Who we are
Terragswift Ltda. is the controller of personal data processed through this site and contacts with the shop. This means the company determines why and how that data is used, in accordance with Brazil’s General Personal Data Protection Law, Law No. 13,709/2018, known as the LGPD. Our business serves people interested in bicycle repairs, scheduled tune-ups, parts and accessories in Curitiba. This policy explains processing related to browsing the site and messages sent to the shop; it does not replace specific information that may be needed in another interaction.
Terragswift Ltda.Rua Itupava, 843, Alto da XV, Curitiba - PR, 80040-000, Brazil
contato@terragswift.site
+55 (41) 99824-3716
Data We Process
When you fill out the contact form, you provide your name, email address and message. The form also lets you provide a phone number and subject. If you choose, your message may include your bike’s model, details of a problem or when you’re available to visit the shop. When you access the site, technical server logs may contain your IP address, browser type, access date and time, and pages requested. The cookie interface stores your choices about necessary, analytics and marketing categories in your browser’s storage. A recorded choice does not, by itself, mean that optional cookies have been installed.
We don’t request payment details through the form, identity documents, sensitive data—such as information about health, religion or biometrics—or children’s data. Please avoid including this information in your message. If you send it voluntarily and it isn’t needed to handle your request, we may delete it or ask you to rewrite your message. Technical information generated as you browse differs from what you choose to write: the former helps us provide and protect the site; the latter helps us understand and respond to your request.
Purposes and Legal Bases
We process data only for purposes related to running the site, honoring your privacy choices and handling the service you request. The LGPD requires a legal basis for each purpose. The applicable basis depends on the context: receiving a question about a service is different from keeping a technical log needed to secure the site.
- Responding to messages and arranging service
- We use your name, email and message—and your phone number and subject, if provided—to respond to your request and discuss an assessment, repair, tune-up or part. The legal basis is taking preliminary steps related to a contract at the data subject’s request, under Article 7, item V, of the LGPD.
- Providing and protecting the site
- Technical access logs may be used to diagnose faults, investigate misuse and maintain the service’s security. The legal basis is the controller’s legitimate interest under Article 7, item IX, of the LGPD, taking into account the necessity of the processing and the rights and expectations of site visitors. When keeping a particular log is required by law, the corresponding basis is compliance with a legal obligation under Article 7, item II.
- Storing your cookie choice
- Your preference is stored to apply your decision and keep the notice from reappearing on every visit. The processing needed to record and respect this choice is based on legitimate interest under Article 7, item IX. Any optional analytics or marketing technologies, if used, require your specific consent under Article 7, item I, and remain off until you make that choice.
We don’t treat a message sent to the shop as automatic permission to send advertising. If a purpose changes or requires another legal basis, we’ll provide the relevant information before the new processing begins. You can refuse optional cookie categories without preventing you from sending a message or accessing the site’s essential content.
Recipients and Processors
Terragswift staff responsible for customer service may access messages as needed to respond. Service providers, such as the website hosting provider and email provider, may process technical data or messages to perform their functions. Typography resources loaded from an external provider may also cause your browser to make a technical request to that provider. Such access must be limited to the relevant purposes, with instructions and safeguards appropriate to the service provided.
We don’t sell your personal data. We may disclose information to public authorities when required by law or a legally valid request, or when necessary to exercise rights in administrative or court proceedings. Such a disclosure does not turn your contact details into a commercial list shared with third parties.
International Transfers
An international transfer may occur if a provider used for hosting, email or delivering site resources processes data on infrastructure outside Brazil, or if a request made by your browser is sent to a service abroad. Where you read the page does not, by itself, determine where each provider maintains its systems. Any transfer subject to the LGPD must rely on a ground permitted under Article 33 of the law, such as an applicable adequacy decision or appropriate contractual safeguards.
Where standard contractual clauses are needed, the rules of Brazil’s National Data Protection Authority must be followed, including Resolution CD/ANPD No. 19/2024. These safeguards aim to preserve rights and protections even when processing takes place outside the country. You can write to the contact listed in this policy to ask about a transfer involving your data.
Retention Periods
We set retention periods according to the purpose of each set of data rather than keeping all information for the same length of time. At the end of the applicable period, data is deleted or anonymized, unless a legal obligation, a valid request from an authority or the need to exercise rights justifies further retention under the LGPD.
