Coroa · personal data
Privacy policy
This page explains what personal data Coroa collects, what for, for how long, and how to have it deleted. It is short because the collection is small.
Who the controller is
The data controller is Coroa Importação e Comércio de Relógios Ltda., CNPJ 69.408.666/0001-80, at Av. Dr. Cardoso de Melo, 626, cj. 409, Vila Olímpia, São Paulo/SP, 04548-003, Brazil.
Controller contact for data matters: contato@coroawatches.com.
What we collect
- Opening list — your email address, the page language and the date, when you tick the authorisation and submit the form.
- Brand enquiry — the brand name, how it reaches Brazil today (if you tell us) and the email for our reply.
We do not store IP addresses ourselves. The guide’s forms store an irreversible code derived from it, only to block repeated submissions (see “Microbrands guide”), and nothing on this site tracks you without prior permission.
Audience measurement — this site uses the Meta pixel (since 20 September 2026) and Google Analytics (since 17 October 2026), always only after you allow it. On your first visit a notice appears with two equally prominent options, allow or refuse, and no third-party code loads until you choose to allow it. If you allow it, both tools record which pages you open here and send that to Meta and Google, together with your IP address and an identifier for your browser (for Google, stored in the _ga cookies). Refusing changes nothing about how the site works, and you can review your choice at any time. Your answer lasts 180 days; after that we ask again.
The preferences stored in your browser — the light or dark theme and this answer — stay on your device and never reach us.
Creator referrals — if you arrive through a partner content creator's link (coroawatches.com/c/… addresses), we store a referral cookie in your browser for 90 days: coroa_origem, together with slicewp_aff and slicewp_visit. It only records which creator referred you and when you arrived; it holds no name or e-mail. Purpose: to attribute your sign-up to the list, or your purchase, to the creator who referred you. It is used only by Coroa, is not sent to third parties and is not used for advertising. Legal basis: legitimate interest (art. 7, IX, LGPD). You can delete it at any time in your browser settings.
Microbrands guide
On the microbrands guide (coroawatches.com/microbrands), this is what we collect:
- “I want it in Brazil” and guide updates — your email, your name (if you give it), the brand you chose, the page language, whether you ticked the option to receive updates, and the date. Purpose: to count interest in each brand and, if you tick the option, to send news about the guide and Coroa. Registering interest is not an order or a reservation. Legal basis: your consent (art. 7, I, LGPD).
- Comments on brand listings — your name, email and text. Every comment is moderated before it appears; only the name and the text are shown publicly, never the email. Legal basis: your consent (art. 7, I).
- “Is this your brand?” and brand suggestions — the brand name, email, role, website, message and any photos sent. Purpose: to correct the listing and reply. Photos are kept in a closed folder on the server, re-processed on arrival (which strips metadata such as location and device) and never published without the brand’s express permission. Legal basis: steps taken at the data subject’s request (art. 7, V).
- Abuse protection — with each submission we store a code calculated from the IP address with a secret key. It cannot be turned back into the IP and is used only to limit repeated submissions. Legal basis: legitimate interest (art. 7, IX).
- Usage counts — the guide counts, per day and in aggregate, how many searches, filters and clicks happen (for example: “search for sellita: 12”). These counts use no cookie, store no IP or identifier and cannot tell who did what. If your browser sends a “Do Not Track” or “Global Privacy Control” signal, nothing is counted.
- Where it is kept, and for how long — guide data is kept in the site’s own database, on the server contracted from Hostinger, and only Coroa has access; it is not sold, rented or shared. Interest registrations and comments are kept for up to 24 months or until you ask for deletion, whichever comes first; brand contacts for as long as the business relationship lasts.
- Cloudflare visit measurement — the site runs through Cloudflare, which counts visits in aggregate and without cookies.
What for, and on what legal basis
- Opening list — solely to tell you when the shop opens. Legal basis: your consent (art. 7, I of the Brazilian LGPD), given in the authorisation box. We send nothing else.
- Brand enquiry — solely to reply to you and carry the commercial conversation. Legal basis: preliminary procedures relating to a contract at the data subject's request (art. 7, V).
- Audience measurement — to learn which pages are read and, later on, to direct Coroa's advertising to people who have visited the site. Legal basis: your consent (art. 7, I of the LGPD), given in the first-visit notice and revocable at any time, with nothing changing in how the site works.
- Referral attribution — to know whether a sign-up or a purchase came from a partner creator's link, through the 90-day referral cookie (legitimate interest).
Where it is kept, and for how long
What you send us through a form — your list email and your brand enquiry — is held on Cloudflare infrastructure, in the controller's own account, and is never sold, rented or shared with third parties. List emails are kept until the opening notice is sent or until you ask for deletion, whichever comes first. Brand enquiries are kept for the duration of the commercial relationship.
There is one exception, and it is yours to make: if you allow audience measurement, the browsing data described above goes to Meta Platforms, which processes it outside Brazil and also for its own purposes, under its own terms. That is an international transfer of personal data, made on the basis of your specific consent, disclosed in the first-visit notice (art. 33, VIII of the LGPD). If you refuse, or revoke later, nothing is sent.
Your rights
At any time, and without giving a reason, you may request confirmation of processing, access, correction, anonymisation, portability, withdrawal of consent and deletion — the rights set out in art. 18 of the LGPD. Just write to contato@coroawatches.com. We answer within two business days and deletion is free.