Privacy Policy

Last updated: September 2026

Adicel Indústria e Comércio LTDA, operating internationally under the AdicelGroup brand (“AdicelGroup”, “we”, “us” or “our”), respects the privacy of individuals who visit our website or contact us regarding our products, services and business activities.

This Privacy Policy explains how we collect, use, store, share and otherwise process personal data through the AdicelGroup website.

1. Controller and privacy contact

The controller responsible for the processing described in this Policy is Adicel Indústria e Comércio LTDA, operating internationally under the AdicelGroup brand.

Privacy contact: contac@adicelgroup.com

This channel may be used for privacy questions and requests relating to personal data processed through this website.

2. Personal data we may collect

When you contact us through the website, we may receive information such as your name, business email address, company, country or market, telephone or WhatsApp number, company website and the content of your request.

Depending on the type of enquiry, you may also provide information about products of interest, intended applications, approximate volumes, delivery destinations, technical requirements, requested documentation and desired timing.

Please do not submit sensitive personal data through our business contact forms unless it is strictly necessary and specifically requested by us.

Technical information necessary for website operation, security, fraud prevention and error handling may also be processed by the infrastructure and technology providers supporting the website.

3. Purposes and legal bases

We process personal data only when there is a lawful basis under the legislation applicable to the processing.

Depending on the context, the main purposes and legal bases may include:

- responding to commercial, technical or documentation enquiries, preparing quotations and assessing business opportunities: our legitimate interests in managing B2B relationships and, where applicable, steps requested before entering into a contract or performance of a contract; - managing relationships with customers, prospects and business partners, including follow-up on products, applications, supply and logistics: our legitimate interests in conducting and developing our business, and consent where required by applicable law; - protecting the security, integrity and proper functioning of the website and preventing abuse or fraud: our legitimate interests in maintaining secure services and, where applicable, compliance with legal obligations; - complying with legal, regulatory, tax, accounting or other mandatory requirements: compliance with legal obligations; and - establishing, exercising or defending legal rights and claims: the lawful bases permitted by applicable law for those purposes.

Where consent is used as the legal basis for a specific activity, it may be withdrawn as provided by applicable law without affecting the lawfulness of processing carried out before withdrawal.

4. Sharing of personal data

We may share personal data only when reasonably necessary for the purposes described in this Policy, including with technology, hosting, database, communications, professional and operational service providers that support the website or our business processes.

These providers may include platforms such as Lovable and Supabase when they are used to operate the website and its underlying infrastructure. Service providers may act as processors or operators on our behalf and are expected to process data subject to applicable contractual, confidentiality and security obligations.

Information may also be shared when required by law, regulation, court order or competent authority, or when necessary to protect legal rights.

We do not sell personal data.

Commercially confidential information, including supplier or manufacturer identities, is handled under separate business confidentiality controls.

5. International processing and transfers

Because AdicelGroup operates internationally and uses technology and business service providers, personal data may be processed or stored in countries other than the country where it was originally collected.

Where international transfers are subject to specific legal requirements, we use the mechanisms and safeguards recognized by the applicable law, which may include adequacy decisions, contractual safeguards or other legally permitted transfer mechanisms, depending on the circumstances.

6. Data retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

The retention period may depend on factors such as the duration of the business relationship or commercial follow-up, legal or regulatory retention requirements, applicable limitation periods, documentation needs, dispute resolution and the protection of legal rights.

When data is no longer required, it may be deleted, anonymized or otherwise handled in accordance with applicable law and our technical and legal obligations.

7. Security

We use reasonable technical and organizational measures intended to protect personal data against unauthorized access, alteration, disclosure, loss, misuse or destruction.

No information system can guarantee absolute security. We therefore review controls according to the nature of the data, the services involved and the risks reasonably identified.

8. Your privacy rights

Your rights depend on the law applicable to the processing.

Under Brazilian data protection law, where applicable, rights may include confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary, excessive or unlawfully processed data, portability subject to applicable regulation, information about sharing, information relating to consent, withdrawal of consent, opposition in the circumstances provided by law, and review of certain decisions made solely on automated processing where applicable. You may also have the right to petition the Brazilian National Data Protection Authority (ANPD) as provided by law.

Where the GDPR or another data protection regime applies, additional or corresponding rights may include access, rectification, erasure, restriction of processing, data portability, objection to processing, withdrawal of consent where consent is the legal basis, and the right to lodge a complaint with the competent supervisory authority.

Requests may be submitted to contac@adicelgroup.com. We may need to verify the identity of the requester and may retain information necessary to document and respond to the request.

9. Cookies and similar technologies

At the current stage, the website does not intentionally use non-essential advertising or behavioral-tracking cookies.

Essential technical technologies may be used when necessary for security, operation and delivery of the website.

If analytics, advertising or other non-essential tracking technologies are introduced in the future, this Policy and any consent mechanisms required by applicable law will be reviewed accordingly.

10. Changes to this Policy

We may update this Privacy Policy when our website, services, legal requirements, providers or data-processing practices change.

The current version will always be identified by the “Last updated” date displayed above.