Scope of this Policy

Please read this Privacy and Data Protection Policy (“Policy”) carefully to understand our practices for handling your Personal Data. This Policy applies to individuals who interact with Agra's services, such as our customers (“You”). This Policy explains how your Personal Data is collected, used, and shared by Agra (“Agra”, “We”, “Us”). It also informs you how you can access and update your Personal Data, and exercise your rights related to it.This Policy covers our online and offline data collection activities, encompassing Personal Data that We collect through our various channels, including websites, applications, third-party social networks, Customer Service, points of sale, and events. Please note that We may aggregate Personal Data from different sources (website, offline event). To do this, We cross-reference Personal Data that was originally collected by different Agra entities or Agra partners.If you do not provide us with the necessary Personal Data (we will indicate when this is the case, for example, by clarifying this information in our registration forms), we may not be able to provide you with our products and/or services.This Policy may be changed periodically, as indicated at the end of the document.This Policy provides important information about how we handle your Personal Data, such as:WHAT YOU NEED TO KNOW BEFORE READING THIS NOTICESOURCES OF PERSONAL DATAPERSONAL DATA WE COLLECT ABOUT YOU AND HOW WE COLLECT ITHOW DO WE USE YOUR PERSONAL DATA?COOKIES/SIMILAR TECHNOLOGIES, LOG FILES AND WEB BEACONSWITH WHOM WE SHARE YOUR PERSONAL DATASTORAGE OF PERSONAL DATAYOUR RIGHTSHOW WE KEEP YOUR PERSONAL DATA SECUREYOUR CHOICES ABOUT HOW WE USE AND DISCLOSE YOUR PERSONAL DATACHANGES TO OUR POLICYCONTACT

What do you need to know before reading this warning?

Personal data is any information that allows you to be identified. For example, your name, CPF (Brazilian tax identification number), email, phone number, among others.Sensitive Personal Data is personal data relating to racial or ethnic origin, religious beliefs, political opinions, membership in a trade union or religious, philosophical or political organization, data concerning health or sex life, genetic or biometric data, when linked to you.Personal Data Processing means any operation, such as collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, elimination, evaluation or control of information, modification, communication, transfer, dissemination or extraction, performed with personal data.

Sources of Personal Data

To build and maintain our relationship of trust, it is important that you are aware of how we handle your personal data, and especially how and where we collect your data. See below for a list of collection points:Agra Sites. Consumer-facing websites managed by or for Agra, including websites that we operate under our own domains/URLs and commercial pages that we maintain on third-party social networks such as Facebook.Email, text messages, and other electronic messages. Interactions we have with you, such as electronic communications sent by Agra companies via email, for example.Customer Service (SAC). Communications with our customer service department.Offline registration forms. Printed or digital forms, and similar methods, by which we request your Personal Data, such as, for example, regular mail, in-store demonstrations, contests, promotions or events, among others.Interactions with ads. Interactions with our ads (for example, if you interact with one or more of our ads on a third-party website, we may receive information about that interaction).Data “created” by us. During our interactions with you, various other personal data may arise, such as your purchase history on our websites.Data from other sources. Third-party social networks (such as Facebook and Google), market research (if the return is not given in anonymized form), third-party data aggregators, Agra's promotional partners, public sources, and data received when we acquire other companies.

Personal Data we collect about you and how we collect it.

