Privacy Policy

1. Who we are

This website is operated by 63.584.987 ELVIS CARLOS BENITES ROSA (doing business as BNTS Lab), located at Colônia Rio Grande, São José dos Pinhais – PR, CEP 83025-570, Brazil (“we,” “us,” or “our”). Contact: support@bntslab.online.

2. Information we collect

• Identifiers and contact information: your name and email address, which you enter when you place an order.
• Payment information: collected and processed by Stripe in its own secure form. We never receive or store your full card number; we receive only the payment result, the amount, the card network, the last four digits, and, if you allow us to save your payment method, an identifier (token) generated by Stripe.
• Order information: products purchased, amounts, dates, payment status, any subscription, and the consents you gave (with date and time).
• Technical information: IP address, browser type, date and time of requests, and a signed technical session cookie, needed to keep the service secure and to prevent abuse and fraud.
• Campaign attribution data: UTM parameters, click identifiers (fbclid, gclid), and the _fbp/_fbc cookies, if present in the link you used to reach the site or in your browser.
• Ad measurement data (Meta Pixel): the pages you visit and the steps you take toward a purchase (such as starting the questionnaire, viewing the offer, finishing the video, opening the payment form, clicking “Pay,” and completing the purchase); the offer’s value, currency, and code; the order number; a browser identifier (_fbp cookie); the ad click identifier (_fbc cookie); and your IP address and browser type. If you enter your email address in the payment form, it is sent to Meta in pseudonymized (hashed) form. We do not send your questionnaire answers to Meta.
• Answers to the check-up (program page): these are not sent to our server or stored by us. They stay only in your browser’s memory and are deleted when you close the tab.

3. How we use your information

Your name and email address are required to complete a purchase; all consents are optional, and declining them does not prevent you from buying.

4. Who we share your information with

We share information only with the following service providers, which process it on our behalf or as independent businesses within the scope of their own services:

• Stripe: payment processing, fraud prevention, sending receipts, and saving your payment method if you authorize it.
• Meta Platforms, Inc.: receives the measurement data that the Meta Pixel collects in your browser and, only if you have given your consent when placing your order, the conversion data we send from our server through the Conversions API. Identifiers (email, name) are sent in pseudonymized (SHA-256 hashed) form, together with IP address, browser, and click identifiers.
• Transactional email provider (Resend): sending confirmation, activation, cancellation, and payment notice emails.
• Hosting provider (Hostinger): website hosting and data storage.
• Professional advisors, banks, and government authorities, when required by law.

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes. The site’s fonts are served from our own domain, so your browser does not contact any third-party service to load them.

5. International data transfers

We and some of our providers (Stripe, Meta, the email provider) may process your information in the United States, in the country where we are established, and in other countries. Wherever your information is processed, we protect it as described in this Privacy Policy and in accordance with applicable law.

6. Data retention

• Order and accounting records: 10 years from the date of purchase, for tax obligations and legal defense.
• Saved payment method (Stripe token): until you withdraw your consent or our relationship ends.
• Attribution data and technical logs: up to 12 months.
• Technical session cookie: 24 hours; technical visit identifier: 90 days.
• Meta measurement cookies (_fbp, _fbc): up to 90 days.

7. Your privacy rights

You can ask us at any time to access, correct, or delete your personal information, or to receive a copy of it, and you can withdraw any consent you have given (this does not affect processing done before you withdrew it). To make a request, email support@bntslab.online. We respond within 30 days. We may need to verify your identity before fulfilling your request, using the email address associated with your purchase.

8. California and other U.S. state privacy rights

This section is our notice at collection and privacy notice under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), and similar laws in other U.S. states (such as Virginia, Colorado, Connecticut, Utah, and Texas).

Categories of personal information we collected in the last 12 months (described in detail in section 2):

• Identifiers: name, email address, IP address, order number, and browser/cookie identifiers.
• Commercial information: products purchased, amounts, subscription status, and refunds.
• Internet or other electronic network activity: pages visited on this site, steps taken toward a purchase, and campaign attribution data.
• Approximate location: general location inferred from your IP address (we do not collect precise geolocation).

Sources: you, your browser or device, and Stripe (payment result). Purposes: those listed in section 3. Retention: as described in section 6. Recipients: the service providers listed in section 4. We do not collect sensitive personal information (such as precise geolocation, government ID, or your full card number) for the purpose of inferring characteristics about you, so the right to limit its use does not apply.

Sale and sharing. We do not sell your personal information for money. However, the identifiers and internet activity that Meta receives for ad measurement (see sections 4 and 9) may be considered “sharing” for cross-context behavioral advertising (or “targeted advertising”) under California and other state laws. We do not knowingly sell or share the personal information of anyone under 16.

Your rights. Depending on your state of residence, you have the right to:

• know and access the personal information we have collected about you, and receive a portable copy of it;
• request that we correct inaccurate personal information;
• request that we delete your personal information (subject to legal exceptions, such as tax records);
• opt out of the sale or sharing of your personal information and of targeted advertising;
• not be discriminated against for exercising any of these rights: we will not deny you service or charge you a different price; and
• appeal our decision if we decline your request, by replying to our response with the subject line “Privacy appeal.”

To exercise these rights, email support@bntslab.online. We will confirm receipt within 10 business days and respond within 30 days, and in any case within the 45 days allowed by law (extendable by another 45 days when reasonably necessary; we will tell you if we do). We verify your identity by matching the email address associated with your purchase. You may use an authorized agent to make a request on your behalf; we may ask the agent for your signed permission and ask you to verify your identity directly with us.

Do Not Sell or Share My Personal Information

To opt out of the sharing of your personal information for targeted advertising, you can do any of the following:

• email support@bntslab.online with the subject line “Do Not Sell or Share My Personal Information.” This also withdraws the ad-measurement consent given at checkout: we will stop sending conversion data about you to Meta (Conversions API) within 15 business days. You do not need to create an account or give us any information other than your email address;
• block third-party cookies and trackers in your browser settings, or use a content blocker, to stop the Meta Pixel from running in your browser (see section 9); and
• adjust the ad preferences in your Facebook or Instagram account to limit how Meta uses this data to show you ads.

9. Cookies and measurement tools

The site uses technical cookies (a signed session cookie and a visit identifier), which are necessary for checkout to work and for security. Stripe’s payment form sets its own technical anti-fraud cookies.

Our purchase pages (questionnaire, offer, payment, and order confirmation) include the Meta Pixel, which sets the _fbp and _fbc cookies in your browser and sends Meta the data described in section 2 so that we can measure and improve our ad campaigns. You can prevent this by blocking third-party cookies and trackers in your browser settings or by using a content blocker. You can also adjust the ad preferences in your Facebook account to limit how this data is used to show you ads. Server-to-server measurement (Conversions API) takes place only if you gave your consent when placing your order.

We do not show a cookie banner: the technical cookies are needed for the site to work, and you can opt out of ad measurement at any time as described in Do Not Sell or Share My Personal Information. Some browsers send “Do Not Track” signals; because there is no common industry standard for them, the site does not change its behavior when it receives one.

10. Automated decision-making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you. Stripe applies automated fraud checks to transactions, as described in its own privacy policy.

11. Children’s privacy

The service is intended only for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time; the “Last updated” date at the top shows the latest version. We will notify customers with an active subscription of material changes by email.