Personal data protection

Privacy Policy

How personal data is collected, used, shared, retained, and protected by UQBITZ.

Updated August 2, 2026 Version 2026-08-02.1

This English translation is provided for convenience. If it conflicts with the Portuguese version, the Portuguese version prevails.

UQBITZ TECH LTDA, trading as UQBITZ, headquartered at Avenida Dom Jaime de Barros Câmara, no. 795, apartment 92, block A, Planalto, São Bernardo do Campo, São Paulo, CEP 09895-400, registered with CNPJ under no. 08.405.905/0001-53, acts as the data controller and is committed to respecting its users’ privacy and protecting their personal data.

This Privacy Policy (“Policy”) aims to clarify what information is collected from users of our websites, how this data is treated and the rights you have, under applicable laws, in particular Law No. 13.709/2018 (“Brazilian Brazilian General Data Protection Law”)

To offer Products and Services to its customers, UQBITZ, through its website, collects various data and information, aiming, above all, to provide an increasingly better experience for you.

The Platform is online and accessible through URL https://uqbitz.com and its subdomains, which offer the possibility of contracting products and services advertised by UQBITZ.

UQBITZ recognizes that your privacy is very important, therefore, we take all possible measures, within the best practices and existing solutions, to protect it. In this sense, this Policy aims to inform you how your personal data will be treated.

We do not knowingly collect or solicit information from anyone under the age of 18. Users under the age of 18 should not send us information through our Platform. If we become aware that we have collected information from a person under the age of 18, we will disregard the information provided and will not maintain it in our databases.

This Policy was written in a simple and accessible way, precisely so that you can read and understand how we use your data to provide a safe and comfortable experience when using the Services offered.

Acceptance of this Policy will be considered formalized the moment you enter your information and purchase any product or service through the UQBITZ website.

This will indicate that you are aware and in full agreement with how we will use your information and data.

If you do not agree with this Policy, please do not continue your registration procedure and purchase. However, we kindly ask you to inform UQBITZ about your possible disagreement so that we can use your reasons to evaluate the revision of this Policy.

This Policy is divided as follows to facilitate its understanding:

1. WHAT PERSONAL DATA DO WE COLLECT AND PROCESS. FOR WHAT PURPOSES DO WE USE AND LEGAL BASIS FOR DATA PROCESSING

What data do we collect – From the information provided by you when purchasing products or services, UQBITZ, depending on the services contracted, may collect the following data:

  1. First and Last Name;
  2. Residential and commercial address;
  3. Residential and business telephone;
  4. Personal and business email;
  5. Personal and business cell phone number
  6. Date of birth;
  7. State and Cities;
  8. Nationality;
  9. URL and;
  10. Card number, cardholder name, expiration date, CVV card number and password. (these through payment gateway)

For what purposes do we use it – Your personal data collected will be used for:

  1. Sending a quote, drafting a contract, providing the contracted service and;
  2. Issuing invoices and processing payments.

What is the Legal Basis for the purposes mentioned above – For the purposes mentioned above, the legal basis for processing data is PERFORMANCE OF A CONTRACT (Sending a Quote, drafting a contract, providing the contracted service, issuing an invoice and making payments). Only regarding the purpose “issuance of invoice” the legal basis is LEGAL OBLIGATION.

Occasionally, requests for other information may be made through direct contact between UQBITZ and users via email or telephone.

Site navigation information – When you access our website, a ‘cookie’ may be installed in your browser to identify how many times you return to our address. In this case, information such as IP address, geographic location, access routes, time, browser type, duration of visit and pages visited may be collected. For more information visit our Cookie Policy.

All data and information about you will be treated as confidential, and will only be used for the purposes described here and authorized by you.

From time to time, we may use data for purposes not provided for in this Policy, but which are within your legitimate expectations. Any use of your data for purposes that do not comply with this prerogative will be done subject to authorization that we will request from you in advance.

2. ABOUT ACCESS TO YOUR PERSONAL DATA

Without prejudice to the 5 item below, access to your personal information will be restricted only to UQBITZ employees and partners, and among these, only people with specific internal authorizations to do so.

All your data is confidential and any use of such data will be in accordance with the Law and this Policy. UQBITZ will undertake all reasonable market efforts to ensure the security of our systems and, consequently, your personal data.

All your information will, whenever possible, be encrypted, if it does not make its use by UQBITZ unfeasible.

Among other rights provided for by law, upon request and at any time, you may have access to your personal data stored in our systems.

3. ABOUT DATA SHARING

In order to achieve the purposes of the processing set out in this policy, the user agrees and consents that UQBITZ may share their personal data with:

  • GOOGLE (GOOGLE CLOUD AND GOOGLE WORKSPACE) – for infrastructure, APIs and Google Workspace services when contracted;
  • HETZNER – for computing infrastructure and data center hosting;
  • CLOUDFLARE – for DNS, content distribution, application protection and attack mitigation;
  • AMAZON WEB SERVICES (AWS) – for cloud services and sending electronic communications;
  • BACKBLAZE – for storing objects and backup copies;
  • MERCADO PAGO AND STRIPE – for payment processing;
  • ENOM AND REGISTRO.BR – for registration and management of domain names;
  • MUNICIPAL CITY HALL OF SÃO BERNARDO DO CAMPO AND OTHER COMPETENT TAX AUTHORITIES – for issuing and processing tax documents;
  • COMPETENT JUDICIAL, ADMINISTRATIVE OR GOVERNMENTAL AUTHORITIES – whenever there is a legal determination, request, requisition or court order;

4. INTERNATIONAL DATA TRANSFER.

Some of the third parties with whom we share your data operate infrastructure in Brazil or abroad, including in the United States of America, Canada, Germany and other jurisdictions in which they maintain facilities or sub-operators. Under these conditions, your personal data will continue to be subject to the guarantees provided for in the Brazilian General Data Protection Law and other applicable legislation.

