Privacy

Last updated: September 25, 2026

1. Introduction

Lapin Capital LTDA, headquartered at Av. Almirante Tamandaré, 33, Sala 03, Itaquanduba, Ilhabela/SP, ZIP Code 11634-000, Brazil (“Lapin Capital”), respects the privacy of users of the website lapincapital.com (the “Website”). This Privacy Policy explains what personal data we collect, how we use it, and what rights data subjects have, in accordance with the Brazilian General Data Protection Law (Law No. 13,709/2018 – “LGPD”).

2. Data Controller

Lapin Capital is the controller of the personal data processed through the Website, meaning it is responsible for decisions regarding such processing.

3. Data We Collect

We may collect the following data:

• Data provided by the user: name, email address, phone number, and the content of messages sent through contact forms, email, or WhatsApp.
• Browsing data: IP address, browser and device type, pages visited, and date and time of access, collected automatically through cookies and similar technologies.

Lapin Capital does not request sensitive personal data through the Website, such as racial origin, religious beliefs, political opinions, or health data.

4. Purposes of Processing

Personal data is used to:

• respond to contacts, questions, and requests sent by the user;
• send institutional communications and materials, when requested or authorized by the user;
• ensure the operation, security, and improvement of the Website;
• compile aggregated access statistics;
• comply with legal and regulatory obligations.

5. Legal Bases

The processing of personal data by Lapin Capital is based on the grounds set forth in Article 7 of the LGPD, in particular:

• the data subject’s consent;
• the legitimate interest of Lapin Capital, with due respect for the data subject’s rights and freedoms;
• compliance with a legal or regulatory obligation;
• the performance of preliminary procedures related to a contract, at the data subject’s request.

6. Cookies

Cookies are small files stored in the user’s browser that make it possible to recognize the device and record information about browsing. The Website may use:

• necessary cookies, which are essential for the Website to function;
• performance and analytics cookies, which help us understand how visitors use the Website.

The user may block or delete cookies at any time in their browser settings. Blocking some cookies may affect certain features of the Website.

7. Data Sharing

Lapin Capital does not sell or rent personal data. Data may be shared only:

• with service providers that support the operation of the Website, such as hosting, email, and web analytics tools, which process the data according to Lapin Capital’s instructions;
• with public authorities, when required by a legal or regulatory obligation or a court order.

Some of these providers may store data outside Brazil. In such cases, Lapin Capital adopts the measures required by the LGPD for international data transfers.

8. Storage and Security

Lapin Capital adopts appropriate technical and administrative measures to protect personal data against unauthorized access, loss, alteration, or improper disclosure. However, no system is completely immune to risk. Therefore, Lapin Capital cannot guarantee absolute security.

9. How Long We Keep Data

Personal data is kept only for as long as necessary to fulfill the purposes described in this Policy or to meet legal and regulatory obligations. After this period, the data is deleted or anonymized.

10. Data Subject Rights

Under Article 18 of the LGPD, the data subject may, at any time, request:

• confirmation that processing takes place and access to their data;
• correction of incomplete, inaccurate, or outdated data;
• anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in violation of the law;
• portability of the data to another service provider;
• deletion of data processed based on consent;
• information about the entities with which their data has been shared;
• withdrawal of consent.

Requests should be sent to contato@lapincapital.com and will be answered within the time limits set by law. The data subject may also file a complaint with the Brazilian National Data Protection Authority (ANPD).

11. Minors

The Website is not directed at individuals under 18 years of age, and Lapin Capital does not knowingly collect personal data from children or adolescents.

12. Changes to This Policy

Lapin Capital may update this Privacy Policy at any time, and the new version takes effect upon its publication on the Website. We recommend that users review this page periodically.

13. Contact

Questions, requests, or complaints about this Privacy Policy and the processing of personal data may be sent to contato@lapincapital.com.