies at optout.aboutads.info and learn more at youradchoices.com.
• Opt-out request: to stop us from sending your information to Meta through the Conversions API, see section 8.2.

Do Not Track. Some browsers offer a “Do Not Track” (DNT) setting. Because there is no common industry standard for these signals, our site does not respond to them. To exercise your choices, use the options above or email support@bntslab.online.

10. Automated decision-making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you. Stripe applies automated fraud checks to transactions, as described in its own privacy policy.

11. Children’s privacy

The service is intended only for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time; the “Last updated” date at the top shows the latest version. We will notify customers with an active subscription of material changes by email.