Privacy Policy

This Privacy Policy describes how Mystique collects, uses, stores, and shares your personal data when you visit our website, make a purchase, contact us, or use any of our services. By using the website, you consent to the practices described below, in compliance with the General Data Protection Law (Law No. 13,709/2018 – LGPD).

When you visit the website, we automatically collect certain information about your device (such as IP address, browser, time zone, and installed cookies) and about your browsing habits on the pages you access. When you place an order, we may collect identification and contact information (name, CPF, email, phone number), shipping and billing addresses, cart items, amounts, and purchase history. Payments are processed by intermediaries, so we do not store your full card number. If you contact us via email, chat, or social media, we collect the content of the messages and attachments necessary to provide support.

We use this data to operate the website and fulfill our contractual obligations with you: process orders, payments, and deliveries; prevent fraud and maintain security; provide support and respond to requests; improve the browsing experience through usage and performance analysis; and, when we have your consent or legitimate interest, send marketing communications with news, offers, and information about our products. You can unsubscribe from these messages at any time by using the unsubscribe links provided in them or by contacting us.

We may share data with third parties strictly necessary for the operation of our business, always under contracts and security measures: e-commerce and hosting platforms, payment and anti-fraud systems, shipping and logistics providers, customer service and marketing tools, and audience analytics providers. We may also share information with public authorities when legally required. Some of these providers may be located outside Brazil; in these cases, we adopt international transfer mechanisms that are compliant with the LGPD.

We use cookies and similar technologies to ensure the website functions properly (for example, remembering items in your shopping cart and maintaining your session), to measure audience and improve content, and, when enabled, to personalize ads. You can manage cookies through the preferences banner displayed upon first access and through your browser settings. Disabling strictly necessary cookies may compromise website functionality.

You, as the holder of personal data, have rights provided for in the LGPD, including: confirmation of the existence of processing, access, correction of incomplete, inaccurate or outdated data, anonymization, blocking or deletion of unnecessary data, portability, information about sharing, opposition to processing carried out based on legitimate interest and revocation of consent when this is the legal basis used.

We adopt technical and administrative security measures to protect your data against unauthorized access, misuse, alteration, or destruction. Despite our efforts, no system is completely secure; therefore, we recommend that you use strong passwords, do not share them with third parties, and always log out after using public or shared devices.

We will retain your personal data only for as long as necessary to fulfill the purposes described in this Policy, including compliance with legal, regulatory, and tax obligations, dispute resolution, and the performance of our contracts. After this period, we will delete or anonymize the data, as applicable.

We may update this Privacy Policy periodically to reflect changes in our processes, legal requirements, or website functionality. Whenever there are material changes, we will post the new version on this page with the updated effective date. We recommend that you review this content frequently.