Legal

Privacy Policy

SOS Human Help Institute · Brazilian Tax ID (CNPJ) 66.025.652/0001-99 · Updated July 2026

The SOS Human Help Institute values the privacy and security of the personal data of its users, partners, and beneficiaries.

This Privacy Policy is intended to inform you, clearly and transparently, how we collect, use, store, and share your personal data, in accordance with Brazilian Law No. 13,709/2018 (the "LGPD," Brazil's General Data Protection Law) and other applicable data protection standards.

When you browse our pages and platforms, use their features, or create an account, we collect personal data about you. Personal data refers to any data that allows the direct or indirect identification of an individual.

Each processing of data is based on one of the legal grounds set out in Article 7 of the LGPD, such as the data subject's consent, compliance with a legal or regulatory obligation, performance of a contract or preliminary procedures, the regular exercise of rights, or the legitimate interest of the SOS Human Help Institute, always with due regard for the data subject's fundamental rights and freedoms.

The purpose of this policy is to inform you of the means we use to collect and use your personal data, in strict compliance with your rights.

1. Data controller and contact information

The party that decides to collect and use your personal data is SOS HUMAN HELP INSTITUTE, a nonprofit organization registered under Brazilian Tax ID (CNPJ) No. 66.025.652/0001-99, headquartered at Av. Francisco de Paula Leite, 487, Indaiatuba, São Paulo, Brazil, hereinafter referred to as "We" or "Us."

2. What data we collect

Data you provide directly

If you make a donation on our pages, we will transmit to Infopago, our payment processing provider, working together with Lusa in a checkout integration partnership, certain data that we collect directly from you, in order to process the donation, namely:

Information that enables payment: order number, payment amount, voluntary contribution amount (where applicable), donor's last name, first name, and email address, IP address, reference to the beneficiary organization, as well as, where provided: date of birth, mailing address, and company name.

As part of this payment process, we may also receive data about you from Infopago and Lusa, collected directly from you during the transaction, namely:

Banking and payment information: partially pseudonymized data from the bank card or payment method used, card expiration date, card type, payment status, and payment authorization date.

Finally, when you browse our pages, we may automatically collect personal data about you through technical cookies and trackers placed on your device. The data collected is as follows:

For more information about the cookies and trackers we use and how to configure them, see the "Cookies" section at the end of this page.

3. Purposes of data collection

Your personal data is collected and used to fulfill one or more of the following purposes:

When collecting your personal data, we inform you whether certain data is mandatory or optional, as well as the possible consequences of not providing it.

Our pages and Lusa's payment services are not directed at individuals under the age of 18. If the processing of a minor's data is necessary, specific and prominent consent will be obtained from at least one parent or legal guardian.

Finally, we would like to emphasize that we never use your data to make automated decisions about you.

4. What are your rights?

The SOS Human Help Institute guarantees its users/donors their rights as data subjects under Article 18 of Brazil's General Data Protection Law. As such, you may, free of charge and at any time:

5. Data sharing

Your data will only be disclosed to members of our team who need access (such as donor support and communications), as well as to our potential subcontractors (such as IT providers, website hosting providers, and support providers). They will have access to your data only to the extent strictly necessary to carry out their respective duties and act solely under our instructions.

Some of the data we collect is also shared with Infopago and Lusa, which manage the processing of donations made through our pages, including, where applicable, banking data. In these cases, Infopago and Lusa act as controllers of the data they collect directly during the transaction. We recommend consulting Infopago's and Lusa's privacy policies directly to learn more about how these partners handle your data.

We also transfer your data to the individuals and families on whose behalf you made a donation, or to the partners involved in the initiative, so they can process it in the context of receiving and accounting for that donation. Only the data necessary for these operations is transferred.

Your data may also be disclosed as part of internal audits, as well as to administrative authorities, in order to comply with our legal obligations. In the event of a dispute, your data may be disclosed to judicial or administrative authorities, legal counsel, court officers, or judges.

All recipients commit to ensuring the strictest confidentiality of your personal data in their possession.

6. Retention period and security

Your data will be retained only for the period strictly necessary for its use, based on the purpose for which it was collected.