  Depending on how you interact with Agra (online, offline, by phone, etc.), we collect various types of information about you, as described below: Personal contact information. This includes any information you provide to us that allows us to contact you or verify your registration, such as your full name, CPF (Brazilian tax identification number), date of birth, gender, postal address, email, social media details, phone number, etc. Account login information. Any information required to give you access to your specific account profile, such as username, password in unrecoverable format, and/or security question and answer. Information, demographics, and interests. Any information that describes your demographics or behavioral characteristics, such as age or age range, geographic location (e.g., zip code), favorite products, hobbies, interests, and family information (e.g., number of children) or about your lifestyle. Consumer information: information that allows us to understand your consumption profile, such as transactions made on our e-commerce websites. Technical information about your computer/mobile device. Any information about the computer system or other device you use to access one of our websites or applications, such as your IP address, operating system type, and web browser type and version. If you access an Agra website or application using a mobile device, such as a smartphone, the information collected will also include, where permitted, your phone's unique device ID, advertising ID, geographic location, and other similar mobile device data. Website/Communication Usage Information. As you browse and interact with our websites, we use automatic data collection technologies to gather certain information about your actions. This includes information such as which links you click, which pages or content you view and for how long, and other similar information and statistics about your interactions, such as content response time, download errors, and the duration of visits to specific pages. This information is captured through automated technologies such as cookies (browser cookies, Flash cookies) and web beacons, and via third-party tracking. Market research and customer feedback. Information that you voluntarily share with Agra about your experience using our products and services, such as complaints, satisfaction surveys, and requests for improvement. Consumer-generated content. We understand "Content Generated by You" to be any content that you create and share with Agra on third-party social media platforms or through posts on one of our websites or applications, including the use of third-party social networking applications such as Facebook. Examples include photos, videos, personal stories, or other similar content and media. Whenever permitted, we collect and publish consumer-generated content in connection with a variety of activities, including contests and other promotions, website community features, consumer engagement, and third-party social media platforms. Third-party social media information. Any information that you publicly share on a third-party social network or information that is part of your profile on a third-party social network (such as Facebook or Google). Examples include your basic account information (registration details, current city, profile picture, user ID, friends list, etc.) and any other additional information or activities that you allow the third-party social network to share. We collect your third-party social network profile information (or parts thereof) whenever you download an item or interact with an Agra web application on a third-party social network, whenever you use a social networking feature that is integrated into an Agra website (such as Facebook Connect), or whenever you interact with us through a third-party social network. To learn more about how your information from a third-party social network is obtained by Agra or to opt out of sharing this social network information, please visit the specific third-party social network's website. Financial and payment information. Information that Agra processes to fulfill and invoice an order, or that you use to make a purchase, such as your debit or credit card details (cardholder name, card number, and expiration date) or other forms of payment (if available). In any case, Agra, or our payment processing service providers, handles financial and payment information in accordance with applicable laws, regulations, and security standards. Payment card details, such as the security code, are not stored. Calls to Customer Service. Communications with our Customer Service (“CES”) may be recorded or listened to, in accordance with applicable laws, for local operational needs (e.g., for quality or training purposes). Payment card details are not recorded. When required by law, you will be informed of such recording at the beginning of your call. Sensitive Personal Data. We always strive to process the minimum amount of Sensitive Personal Data possible. In some market research or personalized service, we need to collect some health data, such as allergies, intolerances, and dietary restrictions. When it is necessary to process your Sensitive Personal Data, we will inform you of the intended purpose and rely on your prior and express consent when this is a legal requirement. Children's Personal Data: We seek to collect data from children (for Agra, individuals under 13 years of age) only when necessary and with the express consent of a parent or guardian. If you allow the collection of your child's or the child for whom you are responsible's Personal Data, you will be clearly informed about what data will be collected and the purpose of the collection in each specific case. In cases where the collection of the child's personal data is absolutely necessary to obtain parental consent, this data will be used only once and will not be stored by Agra.

How do we use your Personal Data?

