Privacy Policy

GAIA FITNESS PRIVACY POLICY

LAST UPDATED: May 05, 2026
 
Gaia Fitness Indústria e Comércio de Móveis e Equipamentos Fitness LTDA, a private legal entity, with headquarters at Rua Minas Gerais, 2860, Nova Brasília - Joinville - SC, Brazil, registered under CNPJ/MF nº 19.856.842/0001-78 ("Gaia" or "We"), takes your privacy seriously and is committed to the security and protection of data of all its customers, partners, suppliers, and users ("Users" or "You") of the website "gaiapole.lojavirtualnuvem.com.br" and any other website, store, or application operated by Gaia (hereinafter collectively referred to as the "Platform").
This Privacy Policy ("Policy") aims to inform You about how Gaia collects, uses, stores, shares, and protects the information collected during your visits to our Platform and in communications exchanged with You ("Communications"). This Policy applies only to information collected through the Platform.
BY ACCESSING THE PLATFORM, SENDING COMMUNICATIONS, OR PROVIDING ANY TYPE OF PERSONAL DATA, YOU DECLARE THAT YOU ARE AWARE OF AND AGREE TO THE TERMS SET FORTH HEREIN AND TO THIS PRIVACY POLICY, WHICH DESCRIBES THE PURPOSES AND METHODS OF PROCESSING YOUR PERSONAL DATA THAT YOU MAKE AVAILABLE ON THE PLATFORM.
This Policy provides an overview of our privacy practices and the choices You can make, as well as the rights You can exercise in relation to the Personal Data processed by Us. If You have any questions about the use of Personal Data, please contact our Data Protection Officer (DPO) via email at [email protected].
This Privacy Policy does not apply to any third-party applications, products, services, websites, or social media features that may be offered or accessed through the Platform. Accessing these links will cause You to leave the Platform and may result in the collection or sharing of information about You by third parties. We do not control, endorse, or make any representations about these third-party websites or their privacy practices, which may differ from ours. We recommend that You review the privacy policy of any website You interact with before allowing the collection and use of your Personal Data.
If You send Us Personal Data relating to other individuals, You declare that You have the authority to do so and that You have obtained the necessary consent to authorize the use of such information under the terms of this Policy.

1. Definitions

For the purposes of this Privacy Policy:
  • "Personal Data": means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. This includes, for example, name, CPF (Brazilian individual taxpayer registry number), date of birth, IP address, among others.
  • "Sensitive Personal Data": means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation.
  • "Processing of Personal Data": means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. This also includes any other operation provided for under applicable data protection laws.
  • "Data Protection Laws": means all legal provisions regulating the Processing of Personal Data, including, but not limited to, the Brazilian General Data Protection Law (Lei nº 13.709/18, "LGPD"), the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"), and their subsequent regulations, such as those issued by the Brazilian National Data Protection Authority (ANPD) and European data protection authorities.

2. Use of Personal Data and Purposes of Processing

We collect and use Personal Data to manage our relationship with You and to better serve You when You are purchasing products and/or services on the Platform, personalizing and improving your experience. The specific purposes for the Processing of Personal Data include:
  • Enabling You to purchase products and/or services on the Platform;
  • To confirm or correct the information We hold about You;
  • To send You information that We believe may be of interest to You, including offers and promotions, always based on your consent or legitimate interest, and with an opt-out option;
  • To personalize your experience of using the Platform;
  • To personalize the sending of advertisements to You, based on your interest in our Platform; and
  • To contact You via a provided phone number and/or email address. We may contact You personally, by voice message, through automatic dialing equipment, by text messages (SMS), by email, or by any other means of communication your device is capable of receiving, in accordance with the law and for reasonable commercial purposes.
Furthermore, the Personal Data provided may also be used as We deem necessary or appropriate:
  1. to comply with Data Protection Laws;
  2. to comply with judicial, administrative, or arbitration process requirements;
  3. to comply with a court order, regulatory decision, or decision by competent authorities, including authorities outside your country of residence;
  4. to protect our operations and rights;
  5. to protect our, your, or third parties' rights, privacy, and safety;
  6. to detect and prevent fraud;
  7. to allow Us to use available actions or limit damages We may suffer; and
  8. otherwise permitted by law.
THE PLATFORM IS NOT INTENDED FOR INDIVIDUALS UNDER 18 (EIGHTEEN) YEARS OF AGE, AND WE REQUEST THAT SUCH INDIVIDUALS DO NOT PROVIDE US WITH ANY PERSONAL DATA. In compliance with the Digital Child and Adolescent Statute (ECA Digital - Brazilian Law nº 15.211/2025) and GDPR provisions regarding children's data, Gaia does not intentionally collect data from children and adolescents. Should We become aware that data from individuals under 18 years of age has been collected without parental or guardian consent, We will make every effort to delete it from our records.

