Cookie Policy

During the purchase process on BairrocomercialChaves, we use cookies to ensure that your transactions are secure. These cookies collect technical information about the device used to identify suspicious behavior and prevent fraud. You can configure your browser to block or delete cookies. However, by disabling essential cookies, your browsing experience may be affected. Consult the specific instructions for cookie management in the most common browsers:

• Google Chrome
• Mozilla Firefox
• Microsoft Edge
• Safari

For more information about cookies and how to manage them, visit All About Cookies. If you do not want your visits to our site to be recorded by Google Analytics, you can choose to disable this tracking in Google Analytics Opt-out.

Changes to the Cookie Policy

The cookie policy of the BairrocomercialChaves MarketPlace may be updated periodically, in order to ensure compliance with current legal standards or to reflect improvements in our services. It is recommended to consult the policy regularly to be aware of possible changes.

Data Registration and Processing

The personal data processed in the BairrocomercialChaves MarketPlace is described.

All processed data is documented in a technical manner, its purpose, storage, and processing performed.

Cross-cutting Data

The following data is processed for all users (authenticated and non-authenticated).

Age

To comply with legal restrictions on selling products to minors, a (functional) cookie is stored with the following indication provided by the user.

Question: Are you 18 years or older?

Data stored: Yes/No

Validity: 7 days

Storage: Storage is done only in functional cookies in the user’s browser.

Processing: The data is used only to hide, or not, products with restrictions on sale to minors.

Erasure: the data is deleted after the cookie’s Time to Live (TTL) expires, or by manual deletion of browser cookies.

Robot Verification

A robot verification service is used that allows adding a security layer without hindering interaction. The cookie described below is used.

Cookie name: cf_clearance

Data stored: Automatic user verification token.

Validity: 30 seconds

Google Analytics

The Google Analytics service is used, which uses cookies and other technologies to gather information about interactions in the Marketplace.

The Google Analytics cookie policy is available here.

Traffic Source Data

Metadata related to traffic sources is collected. If the user allows it, in the dialog box that requests this permission, the following data is stored in session cookies.

Cookie name: sbjs_current

Data stored: Stores information about the origin of current session traffic: how the visitor arrived at the Website during this specific visit (for example, through a search engine, direct link, or marketing campaign).

Validity: 30 minutes

Cookie name: sbjs_current_add

Data stored: Stores additional metadata about the origin of the current session, such as campaign name, keyword, or content used in URL parameters (for example, UTM tags).

Validity: 30 minutes.

Cookie name: sbjs_first

Data stored: Records the original source that brought the visitor to the Website for the first time. This helps identify the initial contact point, even if the user returns later through other means.

Validity: 6 months

Cookie name: sbjs_first_add

Data stored: Similar to sbjs_first, but contains additional details about the origin of the first visit, such as campaign or keyword information.

Validity: 6 months

Cookie name: sbjs_migrations

Data stored: Used internally by Sourcebuster to track version changes or updates to its cookie structure. Ensures compatibility with previous versions and a smooth transition of tracking data.

Validity: 6 months.

Cookie name: sbjs_session

Data stored: Stores session-level data, such as timestamps and session duration, to help distinguish between multiple visits. Expires at the end of the browser session.

Validity: Session (expires when the browser is closed)

Cookie name: sbjs_udata

Data stored: Contains anonymous technical details about the user’s browser, device, and potentially geolocation (based on IP). This data allows precise source tracking but does not contain personally identifiable information.

Validity: 6 months

Storage: Storage is done in (non-functional) cookies in the user’s browser. When placing an order, the data is used to add metadata to it.

Processing: The data is used for statistical processing.

Erasure: The data subject can request the removal of their data. Since the metadata listed above is not necessary for compliance with any legal obligation, it will be deleted.

Orders

The Marketplace allows authenticated and non-authenticated users to place orders. For authenticated users, existing data in the user profile is used to pre-fill corresponding fields in the order.

The data associated with the order, listed below, is necessary for purchase completion and delivery.

• First and last name
• Tax ID/NIPC (optional)
• Address: Includes first name, last name, company name (optional), country, address, postal code, locality, district, phone, Tax ID/NIPC (optional)
• Email address: Necessary for transactional communications regarding the order. The address is verified during the order completion process to ensure the viability of the communication channel.
• Telephone contact: Necessary for order delivery logistics implementation.
• Payment data: For payment methods “Direct Transfer to Seller(s)” and “In-store Payment”, no payment data is stored, with payment verification being carried out manually by sellers. For payments made via payment gateway (SIBS Gateway), only SIBS transaction identifiers are stored, with no personal or payment data of the customer being stored.

Storage: Data is recorded in a database on a high-availability cloud service located in the European Union (the AWS RDS service installed in the Frankfurt datacenter is used). Personal data that allows identification of the person will be encrypted.

Processing: The collected data is used for purchase completion and delivery, and other associated legal obligations.

Erasure: Data collected from non-registered users is kept only for the period necessary to fulfill the purposes for which it was collected, namely order execution, product delivery, and compliance with legal obligations, such as tax or accounting obligations.

Authenticated Users

At the time of user registration, the data listed below is collected.

• Email address
• Password: A hash is created from the value, which is not reversible.

The user can add the following data in managing their account.

• First and last name
• Billing address: Includes first name, last name, company name (optional), country, address, postal code, locality, district, phone, Tax ID/NIPC (optional)
• Shipping address: Includes first name, last name, company name (optional), country, address, postal code, locality, district, phone, Tax ID/NIPC (optional)

The user profile also aggregates the following data.

• List of followed stores.
• Comments made to stores present in the Marketplace.

Processing: The data is used to carry out necessary functions (e.g., order dispatch, customer notifications).

Erasure: The collected data will be deleted at the request of the account holder. Account deletion by the user will trigger automatic deletion of the holder’s profile data.

Portability: The data subject can request data portability. An email will be sent containing all data registered on the Marketplace platform related to the subject.