We process your Personal Data primarily to enable our business relationship, fulfill certain contractual and legal obligations, and promote our brand.Customer service. We use your Personal Data to provide customer service, including responding to your questions, complaints, and requests. This typically requires the use of your contact and registration Personal Data, as well as information about the product purchased and the reason for your inquiry (e.g., order status, technical problem, product issue or complaint, general inquiry, etc.).Order fulfillment. Agra uses your Personal Data to process, invoice and ship your orders, inform you about the status of your orders, correct addresses, conduct identity verification and other fraud prevention activities.Contests and targeted communications. Agra uses your Personal Data to provide information about products or services (e.g., marketing communications or campaigns or promotions). This may be done through means such as email, advertisements, SMS, telephone calls, and postal mail, to the extent permitted by applicable law. Some of our campaigns and promotions are run on third-party websites and/or social media.Additionally, Agra captures your Personal Data when you interact with third-party social media features, such as "liking" a post, in order to serve you ads and create an interaction.This use of your Personal Data is not mandatory, which means that you can request the deletion of your Personal Data from our database at any time, and we will then stop processing your data for these purposes.Personalization of your preferences (offline and online). Agra uses your Personal Data:(i) to analyze your preferences and habits;(ii) to anticipate your needs, based on our analysis of your profile;(iii) to improve and personalize your experience on our websites and applications;(iv) to ensure that the content of our websites and applications is optimized for you and your computer or device;(v) to send you targeted advertising and content; and(vi) to allow you to participate in interactive features, when you choose to do so.In these cases, we need your login, email address, or screen name so that you can access your site more quickly the next time you visit our website, or so that you can easily retrieve items you previously placed in your shopping cart.Legal reasons or merger/acquisition. If Agra or its assets are acquired by, or merged with, another company, including due to bankruptcy, we will share your Personal Data with our legal successors.We will also disclose your Personal Data to third parties (i) when required by applicable law; (ii) in response to legal proceedings; (iii) in response to a request from a competent legal authority; (iv) to protect our rights, privacy, security or property; or (v) to enforce the terms of any agreement or the terms of our website.Furthermore, your Personal Data may be used to fulfill obligations set forth by law, regulations of government agencies, tax authorities, the Judiciary, such as judgments and agreements, and/or any other competent authority. This processing may include your identification data and personal documents.General Purposes. Agra uses your Personal Data for other general business purposes, such as maintaining your account, conducting internal or market research, and measuring the effectiveness of our advertising campaigns. We reserve the right, if you have Agra accounts, to consolidate these accounts into a single account. We also use your Personal Data for the management and operation of our communications, IT, and security systems.

Cookies/similar technologies, log files and web beacons

A cookie is a small file added to your device or computer by websites you visit. They are widely used to make websites work, or work more efficiently, as well as to provide a personalized browsing experience and to provide information to website owners.We use cookies to improve the usability and functionality of Agra's websites and to better understand how our visitors use our websites, as well as the tools and services offered there. Cookies help us adapt Agra's websites to your personal needs, make them increasingly easier to use, receive customer satisfaction feedback, and communicate with you from other locations on the internet.What categories of cookies are used on Agra's websites?Session cookies are temporary cookies that are deleted when you close your browser. When you restart your browser and return to the website that created the cookie, that website treats you as a new visitor.Example: Performance cookies – These help us understand how visitors interact with our website by providing information about the areas visited, the time spent, and any problems encountered, such as error messages. This helps us improve the performance of our websites.Persistent Cookies. These are cookies that remain in your browser until you manually delete them or until your browser deletes them according to the duration period established by the cookie. These cookies will recognize your return as a visitor.Example: Flash Cookies – may store your preferences, such as volume control or high scores in games, or show content based on what you see on the site to personalize your visit. Our partners may provide some features on the Site, such as promotions and games, and use Flash Cookies to collect and store your information.Necessary Cookies. These are cookies strictly necessary for the operation of an Agra website. They allow you to navigate the website and use our features. It is not possible to object to this processing or to disable these cookies.Cookies that send us information about you. These are cookies placed by us on an Agra website and can only be read by that website. They are known as "first-party" cookies.We also place cookies on Agra ads that appear on third-party websites (such as Facebook). We obtain information through these cookies when you click on or interact with the ad. In this situation, Agra is placing a “third-party” cookie. Agra may use the information obtained through these cookies to send you other ads that are relevant to or of interest to you based on your previous online behavior.Example: targeted/ad cookie – These cookies are used to deliver content through targeted ads that are relevant to you and your interests, or to limit the number of times you see a specific ad. We also use them to measure the effectiveness of our campaigns on Agra or third-party websites. We may share this information with other parties, including our agencies.Cookies that send information to other companies: These are cookies placed on an Agra website by our partner companies (such as Facebook or other advertisers). They may use the data collected by these cookies to anonymously send you targeted advertisements from other websites based on your visit to the Agra website. For example, if you use a social widget, such as Facebook, on an Agra website, it will record your "share" or "like". Facebook (being the company that placed the cookie) will collect this data.Example: Social sharing cookie – The social sharing offered on the website is run by third parties. These third parties may place cookies on your computer when you use social sharing features on the website, or if you have already logged in to them. These cookies help improve your experience on the Site by allowing you to share comments/ratings/pages/indicators and help provide easier access to social networks and online social tools.Other similar technologies. Agra websites also use other tracking technologies, including IP addresses, log files, and web beacons, which also help us tailor our websites to your personal needs.IP Address. An IP address is a number used by computers on the network to identify your computer each time you connect to the internet. We may record IP addresses for the following purposes: (i) troubleshooting technical issues (problems that a product, process, or operating system may have); (ii) maintaining the protection and security of the Site; (iii) better understanding how our sites are used; and (iv) better tailoring content to your needs, depending on the country you are in.Log Files. We (or a third party on our behalf) may collect information in the form of Log Files that store website activity and gather statistics about user browsing habits. In general, these logs are generated anonymously and help us to collect (i) the user's browser type and operating system; (ii) information about the user's session (such as their referring URL, the date, time, and which pages the user visited on our website and how long they stayed on it); and (iii) other browsing or click count data.Web beacons. We use web beacons (or clear GIFs) on Agra websites. Web beacons (also known as “web bugs”) are small pieces of code that allow the delivery of a graphic image on a web page for the purpose of transferring data back to us. We use information from web beacons for a variety of purposes, including information on how a user responds to email campaigns (e.g., the time the email is opened, which link the user clicks from the email), website traffic reports, unique visitor counts, ad and email auditing and reporting, and personalization.Managing your Cookies/Preferences. You can manage and disable cookies in your browser settings. You can even configure your browser to warn you before accepting cookies or simply refuse them. However, remember that some cookies are necessary to enable the use of our websites. You don't need cookies to use or browse most Agra websites, although you probably won't be able to access all of their features if you do. See the "help" button in your browser (such as Internet Explorer, Google Chrome, or Firefox) for instructions on how to manage this. If you use different computers in different locations, you will need to ensure that each browser is set according to your cookie preferences.

