Brazil Privacy Policy (LGPD)
Introduction
DolRise is a global platform built on principles of dignity, trust, and responsible technology. This Brazil Privacy Policy explains how DolRise collects, uses, stores, and protects personal data of individuals located in Brazil, in accordance with the Lei Geral de Proteção de Dados Pessoais (LGPD).
DolRise recognises that personal data is not merely technical information. It represents individual identity, personal context, and autonomy. For this reason, DolRise treats personal data processing as both a legal obligation and an ethical responsibility.
This Brazil Privacy Policy operates alongside the DolRise Global Privacy Policy. Where additional or specific obligations apply under Brazilian law, this policy provides region-specific disclosures and safeguards. In the event of any conflict, this Brazil Privacy Policy shall prevail for users located in Brazil.
Under the LGPD, DolRise acts as a Data Controller, while users are recognised as Data Subjects. This means DolRise processes personal data only for lawful, explicit, and legitimate purposes, and always with respect for user rights.
DolRise may rely on global technical infrastructure to deliver its services, including systems used for security, payments, and service reliability. Where personal data is processed outside Brazil, DolRise applies appropriate safeguards to ensure continued protection and compliance with applicable law.
Certain categories of data, including identity verification (KYC) information and financial details, are processed only when strictly necessary and are protected using strong technical and organisational security measures, including encryption and restricted access.
This policy reflects DolRise’s commitment to transparency, accountability, and respect for the fundamental rights of users under Brazilian data protection law.
Scope & Applicability
This Brazil Privacy Policy applies to individuals located in Brazil whose personal data is processed by DolRise in connection with the provision of its services. Applicability is determined by the location of the user or the relevance of the processing activities to Brazil, and not solely by nationality or citizenship.
This policy covers personal data processed through all interactions with the DolRise platform, including account registration, content sharing, communication features, payments, withdrawals, and any other engagement with DolRise services.
This Brazil Privacy Policy operates in conjunction with the DolRise Global Privacy Policy, which establishes baseline privacy standards applicable worldwide. Where Brazilian law, including the Lei Geral de Proteção de Dados Pessoais (LGPD), provides additional or more specific requirements, those requirements are addressed in this policy.
In the event of any conflict or inconsistency between this Brazil Privacy Policy and the Global Privacy Policy, this policy shall prevail for personal data processing activities relating to individuals located in Brazil.
DolRise may rely on global technical infrastructure, including servers, security systems, and service providers located outside Brazil, to operate and maintain its services. All processing of personal data relating to individuals in Brazil is carried out in accordance with the LGPD, regardless of where the data is processed.
This policy does not apply to data that has been irreversibly anonymised such that individuals can no longer be identified. It also does not apply to data processed exclusively for personal or household purposes, as provided under applicable law.
By using DolRise while located in Brazil, users acknowledge the applicability of this Brazil Privacy Policy in addition to the Global Privacy Policy.
Legal Bases for Processing
DolRise processes personal data relating to individuals located in Brazil only where there is a valid legal basis under the Lei Geral de Proteção de Dados Pessoais (LGPD). All processing activities are limited to what is necessary, proportionate, and consistent with clearly defined purposes.
Consent
DolRise may process personal data based on the data subject’s explicit consent where required by law. Consent is obtained in a clear and informed manner and may be withdrawn at any time, without affecting the lawfulness of processing carried out prior to such withdrawal.
Performance of a Contract
DolRise processes certain personal data as necessary to perform contractual obligations entered into with users. This includes creating and managing accounts, enabling platform features, processing payments, and facilitating withdrawals. Without such processing, DolRise would be unable to provide its services.
Legal Obligations
In some cases, DolRise processes personal data to comply with legal and regulatory obligations, including financial, tax, anti-money laundering, fraud prevention, and identity verification (KYC) requirements imposed by applicable law.
Legitimate Interests
DolRise may process personal data based on its legitimate interests, provided that such interests do not override the fundamental rights and freedoms of the data subject. This may include ensuring platform security, preventing abuse, maintaining service integrity, and improving system reliability in a non-intrusive manner.
Protection of Rights and Legal Claims
Personal data may be processed where necessary to protect DolRise’s legal rights, to establish, exercise, or defend legal claims, or to respond to lawful requests from competent authorities.
Regardless of the legal basis relied upon, DolRise applies the principles of data minimisation, purpose limitation, and security. Personal data is not processed for purposes that are incompatible with those originally disclosed, unless permitted by law.
Your Rights under the LGPD
Under the Lei Geral de Proteção de Dados Pessoais (LGPD), individuals located in Brazil are granted specific rights in relation to their personal data. DolRise respects these rights and provides mechanisms to exercise them in a transparent and timely manner.
Confirmation and Information
You have the right to obtain confirmation as to whether DolRise processes your personal data and to receive clear information regarding the categories of data processed and the purposes of such processing.
Right of Access
You may request access to your personal data held by DolRise, including information on how such data is used and the duration for which it is retained.
