PRIVACY NOTICE
Updated on September 9, 2025.
1. Privacy Statement
VALGROUP knows how important it is to understand and feel confident about the use of personal data under its control. For this reason, we strive to clarify and explain our Privacy Notice, which applies to the units that make up our Company.
We recognize the need to protect and appropriately manage the personal information collected on our website, as well as the information shared by our customers.
This Privacy Notice will help you understand what types of information we may collect, how this information may be used, with whom the information may be shared, and what the rights of data subjects are with respect to the protection of their personal data.
2. What Personal Information Do We Collect
Personal information we obtain may be collected in the following ways:
Customer service channels: Personal information is collected when the user interacts with our website through the Contact Form. This personal information includes name, email, and phone number. Personal data is collected to identify the user and respond to their request. This may include, among others, name, email, and phone number. In addition, we collect any personal data voluntarily provided by the user.
Customer Portal: Personal information is collected when the customer interacts with our website to access the customer portal, through each customer’s unique login and password, previously registered, and acceptance of VALGROUP’s General Terms and Conditions of Use at the link https://portalcliente.valgroupco.com/ to consult information, issue reports and bank slips related to the contract or commercial relationship between VALGROUP and the customer.
The collected data include name, email, and phone number of website users. Personal information collected is only accessible to those who need to know it for the execution of relevant activities, respecting the purpose for which it was provided.
Cookies: Personal data may be collected through cookies. For more information, see VALGROUP’s Cookie Policy at the link https://www.valgroupco.com/en/politica-de-cookies/.
Contract: The collection of personal data by VALGROUP aims at formalizing and executing executed contracts, delivering acquired products, and issuing Electronic Invoices. This data includes, among others, Name/Corporate Name, CPF/CNPJ, Full Name of the Responsible Person, Phone Number, Full Address with ZIP Code, Neighborhood, City, and State, as well as State Registration when applicable, and email for contact and possible sending of Electronic Invoice.
Social projects: Personal data of children and youth may be collected due to VALGROUP’s participation in social projects. The collected data are: names and photos.
Access to physical facilities: We collect personal data from any individual accessing VALGROUP companies’ facilities, through registration of full name, photo, CPF, and company. If entry is made using a cargo vehicle, the vehicle plate number is also collected.
Internal monitoring via security cameras: In our physical facilities, images and recordings of third parties, employees, customers, and visitors are collected to monitor activities and ensure internal security.
Job applicants: Personal information of job applicants is collected through a form available on the website of the company hired to support our recruitment and selection processes (redirected link on our “Work With Us” page), as well as through a specific form made available by the Recruitment and Selection team during the hiring process. For more information, the Terms of Use and Privacy Policy/Notice of the platform may be consulted. Personal data collected include, among others, name, email, date of birth, CPF, address, phone number, and other professional information filled in or mentioned in documents submitted by the candidate.
Employees: Regarding personal data collected from our employees, this information is necessary for their registration in compliance with labor laws and for employment contract execution. VALGROUP further informs that, if necessary, it may share employee personal data with other data-processing agents, observing principles and safeguards established by the LGPD. This sharing may occur for the use of internal communication applications. In addition, there may be sharing of data requested by third parties to allow the provision of services by VALGROUP employees on their premises. VALGROUP also shares employee personal data in situations involving benefits such as: medical agreements, health plans, meal vouchers, food vouchers, contracted companies, and submission of information related to tax, social security, and labor obligations.
3. Social Media
VALGROUP also uses Social Media to communicate and interact with customers and consumers through third-party websites such as Linkedin, Instagram, and Youtube. These third-party websites are Internet-based technologies not operated or controlled by VALGROUP.
When interacting, sharing, or “Liking” VALGROUP’s page on Linkedin, Instagram, Youtube, or other social media, you may reveal certain personal information to VALGROUP or third parties.
We use “social buttons” to allow our users to share or mark webpages. These buttons belong to third-party social media websites and may record information about your online activities, including on this website. Please review the respective terms of use and privacy policies of these platforms to understand exactly how your information is used, how to opt out, or delete such information.
The amount of visible personal information will depend on your own privacy settings on Linkedin, Instagram, Youtube, and other social media.
4. Purposes and Legal Bases
Below are the purposes and legal bases for the processing of data by VALGROUP:
| Purpose |
Legal Basis |
| Comply with terms and conditions established in a contract. |
Justified based on our legitimate interests to comply with and ensure compliance with the terms established with our customers. |
| Comply with terms and conditions established in a contract. |
Necessary for the execution of a contract to which the data subject is a party. |
| Recruitment and evaluation of job suitability. |
Justified based on preliminary procedures related to contract execution to ensure that we recruit suitable employees. |
| Facilitate communication with you (including emergencies and providing requested information). |
Justified based on our legitimate interests to ensure adequate communication and emergency management within the organization. |
| Comply with legal requirements. |
Necessary for compliance with a legal obligation to which we are subject. |
| Monitor your use of our systems (including monitoring website usage and any applications or tools you use). |
Justified based on our legitimate interests to avoid non-compliance and protect our reputation. |
| Social listening (identifying and analyzing publicly accessible content about VALGROUP on social media to detect sentiment, intent, trends, and stakeholder needs to improve our services). |
Justified based on our legitimate interests in protecting our assets and brand on social media. |
| Improve the security and performance of our website, application, networks, and information. |
Justified based on our legitimate interests to ensure an excellent user experience and secure networks and information. |
| Identification and authentication for access to VALGROUP units through images and recordings of third parties, employees, and visitors. |
Justified by the protection of the life or physical safety of the data subjects or third parties. |
| Internal monitoring through security cameras. |
Justified based on the legitimate interest of the controller or a third party. |
| Offer our products and services to you (unless you object). |
Justified based on our legitimate interests. |
| Administer employee benefits. |
Justified based on the employee’s consent when the benefit is not provided by law, agreement, or collective bargaining. |
| Provide necessary information to government authorities. |
To comply with a legal obligation. |
We rely on legitimate interest only for specific purposes. These personal data processing activities do not override the interests, rights, and freedoms of data subjects.
