Privacy Policy

This Privacy Policy explains how VENI FUTEBOL LTDA (CNPJ 54.528.692/0001-74), trading as VENI Futebol and operating this website ("VENI", "we", "us"), collects, uses, shares, stores and protects personal data. We process personal data in accordance with the Brazilian General Data Protection Law (Law 13.709/2018 — LGPD), the Consumer Protection Code (Law 8.078/1990) and, where applicable to customers in the European Union, the GDPR.

By using this website, creating an order or contacting our support team, you acknowledge the practices described below.

1. Controller and contact

Data controller: VENI FUTEBOL LTDA
CNPJ: 54.528.692/0001-74
Address: Av. das Bandeiras, 1845, DT-29, Jardim Jockey Club — Campo Grande - MS, Brazil, CEP 79080-001
Data protection contact (Encarregado / DPO): contato@venifutebol.com.br

2. Personal data we collect

• Identification data: full name, CPF or CNPJ (required by law to issue the invoice for your order).
• Contact data: email address, telephone number.
• Delivery data: street, number, complement, district, city, state, postcode and country.
• Transaction data: order contents, amounts, currency, chosen shipping and payment method, order status and history.
• Payment data: processed directly by our payment provider. We do not store complete card numbers or security codes on our servers; we may retain only the payment method type, the card brand and the last four digits for reconciliation and fraud prevention.
• Technical data: IP address, device and browser type, pages viewed, and cookie identifiers.

3. Why we process your data and on what legal basis

• To perform the purchase contract (LGPD art. 7, V): process orders, take payment, arrange delivery, handle exchanges, returns and refunds.
• To comply with legal and regulatory obligations (art. 7, II): tax invoicing, accounting and record-keeping duties.
• Legitimate interest (art. 7, IX): fraud prevention, chargeback defence, site security and service improvement.
• Consent (art. 7, I): marketing emails and non-essential cookies. Consent can be withdrawn at any time.

4. Sharing your data

We only share personal data with third parties to the extent needed to run the store: payment gateways and anti-fraud providers, shipping carriers and logistics partners, invoicing and accounting providers, email and hosting providers, and public authorities where required by law or court order. We never sell personal data. Some of these providers may process data outside Brazil; in those cases we use providers that offer an adequate level of protection and appropriate contractual safeguards.

5. How long we keep your data

Order and invoicing records are retained for the period required by Brazilian tax and commercial law (at least five years). Marketing data is kept until you unsubscribe. Technical logs are kept for at least six months, as required by the Brazilian Internet Act (Law 12.965/2014). After these periods, data is deleted or anonymised.

6. Your rights as a data subject

Under LGPD art. 18 you may, free of charge, request:

• confirmation that we process your data, and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymisation, blocking or deletion of unnecessary or excessive data;
• portability of your data to another provider;
• deletion of data processed on the basis of consent, subject to legal retention duties;
• information about the entities we share your data with;
• withdrawal of consent at any time.

Send requests to contato@venifutebol.com.br. We reply within 24 to 48 business hours and may ask for information to confirm your identity before acting on a request.

7. Cookies

We use essential cookies (to keep your cart, session and security working), performance cookies (to understand how the site is used) and, where permitted, marketing cookies. On your first visit you can accept all cookies or keep only the essential ones, and you can clear cookies through your browser at any time. Blocking essential cookies may prevent checkout from working.

8. Security

All traffic to this site is encrypted with TLS/SSL. Payment data is transmitted directly to a PCI-DSS compliant payment provider. We apply access control, least-privilege rules and monitoring to the systems that hold personal data. If a security incident poses a relevant risk to your rights, we will notify you and the Brazilian data protection authority (ANPD) as required by law.

9. Children

This store is not directed at children under 16. We do not knowingly collect their data without the specific consent of a parent or legal guardian.

10. Changes to this policy

We may update this policy to reflect legal or operational changes. The date at the top of this page always shows the current version.

11. Related documents

See also our Terms & Conditions, Shipping Policy and Return & Refund Policy. Questions? Reach us through the Contact page.