Right to Rectification
You have the right to request the correction or updating of personal data that is inaccurate, incomplete, or outdated.
Right to Deletion
You may request the deletion or anonymisation of your personal data where the purpose for processing has been fulfilled, consent has been withdrawn, or there is no longer a legal basis for continued processing, subject to applicable legal obligations.
Right to Restrict Processing
In certain circumstances, you may request the restriction or suspension of specific processing activities, particularly while the accuracy or lawfulness of the processing is under review.
Right to Data Portability
You have the right to request the transfer of your personal data to another service provider, where technically feasible and permitted by law, in a structured and commonly used format.
Right to Object
You may object to the processing of your personal data where such processing is based on DolRise’s legitimate interests, unless compelling legal grounds justify continued processing.
Automated Decision-Making
You have the right to request information about automated processing activities that may affect you and to request a review of decisions made solely on the basis of automated processing, where applicable. DolRise does not rely on automated decision-making that produces significant legal or similarly impactful effects without appropriate safeguards.
Requests to exercise these rights may be submitted through account settings or by contacting DolRise directly. All requests are handled in accordance with applicable law and within reasonable timeframes.
Data Retention & Deletion
DolRise retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to provide its services, or to comply with applicable legal and regulatory obligations under the Lei Geral de Proteção de Dados Pessoais (LGPD).
Retention periods vary depending on the nature of the data and the purpose of processing. DolRise applies the principle of data minimisation and seeks to limit retention to the shortest period compatible with lawful and operational requirements.
Retention Periods
Examples of retention practices include:
- Account data: retained for the duration of an active account and for a limited period thereafter, where necessary for security, compliance, or dispute resolution.
- Financial and transaction data: retained as required by applicable financial, tax, and anti-money laundering laws, even after account closure.
- Security and log data: retained for a limited period to protect against fraud, abuse, and unauthorised access.
- Identity verification (KYC) data: retained only for as long as required by law or regulatory obligations and protected by enhanced security controls.
Deletion and Anonymisation
Personal data is deleted or irreversibly anonymised when the applicable retention period expires, the processing purpose has been fulfilled, or upon a valid request from the data subject, unless continued retention is required by law.
Where immediate deletion is not permitted due to legal obligations or the need to establish, exercise, or defend legal claims, DolRise restricts access to such data and deletes it as soon as the obligation no longer applies.
Data anonymisation removes identifying elements so that individuals can no longer be identified, directly or indirectly. Anonymised data is no longer considered personal data under the LGPD.
Data subjects may request information regarding applicable retention periods or request deletion of their personal data where permitted by law. Requests are handled in accordance with applicable legal requirements and security considerations.
International Data Transfers
DolRise may transfer personal data relating to individuals located in Brazil to countries outside Brazil in order to operate, secure, and maintain its services. Such transfers are conducted in accordance with the Lei Geral de Proteção de Dados Pessoais (LGPD) and do not reduce the level of protection afforded to personal data.
International data transfers are carried out only where there is a lawful basis to do so and where appropriate safeguards are in place to ensure that personal data continues to be protected in a manner consistent with Brazilian data protection law.
Safeguards for Cross-Border Transfers
Depending on the circumstances, DolRise relies on one or more of the following safeguards when transferring personal data outside Brazil:
- Transfers to countries or international organisations that provide an adequate level of data protection.
- Contractual clauses and agreements that impose data protection obligations consistent with the LGPD.
- Internal policies and procedures designed to ensure compliance with applicable data protection standards.
- Technical and organisational security measures, including encryption and access controls.
Service Providers and Partners
DolRise may engage third-party service providers located outside Brazil to support functions such as data storage, security, payments, and infrastructure maintenance. These providers act only on DolRise’s instructions and are contractually required to protect personal data and to use it solely for authorised purposes.
DolRise does not permit third parties to use personal data for their own independent purposes.
User Rights and Transparency
Individuals located in Brazil have the right to obtain information regarding international data transfers, including the nature of the safeguards applied. DolRise provides such information in a manner consistent with applicable law and security considerations.
Regardless of where personal data is processed, DolRise applies the same standards of protection, confidentiality, and user respect.
Contact Information
DolRise is committed to transparency and accountability in the processing of personal data relating to individuals located in Brazil. Users may contact DolRise with questions, requests, or concerns regarding this Brazil Privacy Policy or the processing of their personal data.
At this time, DolRise does not maintain a designated legal representative physically located in Brazil. Until such a representative is appointed, DolRise acts as the data controller and point of contact for matters relating to personal data under the Lei Geral de Proteção de Dados Pessoais (LGPD).
Requests relating to data subject rights, privacy inquiries, or data protection matters may be submitted by email. DolRise will review and respond to requests within reasonable timeframes and in accordance with applicable law.
Contact email: [email protected]
DolRise may update this contact information if a local data protection representative is appointed in Brazil. Any such updates will be reflected in this policy.