Privacy Policy

1. Who we are

This website is operated by 63.584.987 ELVIS CARLOS BENITES ROSA (doing business as BNTS Lab), located at Colônia Rio Grande, São José dos Pinhais – PR, CEP 83025-570, Brazil (“we,” “us,” or “our”). Contact: support@bntslab.online.

2. Information we collect

• Identifiers and contact information: your name and email address, which you enter when you place an order.
• Payment information: collected and processed by Stripe in its own secure form. We never receive or store your full card number; we receive only the payment result, the amount, the card network, the last four digits, and, if you allow us to save your payment method, an identifier (token) generated by Stripe.
• Order information: products purchased, amounts, dates, payment status, any subscription, and the consents you gave (with date and time).
• Technical information: IP address, browser type, date and time of requests, and a signed technical session cookie, needed to keep the service secure and to prevent abuse and fraud.
• Campaign attribution data: UTM parameters, click identifiers (fbclid, gclid), and the _fbp/_fbc cookies, if present in the link you used to reach the site or in your browser.
• Ad measurement data (Meta Pixel): the pages you visit and the steps you take toward a purchase (such as starting the questionnaire, viewing the offer, finishing the video, opening the payment form, clicking “Pay,” and completing the purchase); the offer’s value, currency, and code; the order number; a browser identifier (_fbp cookie); the ad click identifier (_fbc cookie); and your IP address and browser type. If you enter your email address in the payment form, it is sent to Meta in pseudonymized (hashed) form. We do not send your questionnaire answers to Meta.
• Answers to the wellness check-up (program page): these are not sent to our server or stored by us. They stay only in your browser’s memory and are deleted when you close the tab.

3. How we use your information

Your name and email address are required to complete a purchase; all consents are optional, and declining them does not prevent you from buying.

4. Who we share your information with

We share information only with the following service providers, which process it on our behalf or as independent businesses within the scope of their own services:

• Stripe: payment processing, fraud prevention, sending receipts, and saving your payment method if you authorize it.
• Meta Platforms, Inc.: receives the measurement data that the Meta Pixel collects in your browser and, only if you have given your consent when placing your order, the conversion data we send from our server through the Conversions API. Identifiers (email, name) are sent in pseudonymized (SHA-256 hashed) form, together with IP address, browser, and click identifiers.
• Transactional email provider (Resend): sending confirmation, activation, cancellation, and payment notice emails.
• Hosting provider (Hostinger): website hosting and data storage.
• Professional advisors, banks, and government authorities, when required by law.

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes. The site’s fonts are served from our own domain, so your browser does not contact any third-party service to load them.

5. International data transfers

We and some of our providers (Stripe, Meta, the email provider) may process your information in the United States, in the country where we are established, and in other countries. Wherever your information is processed, we protect it as described in this Privacy Policy and in accordance with applicable law.

6. Data retention

• Order and accounting records: 10 years from the date of purchase, for tax obligations and legal defense.
• Saved payment method (Stripe token): until you withdraw your consent or our relationship ends.
• Attribution data and technical logs: up to 12 months.
• Technical session cookie: 24 hours; technical visit identifier: 90 days.
• Meta measurement cookies (_fbp, _fbc): up to 90 days.

7. Your privacy rights

You can ask us at any time to access, correct, or delete your personal information, or to receive a copy of it, and you can withdraw any consent you have given (this does not affect processing done before you withdrew it). To make a request, email support@bntslab.online. We respond within 30 days. We may need to verify your identity before fulfilling your request, using the email address associated with your purchase.

8. Notice to California residents (CCPA/CPRA)

This section applies to residents of California and supplements the rest of this Privacy Policy, as required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”).

Categories of personal information we collected in the last 12 months, from you directly, from your browser, and from Stripe:

• Identifiers: name, email address, IP address, order number, and online identifiers (cookies, click identifiers).
• Commercial information: products purchased, amounts, subscription status, and refunds.
• Internet or other electronic network activity: pages visited and steps taken on our site, browser type, and campaign attribution data (UTM parameters).

We use these categories for the purposes described in section 3 and disclose them for business purposes only to the providers listed in section 4 (payment processing, email delivery, hosting, and ad measurement). We keep them for the periods described in section 6. We do not use or disclose sensitive personal information for purposes other than those permitted by the CCPA, and we do not knowingly sell or share the personal information of consumers under 16 years of age.

Your rights. As a California resident, you have the right to:

• know the categories and specific pieces of personal information we collect, use, and disclose about you;
• request that we delete or correct your personal information;
• opt out of the sale or sharing of your personal information;
• not be discriminated against for exercising any of these rights.

To exercise your rights, email support@bntslab.online. We will confirm receipt within 10 business days and respond within 45 days. We verify your request using the email address associated with your purchase. You may use an authorized agent; we may ask the agent for written permission signed by you and ask you to confirm your identity directly with us.

Do Not Sell or Share My Personal Information

We do not sell your personal information for money. However, when we use Meta’s advertising tools to measure our ad campaigns (the Conversions API and the Meta Pixel on our purchase pages), this may be considered “sharing” of personal information for cross-context behavioral advertising under California law.

You can opt out of this sharing at any time:

• by emailing support@bntslab.online with the subject line “Do Not Sell or Share My Personal Information” (no account is needed; we act on your request within 15 business days);
• by not checking, or later withdrawing, the optional ad measurement consent at checkout;
• by blocking third-party cookies and trackers in your browser settings or with a content blocker (see section 9).

Residents of other U.S. states with consumer privacy laws (such as Virginia, Colorado, Connecticut, Utah, and Texas) may exercise similar rights, including the right to opt out of targeted advertising, by emailing support@bntslab.online. If we decline your request, you may appeal by replying to our decision by email.

9. Cookies and measurement tools

The site uses technical cookies (a signed session cookie and a visit identifier), which are necessary for checkout to work and for security. Stripe’s payment form sets its own technical anti-fraud cookies.

Our purchase pages (questionnaire, offer, payment, and order confirmation) include the Meta Pixel, which sets the _fbp and _fbc cookies in your browser and sends Meta the data described in section 2 so that we can measure and improve our ad campaigns. You can prevent this by blocking third-party cookies and trackers in your browser settings or by using a content blocker. You can also adjust the ad preferences in your Facebook account to limit how this data is used to show you ads. Server-to-server measurement (Conversions API) takes place only if you gave your consent when placing your order.

Your choices. By continuing to use this site, you acknowledge the use of cookies and similar technologies as described in this section. Most browsers let you view, block, or delete cookies in their settings; blocking technical cookies may prevent checkout from working. To learn more about interest-based advertising and how to opt out, visit optout.aboutads.info or your Facebook ad preferences. Some browsers send a “Do Not Track” signal; because there is no common industry standard for these signals, our site does not currently respond to them. To opt out of the sharing of your personal information, see Do Not Sell or Share My Personal Information.

10. Automated decision-making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you. Stripe applies automated fraud checks to transactions, as described in its own privacy policy.

11. Children’s privacy

The service is intended only for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time; the “Last updated” date at the top shows the latest version. We will notify customers with an active subscription of material changes by email.