This Policy applies to the Open North institutional website. When you access the store, complete a purchase, or use services offered in a third-party environment, the privacy policies of those providers may also apply.
1. Who we are
Open North is the brand commercially operated by:
- Business name
- 54.273.365 RAFAELLA GOBBI POBLETE
- CNPJ (Brazilian company ID)
54.273.365/0001-19- Contact
- contato@opennorth.com.br
For matters related to privacy and data protection, you can use the contact address above.
2. Data processed on the Open North website
The Open North institutional website does not require registration to browse and, at this time, has no account-creation form, newsletter, or in-house payment form.
While using the site, certain technical data may be processed automatically by the infrastructure required for the operation, security, and delivery of pages — such as IP address, browser and device information, date and time of access, and technical request logs.
When you authorize analytics cookies, we use Google Analytics 4 to statistically understand how the site is used. Google Analytics may collect information such as:
- number of users;
- sessions and interactions;
- pages visited;
- approximate traffic source;
- approximate geolocation;
- browser and device information;
- navigation events made available by Google Analytics.
We do not currently use advertising cookies, Google Ads, Meta Pixel, or TikTok Pixel on the institutional website.
3. Google Analytics and consent
Google Analytics 4 is only loaded after you expressly authorize analytics cookies. We use a Basic Consent Mode implementation.
This means that, before consent:
- Google Analytics is not loaded;
- Google Analytics cookies are not created;
- no Google Analytics measurement is started.
If you reject analytics cookies, Google Analytics will remain blocked. If you accept and later withdraw consent, your preference will be updated, the analytics cookies created by our implementation will be removed, and Google Analytics will stop loading on subsequent pages.
You can change your choice at any time using the Manage cookies option available on the site.
4. Store, purchases and Montink
By clicking a purchase button, you may be directed to the Open North store, which runs on Montink's technology infrastructure.
In that environment, data necessary to enable the purchase, payment, production, invoicing, delivery, order tracking, fraud prevention, and customer service may be requested. This data may include, as necessary for the operation:
- name;
- contact details;
- shipping address;
- order-related information;
- tax data, where applicable;
- information necessary to process payment;
- technical and security data.
Processing carried out in the Montink environment is also subject to Montink's own Privacy Policy and terms and, where applicable, to the policies of the respective payment methods, anti-fraud providers, carriers, and other providers involved.
Open North does not request card details or other payment credentials directly on the institutional website opennorth.com.br.
5. What we use data for
Personal data may be processed, depending on context, to:
- provide and maintain the website;
- protect the security and integrity of the service;
- understand site performance and usage when there is consent for Analytics;
- process and track purchases made in the store;
- produce and deliver purchased products;
- provide customer service;
- comply with legal, regulatory, tax, or judicial obligations;
- prevent fraud and abuse;
- exercise rights in administrative, judicial, or arbitration proceedings.
The applicable legal basis will depend on the purpose and may include, among other grounds provided for under Brazil's LGPD (General Data Protection Law), consent, contract performance, compliance with a legal or regulatory obligation, and legitimate interest, when applicable and permitted.
6. Data sharing
We do not sell personal data. Data may be processed or shared, when necessary, with providers involved in the operation, such as:
- site infrastructure and hosting;
- Google Analytics, when authorized;
- Montink, in the store and production environment;
- payment processors and anti-fraud providers;
- logistics and shipping services;
- technical providers necessary for the operation;
- public authorities, when there is a legal obligation or a valid order.
Each provider is responsible for the processing carried out within its respective duties and in accordance with applicable law.
7. International transfers
Some technology providers may operate infrastructure located outside Brazil or carry out international data processing. When this occurs, we seek to use providers that adopt protection and security mechanisms compatible with applicable law and data-protection requirements.
8. Storage and retention
We keep data only for the period necessary to fulfill the purposes for which it was processed, meet legal or regulatory obligations, exercise rights, and maintain records necessary for the operation.
Specific periods may vary depending on the nature of the data, the service used, and applicable legal obligations. Data processed by external providers is also subject to those providers' own retention policies and settings.
9. Security
We adopt reasonable technical and organizational measures to reduce the risk of unauthorized access, loss, alteration, disclosure, or misuse of information. However, no system connected to the internet can guarantee absolute security.
10. Your rights
Under Brazil's General Data Protection Law (LGPD), you may request, where applicable:
- confirmation of the existence of processing;
- access to the data;
- correction of incomplete, inaccurate, or outdated data;
- anonymization, blocking, or deletion of unnecessary, excessive data, or data processed in noncompliance with the law;
- portability, where applicable;
- information about sharing;
- information about the possibility of not giving consent and the consequences thereof;
- withdrawal of consent;
- deletion of data processed based on consent, subject to legal exceptions;
- objection to processing, where applicable;
- review of decisions made solely through automated processing, where applicable;
- other rights provided for under the law.
To exercise your rights regarding processing carried out under Open North's responsibility, contact us at: contato@opennorth.com.br
Requests directly related to data processed by Montink or another provider may need to be directed to the respective controller.
11. Children and teenagers
Open North does not intentionally direct its institutional website toward collecting personal data from children. Should the processing of data belonging to children or teenagers be identified, applicable legal requirements and the data subject's best interest will be observed.
12. Third-party sites and services
The site may contain links to external platforms, social networks, streaming services, the online store, or other websites. Once you leave the Open North domain, data processing also becomes subject to the policies and practices of the service you access.
13. Changes to this Policy
This Policy may be updated to reflect changes to the site, the services used, applicable law, or privacy practices. The updated version will be made available on this page along with its revision date.
14. Contact
Questions or requests related to this Policy or to Open North's processing of personal data may be sent to: contato@opennorth.com.br