Management of your access to our pages and communications

Your personal data will not be retained beyond the period strictly necessary to manage our relationship with you, up to a maximum of three (3) years from the date of collection. Data that may be used to prove a right or contract, or that must be retained to comply with a legal obligation, will be retained for up to five (5) years.

Account creation and management

When you create an account, data will be retained until the account is deleted by the user. Accounts unused for two (2) years from creation will be considered inactive and deleted, along with the data they contain, after a prior attempt to contact the user.

Management of online donation transactions

Financial transactions related to donations are entrusted to Infopago and Lusa, which ensure their proper functioning and security. We do not have access to complete payment data, only to the partial data necessary, retained for up to 5 years for evidentiary purposes in the event of a disputed transaction and to comply with legal fraud-prevention obligations. Card security code data is not stored. More broadly, payment data is retained for the duration of the relationship plus 5 additional years.

Audience measurement statistics

Trackers stored on your device, or any other element used for identification or traceability, are not retained for more than six (6) months. After this period, we reserve the right to anonymize the data for statistical purposes.

Proper functioning and optimization of our services

Data collected for the purpose of improving our services and compiling statistics is retained for a maximum period of one year.

Dispute management

Data used for purposes of any dispute or legal proceeding related to the use of our pages will be retained for the duration of the ongoing proceeding and until a final judicial decision is reached.

Requests and exercise of rights

When you contact us to request assistance, report a problem, or exercise one of your rights under the LGPD, your data is retained for as long as necessary to process your request.

Financial and transaction data may be retained for up to 5 years, in accordance with tax and anti-money-laundering requirements.

We adopt technical and administrative measures to protect personal data against unauthorized access and accidental or unlawful destruction, loss, alteration, disclosure, or dissemination, including encryption, access control, server monitoring, and secure backups.

7. Anti-money laundering and compliance

The SOS Human Help Institute follows good compliance and anti-money-laundering practices, and may conduct identity verification (KYC) and maintain transaction records as required by applicable law and competent authorities.

8. How can you access the personal data we hold about you?

You have the right to access your personal data in order to obtain a copy of it and, where applicable, to obtain its correction or deletion, by contacting us at soshumanhelp@gmail.com or via WhatsApp at (85) 99792-7853.

We also remind you that anyone may, for legitimate reasons, request a restriction on the processing of data concerning them or object to such processing. In the event of correction, deletion, or restriction of processing, we will notify these changes to anyone to whom we have disclosed your data, unless such notification proves impossible.

9. International data transfers

Some of the third parties with whom we share your data may be located, or have facilities located, in foreign countries. Under these conditions, your personal data remains subject to Brazil's General Data Protection Law and other applicable Brazilian data protection legislation.

The SOS Human Help Institute commits to always adopting effective cybersecurity and data protection standards, making its best efforts to guarantee and comply with legal requirements.

By agreeing to this Privacy Policy, you agree to this sharing, which will occur in accordance with the purposes described in this document.

10. Changes to this policy

The current version of this Privacy Policy was drafted and last updated in July 2026.

We reserve the right to modify this Policy at any time, particularly to reflect changes made to our pages or to applicable legislation. Any changes will take effect upon publication, and we will always notify you of any changes made.

By using our services and providing your personal data after such modifications, you consent to them.

11. Cookies

Like many other organizations, the SOS Human Help Institute uses cookies on its pages. This section provides information about how we use cookies and how you can, where possible, control them. By continuing to browse, you acknowledge that you are aware of this section and agree to it.

What cookies are

Cookies are small programs downloaded to your computer or mobile device when you visit a website. They allow us to recognize you, tailoring your browsing experience to preferences expressed during previous visits, help you navigate between pages efficiently, and generally improve your experience.

How to manage and delete cookies

We respect your preferences. Our pages do not yet have their own cookie preference center; until it is available, you can manage or delete cookies directly in your browser settings at any time. If you choose to delete or refuse cookies, you may not be able to use all the features of our pages.

Changes to this section

We may modify this section at any time, at our sole discretion, and all modifications will take effect immediately upon publication.

12. Contact

If you have any questions, requests, or wish to exercise your rights, please contact us:

Last updated: July 2026