Privacy Policy

01Who the controller is

The controller of the personal data processed on the website is Arcadia Market Intermediação de Ativos Ltda., headquartered at Av. Andrômeda, 885, 14º andar, Alphaville, Barueri, SP, CEP 06473-000.

When Arcadia processes personal data contained in its clients' asset portfolios, it acts on behalf of and in accordance with the instructions of those clients, under the terms of the contracts entered into with each of them.

02What data we collect

Data provided in the contact form: name, company, e-mail, phone number, profile and the content of the message.

Platform user data: registration data of the users authorized by clients and access logs, retained in accordance with the Marco Civil da Internet (Brazilian Internet Civil Framework, Law No. 12,965/2014).

Browsing data: IP address, browser type and pages visited, recorded by the servers that host the website. The website stores in your browser only the profile preference (Institutions or Investors) and does not use advertising cookies.

03How we use the data

To respond to inquiries and requests, based on legitimate interest and on preliminary procedures related to entering into a contract (art. 7, items V and IX, of the LGPD).

To provide the contracted services and operate the Platform, based on the performance of a contract (art. 7, item V).

To comply with legal and regulatory obligations and to exercise rights in judicial, administrative or arbitration proceedings (art. 7, items II and VI).

To maintain the security of the website and the Platform and to prevent fraud, based on legitimate interest (art. 7, item IX).

04Who we share data with

With service providers that support the operation, such as hosting, cloud infrastructure, e-mail and electronic signature, always under contract and only to the extent necessary.

With public authorities, when there is a legal obligation or a court order.

Arcadia does not sell personal data.

05International transfer

Some technology providers may store or process data outside Brazil. In such cases, the transfer complies with the cases provided for in art. 33 of the LGPD and with appropriate contractual safeguards.

The website's fonts and icons are loaded from external services (Google Fonts and jsDelivr), which receive the visitor's IP address in order to deliver these files.

06How long we retain data

Data is retained for as long as necessary to fulfill the purposes of this Policy, subject to the statutory periods. Platform access logs are retained for at least six months, in accordance with the Marco Civil da Internet.

07How we protect data

We adopt technical and administrative measures appropriate to the nature of the data, such as per-user access control, encryption in transit and access restricted to the people who need the information to perform their work.

08Your rights

Under art. 18 of the LGPD, you may request confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary data, portability, information about sharing and withdrawal of consent, where applicable.

Requests may be sent to [email protected] and will be answered within the statutory periods. You may also file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD, the Brazilian National Data Protection Authority).

09Data protection officer

The channel for communicating with the officer in charge of personal data processing is the e-mail address [email protected].

10Changes to this Policy

This Policy may be updated at any time. The current version will always be available on this page, with the date of the last update.