Who do we share your data with?

During our relationship, Agra will share your Personal Data with certain entities.Service providers: External companies that we use to help us operate our business. In these cases, only selected employees will be authorized to access your Personal Data on behalf of Agra, for the specific tasks requested of them, based on our instructions. Furthermore, the service providers with whom we share your Personal Data are obligated to keep it confidential and secure.Credit analysis/debt collection agencies: External companies that we use to help us verify your credit status (particularly for orders placed via bank slip) or to collect overdue bank slips.Third-party companies that use Personal Data for their own marketing purposes: We do not license or sell your Personal Data to third-party companies for their own marketing purposes.Third parties using your Personal Data for legal reasons or due to a merger/acquisition: We will share your Personal Data with third parties for legal reasons or in the context of a merger or acquisition.International Transfer of Personal Data: Due to the international nature of our business, we may need to transfer your Personal Data within Agra and to third parties to achieve the purposes set out in this Privacy Policy. For this reason, we may transfer your Personal Data to other countries that may have different data protection laws and requirements than those that apply to Brazil. In such cases, we will take all measures to protect your personal data, such as adopting contractual clauses that impose on third parties with whom we share your Personal Data the same protection measures adopted by Agra.

Storage of Personal Data

We will use your Personal Data for as long as necessary to achieve the purposes for which it was collected or to comply with applicable legal obligations.

Your rights

As a data subject and our client, you have the following rights regarding your personal information:Access, review, and find out if we have processed your Personal Data and request an electronic copy of the information we hold about you;Correct or request the correction of incomplete, inaccurate, or outdated Personal Data;Most of our websites have a dedicated function through which you can review and edit the Personal Data you have provided. Note that we ask our registered customers to verify their identity (such as login, email address, password) before accessing or changing their accounts to prevent unauthorized access to their account.Request the anonymization, blocking, or deletion of unnecessary and excessive Personal Data;Note that, in certain circumstances, we will not be able to delete your Personal Data without also deleting your user account. It may be necessary to retain some of your Personal Data after you request its deletion to satisfy our legal or contractual obligations or to meet business needs.Request the portability of Personal Data to another provider of similar products or services;Request the deletion of Personal Data collected and used based on your consent;To obtain information about the public or private entities with which we share your Personal Data;When the processing activity requires your consent, you may refuse to consent. In this case, we will inform you about the consequences of not carrying out such activity;When the processing activity requires your consent, you may revoke it at any time.To exercise your rights, use the channels provided at the end of this Policy.

