Privacy Policy

Last updated: April 25, 2026

Johnn Brava ("we," "us," "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what we collect, how we use it, who we share it with, and the rights you have — including specific rights for residents of California under the California Consumer Privacy Act (CCPA / CPRA).

This Site is operated for customers in the United States. Your data may be processed in the United States and Brazil, where data protection laws may differ from your country.

1. Information we collect

When you use the Site or place an order, we may collect:

Identity & contact data: name, email, phone number, billing and shipping addresses.

Order data: items purchased, prices paid, order history, returns and exchanges. We do not see or store full credit card numbers — these are handled directly by our payment processors (Stripe, PayPal).

Account data: if you create an account, your login credentials. Passwords are stored encrypted.

Technical data: IP address, device type, browser type and version, operating system, referring URLs, pages visited, and similar usage data — collected via cookies and analytics tools.

Communications: emails, chat messages, and support tickets you send us.

Marketing preferences: opt-in/opt-out status for marketing emails and SMS.

2. How we use your information

We use your data to: - Process and ship your orders, and provide customer support - Send order confirmations, shipping updates, and transactional notifications - Send marketing emails or SMS, only if you have opted in (you can unsubscribe at any time) - Operate, maintain, and improve the Site and our products - Detect, prevent, and respond to fraud, security incidents, and abuse - Comply with legal obligations (tax, accounting, regulatory)

3. Cookies & tracking technologies

We use cookies and similar technologies for: - Essential functionality — cart, checkout, login - Analytics — Google Analytics 4 (GA4), to understand how visitors use the Site - Advertising — Meta (Facebook/Instagram) Pixel and Google Ads, for targeted advertising and retargeting - Marketing automation — Klaviyo, for email and SMS

You can manage cookie preferences via the cookie banner on first visit, or by adjusting your browser settings. Disabling certain cookies may affect Site functionality.

4. Who we share your data with

We share your data only with trusted service providers that help us operate the Site and fulfill your orders. We do not sell your personal information.

Categories of recipients: - Payment processors: Stripe, PayPal - Shipping carriers: FedEx - Email & marketing platforms: Klaviyo (for email and SMS) - Analytics & advertising: Google (GA4, Ads), Meta (Facebook, Instagram) - Hosting & infrastructure: Ecwid

We may also disclose your data when required by law, court order, or to protect our legal rights.

5. Your rights — California residents (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose
• Access a copy of your personal information in a portable format
• Correct inaccurate personal information
• Delete your personal information, subject to certain legal exceptions (e.g., records we must keep for tax purposes)
• Opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising. We do not sell your data, but you may request that we stop sharing it with advertising partners. To opt out, email privacy@johnnbrava.com with the subject "Do Not Sell or Share My Personal Information."
• Limit the use of sensitive personal information to what is necessary
• Non-discrimination: we will not deny you service or charge a different price for exercising your rights

To exercise any of these rights, email privacy@johnnbrava.com with your request and a way to verify your identity. We will respond within 45 days, with one possible 45-day extension.

You may also designate an authorized agent to make a request on your behalf, with proof of authorization.

6. Your rights — all customers

Regardless of where you live, you can: - Request a copy of the personal data we hold about you - Ask us to correct or delete your data - Unsubscribe from marketing emails using the link in any marketing email - Reply STOP to any marketing SMS to opt out

7. Data retention

We retain your data only as long as needed for the purposes described, or as required by law. Order and tax records are typically kept for 7 years to comply with US and Brazilian tax obligations.

8. Data security

We implement reasonable technical and organizational measures to protect your data, including: - SSL/TLS encryption on the Site and at checkout - PCI-DSS compliant payment processing via Stripe and PayPal - Access controls limiting employee and provider access to your data - Regular security reviews

No system is 100% secure, but we take reasonable precautions. If a data breach occurs that may affect you, we will notify you in accordance with applicable law.

9. International data transfers

Because we operate from Brazil and serve US customers, your data may be transferred to and processed in either country. We use appropriate safeguards (such as data processing agreements) where required.

10. Children's privacy

This Site is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately at privacy@johnnbrava.com and we will delete it.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be communicated via email (if we have your address) or via a prominent notice on the Site.

12. Contact

Questions, complaints, or requests related to your data?

Email: privacy@johnnbrava.com Phone: +1 (904) 934-5787 Mail: Johnn Brava — Rua Antonio Eliziario Mendes, 406 — Vila Flor, Capivari de Baixo — SC, 88745-000, Brazil