01. Who We Are
The controller of the personal data described in this policy is Riverlalpha Serviços de Bicicletas Ltda., located at Rua Vidal Ramos, 180, Centro, Florianópolis - SC, 88010-320, Brasil. Riverlalpha is a family-run bike shop. When responding to a request received through the site or managing its operations, the company determines the purposes and means of the data processing described here.
You can contact us at contato@riverlalpha.site or +55 (48) 99172-6048. You can also use these channels for requests concerning your personal data. If your message concerns a bike, the information you provide will be used to understand your request and reply to you, within the limits explained in the following sections.
02. Data We Process
When you use the contact form, we process your name, email address and message. We may also process your phone number, if you choose to provide it, and any information about your bike that you decide to include. If you email or call us, we process the information needed to continue the conversation and respond to the matter raised. Please do not include sensitive data, such as health information, beliefs or identification documents, in your message.
Accessing the site may generate technical records, or logs, containing your IP address, browser and device information, the date and time of the request, and the pages requested. We also process a record of your cookie choices, including the categories you accepted or rejected, so we can respect your decision. This technical data is not an assessment of your bike's condition and does not replace a conversation with the shop.
The form does not request payment details, identification document numbers, precise location or sensitive information. You do not need to create an account to browse the site. If you voluntarily include information that is not needed to respond, we may choose not to use it or may delete it, subject to applicable legal obligations.
03. Purposes and Legal Bases
The LGPD requires a legal basis for each purpose of processing. We use the information in your message to answer questions, discuss an assessment and take steps you request before any potential service. When those steps relate to arranging a service at your request, the legal basis is Article 7, item V, of the LGPD: performance of a contract or preliminary procedures related to a contract. Sending a message does not, by itself, book a visit or confirm a quote.
We may retain correspondence needed to comply with a legal or regulatory obligation, where one exists, under Article 7, item II. We may also retain records relevant to the regular exercise of rights in judicial, administrative or arbitration proceedings, under Article 7, item VI. These bases do not authorize indiscriminate use of every message: we assess whether the data is needed for the specific purpose.
Technical logs are used to keep the site running, investigate faults and protect its operation against unauthorized access. Where processing is not required by a specific legal obligation, we rely on the legitimate interest provided for in Article 7, item IX, of the LGPD, considering the need for these records and the rights of site visitors. Mandatory retention of access records, where applicable, also follows Brazil's Internet Civil Framework, Law No. 12,965/2014.
Optional analytics or marketing cookies depend on your choice: their legal basis is consent under Article 7, item I, of the LGPD. You can reject them and continue using the site. We store your choice so we can apply it on future visits; recording this preference is necessary to respect your decision. The Cookie Policy explains the categories and how to change your preferences.
04. Recipients and Processors
Access to data is limited to people who need it to manage the site and respond to requests. Service providers may process information on our behalf, particularly the hosting provider, which processes requests and logs, and the email provider, which transmits and stores correspondence. These providers act according to their technical roles and the instructions applicable to the service; they must not use the data they receive for their own purposes incompatible with those roles.
We may share data with public authorities when there is a valid legal requirement or when necessary for the regular exercise of rights. We do not sell personal data. Nor do we make messages sent to the shop available to third parties for commercial lists. If a request requires another recipient's involvement, we will limit sharing to what is necessary and observe the corresponding legal basis.
05. International Transfers
The technical services used to host the site or deliver email may involve infrastructure, support teams or storage outside Brazil. An international transfer may therefore occur even when you contact a bike shop in Florianópolis. These providers' locations and operations may change; this policy does not claim that all data remains in Brazil or that every message is sent abroad.
Any transfer must meet one of the conditions in Article 33 of the LGPD and the applicable rules of the Brazilian National Data Protection Authority (ANPD). Depending on the circumstances, this may include standard contractual clauses approved by the ANPD under Resolution CD/ANPD No. 19/2024, or another legally permitted safeguard. We limit transferred data to what is needed to provide the service and consider the protection requirements applicable to the recipient.