3. Non-Provision of Personal Data

You are not obliged to share the Personal Data We request. However, if You choose not to share it, in some cases, We may not be able to provide You with full access to the Platform, certain specialized features, or be able to provide the necessary assistance, or even enable the delivery of the product or provision of the service contracted by You.

4. Data Collected

The general public may browse the Platform without the need for any registration or submission of Personal Data. However, some Platform functionalities may depend on registration and submission of Personal Data, such as completing a purchase/service contract and/or enabling product delivery/service provision by Us.
When interacting with the Platform, We may collect:
  • Contact Data: Name, surname, phone number, city, state, and email address;
  • Location Data: Precise or approximate location data, as permitted by applicable law, to optimize product or service delivery;
  • Payment Data: Information necessary to process payments, such as credit card details or other financial information, which is securely processed by third-party payment providers and not fully stored by Gaia;
  • Profile Data: Preferences and interests regarding products/services (when You tell Us what they are or when We deduce them from what We know about You);
  • Platform Navigation Data: Information about your visits and activities on the Platform, including the content (and any advertisements) You view and interact with, information about the browser and device You are using, your IP address, your location, the address of the website from which You arrived. Some of this information is collected using our Automatic Data Collection Tools, which include cookies, web beacons, and embedded web links. To learn more, please read how We use Automatic Data Collection Tools in Section 7 below;
  • Anonymous or Aggregated Data: Anonymous responses to surveys or anonymous and aggregated information about how the Platform is used. During our operations, in certain cases, We apply a de-identification or pseudonymization process to your data so that it is reasonably unlikely that You will be identified through the use of such data with available technology; and
  • Other information We may collect: Other information that does not specifically reveal your identity or is not directly related to an individual, such as browser and device information; Platform usage data; and information collected through cookies, pixel tags, and other technologies.
We do not collect Sensitive Personal Data, unless strictly necessary to comply with a legal or regulatory obligation, or with your explicit consent, and always in compliance with LGPD and GDPR.

5. Sharing Personal Data with Third Parties

We may share your Personal Data with third parties in the following situations and always in compliance with LGPD and GDPR:
  • With partner company(ies) that You select or choose to send your data, queries, questions, etc., as well as with service providers or partners to manage or support certain aspects of our business operations on our behalf. These service providers or partners may be located in Brazil or other global locations, including servers for homologation and production, and providers of hosting and data storage services, fraud management, customer support, sales on our behalf, order fulfillment, content personalization, advertising and marketing activities (including digital and personalized advertising), and IT services, for example; including the use of CRM for customer relationship management and the sharing of contact and address data with carriers to enable product delivery.
  • With third parties, to help Us manage the Platform; and
  • With third parties, in the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).

6. International Data Transfers

Personal Data and other types of information collected by Us may be transferred to or accessed by entities belonging to Gaia's corporate group or partner companies worldwide, in accordance with this Privacy Policy and always in compliance with the requirements of LGPD and GDPR for international data transfers. This includes ensuring adequate safeguards are in place, such as Standard Contractual Clauses (SCCs) or other approved mechanisms, where required by GDPR for transfers outside the European Economic Area (EEA).

