Privacy Policy

The controller of your personal data — the entity that decides how and why it is processed — is LETSFAR BRAZIL DISTRIBUIDORA LTDA (trading as ID COCO), registered under CNPJ No. 66.094.839/0001-44, with its head office at Caminho da Fonte, nº 4, Galpão, Gleba E, Camaçari/BA, CEP 42.808-111.

Contact for privacy matters: sac@idcoco.com.

IDCoco is a dehydrated coconut water product, manufactured in Brazil and sold internationally, including in Europe and the United States. For this reason, we process your data in compliance with the LGPD (Brazil) and, where applicable, the GDPR (European Union).

The IDCoco website is essentially institutional. We collect personal data at a single point: the contact form.

When you fill out the contact form, we collect your name, email, the department you select, and the message you write. We do not collect this data by any other means on the site, we do not request sensitive data, we do not create account registrations for visitors, and we do not request payment data.

Technical operating data: like any website, our hosting infrastructure may automatically log basic technical data (for example, IP address and access logs) for as long as necessary for the security and operation of the service. These logs are not used to identify you individually or for marketing.

Restricted area: the site maintains an internal area, accessible only to authorized users and protected by login, which is not accessible to visitors and handles data relating to the company's internal operations.

We use the contact form data exclusively to receive, forward, and respond to your message, directing it to the department you selected. We do not use this data for marketing, we do not build profiles, and we do not include it in mailing lists.

Legal basis: under the LGPD, the processing is based on fulfilling the data subject's request and on the legitimate interest of responding to those who contact us. Under the GDPR, it is based on legitimate interest (Art. 6(1)(f)) and, where applicable, on measures taken at the data subject's request (Art. 6(1)(b)).

In other words: you do not need to give a separate formal consent — by sending us a message, the processing exists to fulfill what you requested, and you may object to it at any time.

We use your data only to respond to your inquiry. We do not sell, rent, or share your personal data with third parties for commercial or marketing purposes.

To operate the site and transmit your message, we rely on service providers that process data on our behalf and under our instructions: Vercel (site hosting and technical logs) and GoDaddy (email service used to transmit the form message to the department's inbox). These providers access the data only to the extent necessary to provide the service and are subject to confidentiality and data protection obligations.

We may also disclose data when required by law or by order of a competent authority.

Because we use providers with infrastructure outside Brazil (for example, servers in the United States and/or the European Union), your data may be processed outside your country of residence.

Where there is an international transfer, we seek to ensure that the data remains protected by appropriate safeguards. Our providers operate under Data Processing Agreements (data processing agreements) that incorporate Standard Contractual Clauses (standard contractual clauses) for international transfers.

We keep contact form messages only for as long as necessary to handle and respond to your request. Messages are retained for up to 24 (twenty-four) months and, after that period, are deleted or anonymized, except where retention for a longer period is required by law or necessary for the regular exercise of rights.

You have rights over your personal data. Under the LGPD (Art. 18) and the GDPR (Arts. 15 to 22), you may request, as applicable:

To exercise any of these rights, write to sac@idcoco.com. We will respond within the timeframes provided by applicable law and may need to confirm your identity before fulfilling the request, in order to protect your data.

For questions about data protection and privacy, you may contact our Data Protection Officer, Fabio Reis, at sac@idcoco.com.

Currently, the IDCoco institutional website does not use tracking, advertising, or marketing cookies, nor third-party analytics tools. We do not build browsing profiles and we do not share browsing data with ad networks.

Only cookies strictly necessary for the operation of the site may be used. The restricted area uses an authentication session cookie, essential to keep the login secure for those who have access; it is not used to track visitors to the public site.

Because we do not use non-essential cookies, we do not display a cookie consent banner. Should this change in the future, we will update this Policy and adopt the consent mechanisms required by law.

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legislation. We will publish the revised version on this same page, with the effective date adjusted. We recommend reviewing this page periodically.

For any questions about this Policy or about the processing of your data, contact our privacy channel at sac@idcoco.com.

Controller: LETSFAR BRAZIL DISTRIBUIDORA LTDA — Caminho da Fonte, nº 4, Galpão, Gleba E, Camaçari/BA, CEP 42.808-111.