How do we keep your Personal Data secure?

We use appropriate measures (described below) to keep your Personal Data confidential and secure. Note, however, that these protections do not apply to information you have chosen to share in public areas, such as third-party social media platforms.People who can access your Personal Data. Your Personal Data will be processed by our employees or authorized agents, provided they need access to such information, depending on the specific purposes for which your Personal Data was collected (e.g., our employees responsible for customer service matters will have access to your consumption records).Measures taken in operational environments. We store your Personal Data in operational environments that use reasonable security measures to prevent unauthorized access. We follow reasonable protocols to protect Personal Data. Unfortunately, the transmission of information over the internet is not completely secure and, although we do our best to protect your Personal Data, we cannot guarantee the security of data during transmission through our websites/applications.Measures We Expect You to Take. Your role is crucial in keeping your Personal Data secure. When creating an online account, please ensure you choose a password that is difficult for others to guess. You are responsible for keeping this password confidential for any use of your account. If you use a shared or public computer, never choose the option to remember your login ID, email address, or password, and make sure you log out of your account whenever you leave the computer. You should also use any privacy settings or controls that We provide on our website or application.We have adopted strict policies and procedures that determine how Personal Data should be handled here at Agra. These rules aim to ensure the proper and lawful processing of your Personal Data.Our security measures are continuously monitored and reviewed in accordance with the latest technological advancements and organizational resources.

Your choices about how we use and disclose your Personal Data.

We do our best to give you choices about the Personal Data you provide to us. The following mechanisms give you the following control over your Personal Data:Cookies/Similar Technologies. You can manage your consent through your browser settings. To refuse some or all cookies/similar technologies, or to alert you when they are being used, see Section 5 above.Advertising, marketing, and promotions. Your Personal Data will be used by Agra to promote its products or services. If you decide that you no longer wish to receive marketing communications from us, you can unsubscribe from our campaigns at any time by following the instructions provided in those communications. To unsubscribe from marketing communications sent by any means, including third-party social networks, you can unsubscribe at any time via the links available in our communications, by logging into our websites/applications or third-party social networks and adjusting your user preferences by not checking the relevant boxes, or by calling our Customer Service. Note that even if you unsubscribe from our marketing communications, you will still receive our administrative communications, such as order or other transaction confirmations, notifications about your account activities (such as account confirmations, password changes, etc.), and other important non-marketing related communications.Personalization (offline and online): If you want your Personal Data to be used by Agra to provide you with a personalized experience or targeted advertising and content, you can indicate this by checking the boxes located on the registration form or by answering questions presented by our Customer Service representatives. If you decide that you no longer want to benefit from this personalization, you can opt out at any time by logging into the websites/applications and adjusting your user preferences in your account profile, by not checking the boxes, or by calling our Customer Service.Targeted advertising. We partner with ad networks and other service providers (“Ad Providers”) that display ads on our behalf and on behalf of other unaffiliated companies across the internet. Some of these ads are tailored to your interests based on information collected from Agra websites or unaffiliated websites over time. You can opt out of receiving this type of advertising and can request that geolocation data be stopped by accessing your device's geolocation access permissions.

Changes to our Policy

If we change the way we handle your Personal Data, we will update this Policy.We reserve the right to make changes to our practices and this Policy at any time. Please check back frequently for any updates or changes.

Contacts

Data subjects who wish to obtain more information about the privacy policy, as well as exercise their rights regarding their personal data, can contact Agra directly through the Contact Us page.You can also contact us at the following address:Agra Agroindustrial de Alimentos S/ARodovia BR 163 Km 114,5, Zona Rural — Rondonópolis/MT, BrazilTelephone: (+55) 66 2101.2200