06. Retention Periods
We do not keep data indefinitely simply because you contacted us. The periods below serve the purpose of each category. At the end of each period, data is deleted or de-identified unless a legal obligation, a valid request or the regular exercise of rights requires further retention. In that case, we restrict its use to the purpose that justifies keeping it.
- Messages and Contact Details
- Up to 24 months after the last interaction about the request, to follow up on the service and clarify the history of the conversation.
- Technical Access Logs
- Up to 6 months, except where a longer period is required by law or a valid order.
- Record of Cookie Preferences
- Up to 5 years after the most recent choice, to demonstrate and respect the recorded preference.
- Requests Concerning Personal Data Rights
- Up to 5 years after the request is completed, to document our response and compliance with the related obligations.
A conversation that leads to a service may become part of records needed to meet legal obligations or defend rights, with their own retention periods. If you request deletion before one of the periods above ends, we will assess the request and tell you if there is a legal reason to retain some of the data.
07. Your Rights
Under Article 18 of the LGPD, you can ask us to confirm whether we process your data and request access to it. You can request correction of incomplete, inaccurate or outdated information. You can also request the anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law, as well as data portability, subject to applicable rules and trade and industrial secrets.
You can request information about the public and private entities with which we share your data, whether you can withhold consent and the consequences of doing so. Where processing is based on consent, you can withdraw it and request deletion of data processed on that basis, subject to legal grounds for retention. You can also object to processing based on another legal ground if it breaches the LGPD, and request a review of decisions made solely through automated processing that affect your interests, should any occur.
To exercise these rights, email contato@riverlalpha.site and describe your request. We may ask for proportionate information to verify your identity before disclosing or changing data, to prevent someone else from accessing your message. Confirmation of processing and access follow Article 19 of the LGPD: a simplified response immediately, where possible, or a complete statement within 15 days of the request. For other requests, we will respond within the applicable legal deadlines and let you know if further review is needed or there is a justified reason we cannot comply.
If you believe the processing violates the LGPD, you may also file a petition with the Brazilian National Data Protection Authority (ANPD), without affecting any other remedies available to you. Contacting us first may help resolve your question, but it does not take away that right.
08. Security Measures
We use technical and organizational measures appropriate to the data processed and the risks involved in operating the site. These include limiting access to messages and systems to those who need it, managing access permissions, keeping technical resources up to date, and monitoring for faults or unusual access. When working with technical service providers, we consider the protection of the data involved in the service.
No internet-connected system can eliminate the risk of an incident entirely. If a security incident could pose a significant risk or cause significant harm to data subjects, we will assess its consequences and provide the notifications required by the LGPD and ANPD rules. To limit the exposure of your information, please do not include sensitive data, passwords, or documents in your initial message about the bicycle.
09. Children’s and Adolescents’ Data
This site provides information about the workshop and a general contact channel; it is not specifically directed at children. We do not ask for a child’s age or data in the form. If a request involves a child’s or adolescent’s data, we will act in their best interests and follow Article 14 of the LGPD, including applicable consent and transparency requirements.
Parents or guardians who discover that a child’s data was submitted without the necessary conditions being met may write to us through the contact channel listed in this policy. We will review the situation, restrict use of the data as necessary, and take appropriate action, including deletion where there is no basis for retaining the information.
11. Changes to This Policy
We may update this policy to reflect changes to how the site works, the services used to operate it, or legal requirements. The date shown at the beginning identifies the current version. Before making a change that requires new consent, we will present the relevant choice rather than treat an earlier preference as authorization for a different purpose.
We recommend reviewing this page when you contact the workshop again. Updates do not retroactively change rights relating to processing that has already taken place. If you have a question about a version of this policy or how your data is processed, use the contact channels below.
12. Contact
For questions about this policy, requests concerning personal data, or information about a message sent to the workshop, contact Riverlalpha Serviços de Bicicletas Ltda. Tell us what your request concerns and how we can respond. Please do not send documents or sensitive data before we explain whether they are needed to handle your request.
Riverlalpha Serviços de Bicicletas Ltda.Rua Vidal Ramos, 180, Centro, Florianópolis - SC, 88010-320, Brazil
contato@riverlalpha.site
+55 (48) 99172-6048