Privacy Policy

1. General Information

Posto Sao Pedro Ltda, registered under Tax ID No. 16.580.169/0001-06, headquartered at R. Niquelina, 918, Santa Efigenia, Belo Horizonte - MG, ZIP 30260-100, is committed to protecting the personal data of its customers and website visitors, in compliance with the Brazilian General Data Protection Law (LGPD - Law No. 13.709/2018).

This Privacy Policy describes how we collect, use, store, and protect your personal information in the context of fuel retail and gas station services.

2. Data Collected

We may collect the following information:

• Identification data: Full name, Tax ID (CPF), driver's license
• Contact data: Email, phone number
• Vehicle data: License plate, vehicle information
• Purchase data: Fuel purchases, product orders, purchase history
• Payment data: Information necessary for transaction processing
• Loyalty program data: Membership information (if applicable)
• Browsing data: IP address, browser type, pages visited
• Video surveillance: Security camera footage

3. Purpose of Data Processing

The collected data is used to:

• Provide fuel retail services
• Process fuel and product sales
• Process payments
• Issue invoices and receipts
• Manage loyalty programs (if applicable)
• Provide customer service
• Send promotions and offers (with consent)
• Ensure security through video surveillance
• Comply with ANP (National Agency of Petroleum) regulations
• Comply with legal and fiscal obligations
• Improve our services

4. Legal Basis for Processing

Data processing is performed based on:

• Consent: When you expressly authorize the use of your data
• Contract execution: To fulfill fuel and product sales
• Legal obligation: To comply with ANP, fiscal, and safety obligations
• Legitimate interest: For security surveillance and business relationship management

5. Data Sharing

Posto São Pedro does not sell or commercialize personal data. We may share data only with:

• Fuel suppliers: For fuel procurement and supply chain coordination
• Payment processors: For transaction processing
• Service providers: Station management systems, accounting
• ANP: To comply with petroleum regulatory obligations
• Tax authorities: To comply with tax obligations
• Law enforcement: For security purposes (video surveillance when legally required)
• Consumer protection agencies: To comply with CDC obligations (when applicable)
• Legal authorities: When required by law or court order

6. Data Security

We implement technical and organizational measures to protect your data:

• Encryption of payment and personal data
• Access controls to customer information
• Secure station management systems
• Video surveillance with restricted access
• Security system monitoring
• Regular backups and secure storage
• Employee training on data protection
• Periodic security audits

7. Your Rights as Data Subject

Under LGPD, you have the following rights:

• Confirmation and access: Confirm the existence of processing and access your data
• Correction: Request correction of incomplete, inaccurate, or outdated data
• Anonymization, blocking, or deletion: Request removal of unnecessary data
• Portability: Request data portability
• Deletion: Request deletion of data processed with consent
• Information: Obtain information about data sharing
• Revocation: Revoke consent at any time
• Opposition: Object to the processing performed

8. Cookies and Similar Technologies

We use cookies to improve your browsing experience. You can configure your browser to refuse cookies.

9. Data Retention

We retain your data for the time necessary to:

• Fulfill the purposes described in this policy
• Duration of customer relationship
• Fuel sales records: for ANP regulatory compliance
• Video surveillance: typically 30-90 days for security purposes
• Legal prescription periods (generally 5 years for fiscal purposes)
• ANP regulatory obligations
• Exercise of legal rights

After these periods, data will be securely deleted or anonymized.

10. International Data Transfer

Your data is stored and processed in Brazil. We do not perform international data transfers.

11. Minors

Our services are intended for individuals over 18 years of age with driver's licenses. We do not intentionally collect data from minors.

12. Changes to This Policy

This Policy may be updated periodically. Significant changes will be communicated by email or website notice.

13. Data Protection Officer (DPO)

We have appointed a Data Protection Officer responsible for ensuring LGPD compliance.

14. Contact

To exercise your rights or clarify questions:

We will respond to your requests within 15 calendar days, extendable by another 15 days with justification.

15. Applicable Law and Jurisdiction

This Policy is governed by the laws of the Federative Republic of Brazil, especially Law No. 13.709/2018 (LGPD), ANP regulations, and Consumer Protection Code (CDC). The jurisdiction of Belo Horizonte/MG is elected to resolve any disputes.

Last updated: December 2025