5. About sharing and transferring information
VALGROUP does not disclose information that can identify the user and never shares, sells, or rents personal data to third parties. This data is for internal use only to achieve the purposes listed above.
Data may be shared with third parties only under the following conditions:
- By court order or request from government oversight bodies;
- Data transferred to public authorities to comply with applicable legislation, such as personal data included in electronic invoices and XML files, or data from our employees required for INSS or FGTS payments;
- Data transferred to accounting or HR service providers to meet tax and labor obligations;
- Data transferred to financial institutions to facilitate payment options for customers or salary payments for employees and service providers;
- Data shared with partners, operators, and service providers that participate, directly or indirectly, in VALGROUP business activities, such as logistics and transportation, monitoring, securitization, storage and data processing, recruitment and selection, registration verification, collections and credit analysis, order processing, customer services, email sending, satisfaction surveys, advertising and marketing, security and performance monitoring, research, data retention, and auditing;
- Data transferred to execute the contract, as well as to protect VALGROUP’s interests in any type of dispute, including legal actions;
- In case of corporate transactions such as mergers, acquisitions, transformation, spin-offs, or partial/total sale of assets, we may share, disclose, or transfer all personal data to the successor organization.
Some of the service providers mentioned above may be located abroad, in which case VALGROUP adopts additional safeguards to ensure an adequate level of protection of personal data, in accordance with applicable Brazilian legislation.
Personal data collected may also be shared among VALGROUP units, including those located in the United States, Spain, Mexico, Uruguay, Italy, and Colombia, reaffirming the commitment to using the data for the same purposes and with the same safeguards indicated in this Notice.
6. Information Security
To ensure the security of your personal information, we communicate our privacy and security guidelines to VALGROUP employees and business partners and strictly follow privacy precautions within the company.
We are committed to protecting your personal information and that entrusted to us by our customers through physical, technical, and organizational measures aimed at reducing risks of loss, misuse, unauthorized access, disclosure, and improper alteration of this data.
7. Data Subject Rights
Data subjects have certain rights regarding their personal data and may exercise them by clicking here to access the Data Subject Access Request Form (DSAR) or by emailing: dpo@valgroupco.com.br.
The rights of the data subjects include:
- Confirmation of the existence of personal data processing;
- Access to personal data, in accordance with applicable legislation;
- Correction of incomplete, inaccurate, or outdated personal data;
- Portability of personal data;
- Deletion of personal data when processed based on the subject’s consent or when data are unnecessary, excessive, or processed unlawfully;
- Request for information about shared use of personal data;
- Withdrawal of consent, when applicable.
VALGROUP will always evaluate the best way to fulfill a rights request. However, we may partially or fully deny your request in specific situations permitted by law, such as compliance with a legal obligation or under the terms of a signed contract.
We emphasize the importance of keeping your personal data accurate and up to date. Therefore, please inform VALGROUP whenever your personal data change or are incorrect.
For security reasons, requests submitted via the email dpo@valgroupco.com.br will be fulfilled only once we confirm the user’s identity. As such, we may request additional data or information to confirm the identity and authenticity of the data subject. This data will be protected during storage and deleted once its purpose—identity confirmation—is fulfilled.
8. End of Processing
This Privacy Notice applies to the above circumstances for the entire period during which VALGROUP stores personal data. We retain your information: (a) for the time required by law; (b) until the end of personal data processing, as mentioned below; or (c) for the time necessary to safeguard VALGROUP’s rights. Thus, we process your data, for example, during applicable statutory periods or when necessary to comply with legal or regulatory obligations.
The end of personal data processing occurs in the following cases: (a) when the purpose for which the personal data was collected is achieved and/or the collected personal data are no longer necessary or relevant to fulfill that purpose; (b) when the Data Subject requests deletion of their data; and (c) when there is a legal requirement for deletion.
In cases of termination of personal data processing, except for circumstances established by applicable legislation or this Privacy Notice, personal data will be deleted.
9. Data Protection Officer (DPO)
VALGROUP provides below the contact information of the Data Protection Officer (DPO), who is responsible for handling any requests from data subjects or the National Authority related to personal data.
For any questions, requests, or complaints regarding personal data processing, please contact our Data Protection Officer:
DPO EXPERT® (www.dpoexpert.com.br)
Responsible: Rafael Susskind
Alternate Responsible: Renata Adeli Franhan Parizotto
Contact: dpo@valgroupco.com.br
If, despite our commitment and efforts to protect your data, you believe that your data protection rights have not been upheld, we request that you contact our DPO. You also have the right, at any time, to file a complaint directly with the National Data Protection Authority if you believe your personal data rights have been violated.
10. Changes to the Privacy Notice
Although our Privacy Notice has been presented clearly, concisely, and objectively, do not hesitate to contact VALGROUP’s DPO if you have any questions about this important document or the personal data processing activities we perform.
VALGROUP reserves the right to update or modify this Notice at any time without prior notice. However, we will always publish the revised version on our website. If there are changes in the way we process personal data, you will be informed so you may decide whether to continue acquiring our products or using our services.
