This policy explains what happens to your personal data when you visit www.striort.com (the “Site”), create an account, buy a product or register for a course. It is written to be read, not to be survived — if anything is unclear, ask us.
1. WHO IS RESPONSIBLE
The controller of your data is Bothanica Mineral, owner of the STRIORT® brand, established in Brazil. Contact: internacional@bothanicamineral.com.br
2. WHAT WE COLLECT
2.1 – When you create an account: your name, your email address, the country you are in, your professional field, and a password, which we store only as an irreversible hash — we cannot read it. The country and the professional field tell us which products may be shown and shipped to you.
2.2 – When you place an order: your name, delivery address, country, telephone number, the products and amounts ordered, and, if you choose to give it, a VAT/IVA or tax identification number for customs.
2.3 – When you pay: our payment providers tell us that the payment succeeded, the amount, and the billing country and address. We never see or store your card number, expiry date or security code — those are entered on the provider's own page and never reach our systems.
2.4 – When you register for a course: your name, email, telephone and professional details you provide in the form.
2.5 – Technical data: our hosting provider records the usual server information for every request — IP address, browser, date and time — to keep the Site running and to defend it from abuse.
3. WHAT WE USE IT FOR, AND ON WHAT BASIS
3.1 – To perform the contract with you — creating your account, taking payment, shipping your order, sending order and tracking emails, and handling returns. Without this data we cannot sell to you.
3.2 – To comply with legal obligations — keeping commercial and tax records, and providing customs data required for international shipping.
3.3 – For our legitimate interests — keeping the Site secure, preventing fraud and abuse, and understanding which products sell, in a way that does not override your rights.
3.4 – With your consent — marketing emails, where you have asked for them. You can withdraw consent at any time, using the link in any such message or by writing to us; withdrawal does not affect what was lawful before.
3.5 – We do not sell your personal data, and we do not use it to take automated decisions that produce legal effects for you.
4. WHO ELSE SEES IT
We share your data only with the service providers who make the Site work, and only with what each one needs:
Supabase — the database and login system that
holds your account and your orders.
Vercel — hosting for the Site and for the server
functions that process orders.
Stripe and PayPal — payment
processing. They receive what they need to take the payment and are
controllers in their own right for it.
Resend — delivery of our transactional emails
(order, receipt, tracking). It receives your email address and the content
of the message.
Carriers (FedEx, DHL, UPS, USPS, Correios and others)
— your name, address, telephone and any tax identification number, so
they can deliver and clear customs.
We also disclose data where we are legally required to, or to establish or defend a legal claim.
5. WHERE YOUR DATA GOES
5.1 – We are established in Brazil, and the providers listed above operate largely in the United States. If you are in the European Economic Area, the United Kingdom or elsewhere, your data is therefore transferred outside your country.
5.2 – Those transfers rely on the safeguards each provider offers, including the European Commission's Standard Contractual Clauses where applicable. You may ask us for details.
6. HOW LONG WE KEEP IT
6.1 – Order records: for as long as commercial and tax law requires us to keep them — typically five years from the transaction. We keep the order even if you close your account, because the obligation is ours, not optional.
6.2 – Your account: until you ask us to delete it.
6.3 – Course registrations and marketing contacts: until you withdraw consent or ask to be removed.
6.4 – Server logs: for a short period, set by our hosting provider, for security and diagnostics.
7. YOUR RIGHTS
Wherever you live, you can ask us to:
a) confirm whether we hold data about you, and give you a
copy;
b) correct anything inaccurate or incomplete;
c) delete your data, where we are not required to keep it;
d) restrict or object to a particular use,
including profiling for marketing;
e) receive your data in a portable, machine-readable form,
or have it sent to another provider;
f) withdraw consent at any time, where consent is the basis;
g) know with whom we have shared it.
These rights are given by the EU and UK GDPR, by the Brazilian LGPD (Federal Law 13.709/2018) and by comparable laws elsewhere, including the California Consumer Privacy Act. Write to internacional@bothanicamineral.com.br and we answer within 30 days. We may need to verify your identity first — that protects you.
If you are not satisfied, you may complain to your data protection authority: in the EU, the supervisory authority of your country; in the UK, the Information Commissioner's Office; in Brazil, the ANPD.
8. COOKIES AND WHAT YOUR BROWSER STORES
8.1 – We do not use advertising or tracking cookies, and there is nothing to consent to.
8.2 – The Site stores a few things in your own browser, which never leave your device except to talk to us: your shopping cart, the country you selected for shipping, a coupon you typed, and your login session. Clearing your browser data removes all of them.
8.3 – Some pages load fonts from Google Fonts and a software library from jsDelivr. Your browser contacts those services directly, and they can see your IP address as part of that request. We receive nothing from them.
8.4 – If we introduce analytics or advertising measurement in future, we will update this policy and ask for your consent first where the law requires it.
9. CHILDREN
The Site is not intended for people under 18, and we do not knowingly collect their data. If you believe a child has given us data, tell us and we will delete it.
10. SECURITY
10.1 – Traffic to the Site is encrypted in transit. Passwords are stored as irreversible hashes. Access to order data is restricted at the database itself, not only in the interface, and administrative access is limited to named accounts.
10.2 – No system is perfectly secure. If a breach occurs that is likely to affect your rights, we will notify you and the competent authority as the law requires.
11. CHANGES
We may update this policy by publishing a new version on this page with the date of the update. If a change is significant, we will tell account holders by email rather than rely on you noticing.
12. CONTACT
Bothanica Mineral
· Email: internacional@bothanicamineral.com.br
· WhatsApp: +55 11 97437-9154