Privacy Policy

Last updated: January 2025

1. Who we are

Ourofino Saúde Animal Ltda., registered under CNPJ n.º 01.346.052/0001-09, headquartered at Rodovia Anhanguera, km 298, Ribeirão Preto/SP, Brazil, is the controller of the personal data processed under this Policy.

To contact our DPO: privacidade@ourofino.com

2. Data we collect

• Identification: full name, identity documents, professional registration.
• Contact: email address, phone number, postal address.
• Professional: veterinary specialty, place of work.
• Browsing: IP address, cookies, pages visited, device and browser.
• Transactional: order history (we do not store card data).

3. How we use your data

• Manage your account and access to the Veterinarian Portal;
• Send communications about products and events (with consent);
• Respond to requests and complaints;
• Comply with legal and regulatory obligations;
• Improve browsing experience and personalise content;
• Prevent fraud and ensure platform security.

4. Legal basis

• Consent — marketing and non-essential cookies;
• Contract performance — account and order management;
• Legal obligation — tax and regulatory compliance;
• Legitimate interest — security and service improvement.

5. Data sharing

• Ourofino group companies — administrative purposes;
• Service providers — hosting, email marketing, analytics;
• Authorities — when required by law;
• Business partners — authorised distributors, with your consent.

We do not sell your personal data to third parties.

6. Cookies

• Essential: session and authentication;
• Performance: Google Analytics;
• Functionality: language and region preferences;
• Marketing: relevant advertisements.

7. Retention

• Account data: while the account is active;
• Tax data: 5 years per tax legislation;
• Cookies: up to 2 years;
• Marketing: until consent is withdrawn.

8. Your rights

• Access — confirm existence and access your data;
• Rectification — correct incomplete or inaccurate data;
• Erasure — delete data processed by consent;
• Portability — receive data in a structured format;
• Withdrawal — withdraw consent at any time.

9. Security

• SSL/TLS encryption on all transmissions;
• Role-based access control;
• Continuous vulnerability monitoring.

10. Changes

This Policy may be updated periodically. We will notify you of relevant changes by email or a prominent notice on our website.

11. Contact and DPO