- Messages and contact details
- Up to 24 months after the last interaction related to your request, to follow up on service and clarify the conversation history. If the contact leads to a relationship subject to specific legal obligations, the necessary records may be kept for the period those obligations require.
- Technical server logs
- Up to 90 days for diagnostics and security, unless applicable law requires a different period or retention is necessary because of an incident or a valid request.
- Cookie Choices
- Your preference remains in your browser’s storage until you change it in the site settings, clear your browser data or that storage is removed. Making a new choice replaces the previous preference in that browser.
We will review a deletion request in light of these retention periods and the legal grounds for keeping data. Clearing your browser’s cookie preference, for example, does not automatically delete a message you sent to the bike shop. To request action concerning that message, contact us.
Your Rights
Brazil’s General Data Protection Law (LGPD), particularly Article 18, gives you rights concerning the personal data we process. You can ask us to confirm whether we process your data and request access to it. You can also ask us to correct incomplete, inaccurate or outdated information so that a response or record does not rely on incorrect data.
You can request the anonymization, blocking or deletion of data that is unnecessary, excessive or processed in violation of the LGPD. You can request data portability, subject to applicable regulations and the protection of trade and industrial secrets. You also have the right to information about the public and private entities with which we have shared data, and about the option not to give consent and the consequences of that choice.
Where processing depends on consent, you can withdraw it and request the deletion of data processed on that basis, subject to legal grounds for retention. You can also object to processing based on another legal ground if it violates the LGPD. You can review optional cookie choices through the preference controls on the site. For requests involving other data, write to contato@terragswift.site.
To protect your information, we may ask for proportionate information to confirm your identity before responding to a request. Confirmation that processing takes place or access to data may be provided immediately in a simplified format; a clear and complete statement will be provided within 15 days, as set out in Article 19 of the LGPD. For other requests, we will keep you informed of progress and respond within the applicable legal deadlines, or within a reasonable time if no specific deadline applies. If you believe your request was not handled properly, you can file a petition with the Brazilian National Data Protection Authority (ANPD), without prejudice to other remedies available by law.
Data Security
We take proportionate technical and administrative measures to reduce the risks of unauthorized access, loss, alteration or improper disclosure. These include limiting access to information to those who need it to handle your request, protecting the means of communication we use and keeping data only as long as necessary. Protection also depends on the technical services used to make the site available and receive messages, so service providers must meet responsibilities appropriate to their roles.
No internet-connected system can completely eliminate the possibility of an incident. If a security incident occurs that could pose a significant risk or cause significant harm to data subjects, we will assess the circumstances and make the notifications required by the LGPD and ANPD regulations. For your safety, do not include card numbers, passwords or identity documents in the message field.
Children’s Data
The form and services presented on this site are not intended to collect children’s personal data. We ask parents and guardians not to include information about children in messages about bicycles, appointments or parts purchases unless it is strictly necessary for the request. If we identify a child’s data that was sent unnecessarily, we will assess whether to delete it and what other steps are appropriate, taking account of the child’s best interests and the LGPD.
A parent or guardian who believes a child’s information was sent through the site can write to contato@terragswift.site. Describe what happened without repeating unnecessary personal data in the new message, so we can locate the original contact and assess the request securely.
Changes to This Policy
This policy may be updated to reflect changes to how the site works, our contact channels, data processing practices or legal requirements. When that happens, the version published on this page will show a new update date. We recommend reviewing this text when you return to the site, especially before sending another message containing personal information.
If a change significantly affects the purpose or conditions of processing we have already described, we will provide the necessary information and, where required by law, ask you to make a new choice before processing begins. A change to this policy does not automatically turn a previous cookie choice into consent for another purpose.
Contact
For questions about this policy, to learn how your data is processed or to exercise a right under the LGPD, contact Terragswift Ltda. by email at contato@terragswift.site or by phone at +55 (41) 99824-3716. If you prefer to write by post, the address is Rua Itupava, 843, Alto da XV, Curitiba - PR, 80040-000, Brazil.
When you write, tell us which data or interaction your request concerns and how we can respond. Do not include documents or sensitive information in your first message. If we need to confirm your identity or better understand your request, we will explain what additional information is needed and why.