7. Automatic Collection of Personal Data (Cookies and Other Technologies)

When You visit the Platform, it may store or retrieve information on your browser, either in the form of cookies or similar technologies. This information may be about You, your preferences, or your device and is primarily used to make the Platform function as You expect. The information generally does not directly identify You but can offer a more personalized internet experience.
In accordance with this Policy, We and our third-party service providers may collect your Personal Data in various ways, including, but not limited to:
  • Through the browser or device: Some information is collected by most browsers or automatically through internet access devices, such as computer type, screen resolution, operating system name and version, device model and manufacturer, language, type, and version of the Internet browser You are using. We may use this information to ensure the Platform functions properly.
  • Use of cookies: Cookies allow the collection of information such as browser type, time spent on the Platform, pages visited, language preferences, and other anonymous traffic data. We and our service providers may use this information, among other things, to personalize your experience when using the Platform, as well as to direct advertising to You, according to your interests. We also collect statistical information about Platform usage for continuous improvement of our design and functionality.
If You do not wish for your information to be collected through cookies, You can configure cookies in your browser's "options" or "preferences" menu. In the links below, You can find more details on how to adjust cookie preferences for the most popular internet browsers:
The use of pixel tags and other similar technologies (also known as web beacons and invisible GIFs) may be used to track actions of Platform Users (including email recipients), measure the success of our marketing campaigns, and collect statistical data about Platform usage and response rates. If ad personalization is active in tools such as Facebook, Google, or Bing, the information may be used to display ads on their services.
If You do not wish to be tracked, You can opt-out for each service:
We may engage behavioral advertising companies to obtain reports on Platform advertisements across the internet. For this purpose, these companies use cookies, pixel tags, and other technologies to collect information about your use, or the use of other Users, of our Platform and third-party websites. We are not responsible for pixel tags, cookies, and other similar technologies used by third parties. You can configure your preferences in your browser's menu. Be aware that if You change computers or browsers, or use multiple computers or browsers, You will need to repeat this process for each computer and each browser.

8. User Rights (Data Subject Rights)

In accordance with LGPD and GDPR, You may, at any time, request:
  1. Confirmation that your Personal Data is being processed;
  2. Access to your Personal Data;
  3. Rectification of incomplete, inaccurate, or outdated data;
  4. Anonymization, blocking, or erasure of unnecessary, excessive, or unlawfully processed data;
  5. Data Portability to another service provider, provided that this does not affect our industrial and commercial secrets;
  6. Erasure of Personal Data processed with your consent, to the extent permitted by law;
  7. Information about public and private entities with which your Personal Data has been shared;
  8. Information about the possibility of not providing consent and the consequences of refusal; and
  9. Withdrawal of consent.
Your requests will be handled with special care to ensure the effectiveness of your rights. You may be asked to provide proof of your identity to ensure that the sharing of Personal Data is only done with its rightful owner.
Bear in mind that, in certain cases (e.g., due to legal or contractual requirements), your request may not be immediately fulfilled, and We may not be able to comply with it due to legal obligations or for the regular exercise of rights in judicial, administrative, or arbitration proceedings.

9. Security of Personal Data

We strive to adopt technical and organizational measures provided by Data Protection Laws suitable for the protection of Personal Data within our organization. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If You have reason to believe that your interaction with Us is no longer secure (for example, if You believe the security of any of your accounts has been compromised), please notify Us immediately.
The Platform may, from time to time, contain hypertext links that will redirect You to websites of our partners, advertisers, suppliers, etc. If You click on any of these links to any of these websites, please remember that each website has its own privacy practices, and We are not responsible for these policies. Please consult their respective policies before submitting any Personal Data to these websites.
We are not responsible for the privacy policies and practices of collection, use, and disclosure (including data protection practices) of other organizations, such as Facebook, Apple, Google, Microsoft, or any other software developer or application provider, social media store, operating system, wireless internet service provider, or device manufacturer, including all Personal Data You disclose to other organizations through applications, related to such applications, or published on our social media pages. We recommend that You inform yourself about the privacy policy of each website visited or each service provider used.

10. Updates to this Privacy Policy

If We modify our Privacy Policy, We will publish the new text on the Platform, with the updated revision date. We may change this Privacy Policy at any time. If there are significant changes to the terms of this Policy, We may inform You through the contact information We have in our database or through a notification on our Platform.
We remind You that We are committed to not processing your Personal Data in a manner incompatible with the objectives described above, unless otherwise required by law or court order.
Your use of the Platform after the changes means that You have accepted the revised Privacy Policy. If, after reading the revised version, You do not agree with its terms, please cease access to the Platform.

11. Data Protection Officer (DPO) and Contact

If You wish to exercise any of the rights provided in this Privacy Policy and/or Data Protection Laws, or resolve any questions related to the Processing of your Personal Data, please contact our Data Protection Officer (DPO) via email at [email protected]. The person responsible for the processing of Personal Data is GPF Fitness LTDA, registered under CNPJ/MF 59.060.580/0001-55.