In this sense, UQBITZ adopts cybersecurity, data protection, continuity and compliance criteria in the selection and evaluation of suppliers, observing the contractual and legal safeguards applicable to international transfers.

International processing and transfers will only occur in accordance with the purposes and legal bases described in this Policy and in the instruments applicable to the contracted service.

5. SECURITY MEASURES

To ensure the protection of your data, we use technical and administrative security measures to prevent unauthorized access and accidental and/or illicit situations of manipulation, loss, destruction and/or alteration of said data.

Security measures are continually improved and adapted as applicable technology updates, as well as best market practices in this regard.

We maintain a Security and Shared Responsibility Matrix, which delimits the controls assigned to UQBITZ, the client and suppliers involved in providing the Services. The matrix covers, depending on the contracted service, topics such as infrastructure security, application configuration, identity and access management, credential protection, updates, backups, monitoring, incident response and data protection.

The governance of these controls is accompanied by an internal security and hardening roadmap, periodically reviewed according to identified risks, audit results and the evolution of applicable technologies and threats.

Some suppliers maintain certifications or independent audit reports, such as ISO/IEC 27001, SOC, PCI DSS, BSI C5 or equivalents. This evidence is considered by UQBITZ when evaluating the supplier's controls, always within the effectively certified or audited services, locations and scopes. Such certifications and reports do not automatically certify UQBITZ, the Services or the customer's environment, nor do they remove the responsibilities assigned to each party in the matrix.

All your information will, whenever possible, be encrypted, if it does not prevent its use for the purposes set out here.

It is also very important that you know that we will never send electronic messages or by conventional mail, requesting confirmation of data or with attachments that can be executed or even links to possible downloads.

In accordance with Article 48 of Law No. 13.709, the Data Controller will notify the affected data subject and the National Data Protection Authority (ANPD) of any security incident that may result in significant risk or harm to the data subject.

6. HOW LONG DO WE STORE YOUR DATA

Your personal data collected by UQBITZ will be used and stored for as long as necessary to provide the service or for the purposes listed in this Privacy Policy to be achieved, considering the rights of data subjects.

In general, your data will be kept for as long as the contractual relationship between you and UQBITZ continues, always respecting the data retention period determined by applicable legislation. After the period of storage of personal data, they will be deleted from our databases or anonymized, unless such information is necessary to comply with a legal obligation by UQBITZ, meet legitimate interests, or for the regular exercise of rights in judicial, administrative or arbitration proceedings.

7. YOUR RIGHTS

You may exercise your rights regarding personal data processed by us, which are:

I. Confirmation of the existence of processing – your right to request information from UQBITZ about the data it holds about you and the way in which it is processed;

II. Access to data – your right to have access to your personal data under our treatment;

III. Correction of incomplete, inaccurate or outdated data – the right to request UQBITZ to correct incomplete, inaccurate or outdated data;

IV. Anonymization, blocking or deletion of unnecessary, excessive data – the right to request the temporary suspension of any processing operation of your personal data or to request the deletion of a data or set of personal data, when these are unnecessary, excessive or treated in non-compliance with the Brazilian General Data Protection Law (LGPD);

V. Portability of data to another service or product provider, upon express request, in accordance with the regulations of the national authority, observing commercial and industrial secrets;

VI. Deletion of personal data processed with the data subject’s consent – the right to have your personal data deleted from our databases;

VII. Information of public and private entities with which the controller shared data;

VIII. Information about the possibility of withholding consent and the consequences of refusal – the right to information about processing based on consent and a clear explanation of what may occur if the data subject does not provide consent;

IX. Revocation of consent – the right to revoke your consent for the purposes of processing personal data linked to it

X. Review of automated decisions – the right to request clear information regarding the criteria and procedures used to make decisions based on automated processing of personal data that affect your interests.

8. HOW TO CONTACT THE COMPANY AND THE PERSON RESPONSIBLE FOR PROCESSING PERSONAL DATA.

Any questions regarding this Policy can be clarified by contacting us, via the email address [[email protected]](mailto:[email protected]), indicating “Privacy of personal data” as the subject.

Email is the preferred contact channel. For general telephone contact, UQBITZ provides +55 (11) 98555-5548; requests related to the exercise of data subject rights must be submitted by email.

Data Protection Officer: office Cremasco e Vianna Sociedade de Advogados (Samanta Amaro Vianna Cremasco)

Data subjects may exercise their rights through written communication sent to the email: [[email protected]](mailto:[email protected]) indicating with the subject: “Subject – Data Subject Rights” specifying:

  • Full name, CPF number and email address and, if applicable, your representative;
  • Right you wish to exercise;
  • Date of the request and signature of the data subject;
  • Any document that can demonstrate or justify the exercise of your right.

To fulfill your rights, we need the above data to confirm that the person exercising these rights is in fact you or a person who is authorized to act on your behalf.

Please note that rights are not absolute and do not always apply in all cases, but we will always do everything we can to honor your rights under applicable data protection laws.

9. COMPLAINTS

You also have the right to petition the National Data Protection Authority, the authority responsible for ensuring respect for the rights of data subjects in Brazil and monitoring compliance with the Brazilian Brazilian General Data Protection Law (Law No. 13.709/18 or LGPD). Access at: https://www.gov.br/anpd/pt-br.

10. CHANGES TO PRIVACY POLICY

This Policy may undergo updates. Therefore, we recommend periodically visiting this page so that you are aware of the changes. If relevant changes are made that require new authorizations from you, we will make the new privacy policy public.

This Policy was last modified on July 30, 2026.