Privacy Policy.

01 Data Controller

The controller responsible for processing the personal data collected on this website is:

02 Data Protection Officer (DPO)

To exercise your rights as a personal data subject, contact RWB's Data Protection Officer:

03 Data Collected

We collect the following categories of personal data when you fill out forms or browse our website:

• [IDENTIFICATION] Farm name, CNPJ (when provided), state (UF).
• [CONTACT] E-mail and phone for sending the diagnosis and commercial communication.
• [OPERATIONAL] Total area in hectares and number of cattle heads · used exclusively to calculate the FVH Diagnosis.
• [BROWSING] IP address, browser type, operating system, pages visited, date and time of access, cookies.

04 Purposes and Legal Basis

The data is processed for the purposes below, with the corresponding legal basis under art. 7 of the LGPD:

• Delivery of the FVH Diagnosis service · consent (art. 7, I) and execution of preliminary procedures related to a contract (art. 7, V).
• Commercial communication and presentation of investment opportunities · consent (art. 7, I).
• Security, fraud prevention and compliance with legal obligations · legal obligation (art. 7, II) and legitimate interest (art. 7, IX).
• Site improvement and usage analysis · legitimate interest (art. 7, IX).

05 Sharing

RWB does not sell personal data. Data may be shared with:

• Contracted operators · hosting providers, e-mail delivery (e.g., Resend, SendGrid), PDF generation, CRM, analytics · all bound by contract to minimum security and confidentiality standards.
• Public authorities · upon legal requisition, court order or compliance with regulatory obligation.
• Third-party partners in a specific operation · only upon new specific consent from the data subject.

06 International Transfer

Some operators (hosting, analytics, transactional e-mail) may process data outside Brazil. In such cases, RWB requires the adoption of measures compatible with the LGPD (standard contractual clauses, international certifications, confidentiality guarantees) to preserve the rights of the data subject.

07 Retention

Personal data is retained for the period necessary to fulfill the stated purposes, observing legal retention periods (for example, tax records and labor obligations, art. 195 of the CTN — Brazilian National Tax Code, and art. 10 of Decree nº 8.771/2016). Once the purpose is exhausted, the data is deleted or anonymized, except for the cases listed in art. 16 of the LGPD.

08 Data Subject Rights

Under art. 18 of the LGPD, you may, at any time, request from the DPO:

• Confirmation of the existence of processing;
• Access to the data;
• Correction of incomplete, inaccurate or outdated data;
• Anonymization, blocking or deletion of unnecessary, excessive or non-compliant data;
• Portability to another supplier;
• Deletion of data processed under consent;
• Information about sharing;
• Information about the possibility of not granting consent;
• Revocation of consent.

Requests will be addressed within 15 business days from receipt.

09 Cookies

We use cookies strictly necessary for the website to function and, with your consent, analytical cookies to measure usage and performance. On first access, we display a banner with the options Accept or Reject. Your choice can be reviewed at any time by clearing the browser's cookies or contacting the DPO.

10 Security

We adopt technical and organizational measures compatible with the state of the art to protect personal data against unauthorized access, destruction, loss, alteration, communication or improper diffusion · including encryption in transit (HTTPS/TLS 1.2+), role-based access control and audit logs.

11 Changes

This Policy may be updated to reflect regulatory, operational or product changes. The last update date appears at the top. Substantial changes will be communicated by e-mail or highlighted on the website.

12 Jurisdiction and Contact

For questions about this Policy, contact the DPO. Any disputes will be settled in the District of São Paulo / SP, with express waiver of any other jurisdiction, however privileged. Data subjects may also petition the Brazilian National Data Protection Authority (ANPD · Autoridade Nacional de Proteção de Dados).