Privacy Policy

1. Data Controller

Fast Card Solutions Ltda. (trading as FastPay), registered under CNPJ 28.822.741/0001-77, with registered office at Rua Alexandre Dumas, 2100, Floors 7 and 8, Corporate Plaza Building — Chácara Santo Antônio, São Paulo/SP — Brazil, is the controller of the personal data processed through this website, as defined in art. 5, VI, of the LGPD.

2. Data Protection Officer (DPO / Encarregado)

In compliance with art. 41 of the LGPD, FastPay has appointed a Data Protection Officer. For privacy-related questions, data processing inquiries, or to exercise your rights, please contact:

[email]

3. Personal Data We Collect

We collect only the data strictly necessary for the purposes described in this Policy:

3.1. Data you actively provide

• Contact form: name, company name, email, phone (optional), segment, solution of interest, and free-text message.
• Direct communication: any information you send us via email, LinkedIn, or other channels.

3.2. Data collected automatically

• Technical data: IP address, browser type, operating system, date/time of access, and pages visited.
• Essential cookies: as detailed in the Cookie Policy.

4. Purposes of Processing

We use your personal data for the following purposes:

• To respond to commercial inquiries and questions submitted through the website form;
• To send commercial proposals and materials related to FastPay's services when requested;
• To comply with legal and regulatory obligations (including requirements from the Brazilian Central Bank, the ANPD, tax and judicial authorities);
• To ensure information security and prevent fraud;
• To improve the website and the services offered, based on aggregated and anonymous analyses.

5. Legal Basis for Processing

Personal data processing is based on the following legal grounds (LGPD art. 7):

• Consent (art. 7, I) — for submission of the contact form and commercial communications;
• Compliance with legal or regulatory obligation (art. 7, II) — when required by law or competent authority;
• Performance of contract (art. 7, V) — for clients contracting our services;
• Legitimate interest (art. 7, IX) — for information security, fraud prevention and site improvements, balanced with your rights and reasonable expectations;
• Credit protection (art. 7, X) — when applicable to payment operations.

6. Data Sharing

FastPay does not sell your personal data. We share information only when necessary, in the following cases:

• Processors and suppliers hired by FastPay to deliver services (e.g., Web3Forms form provider, hosting infrastructure), under contractual confidentiality and security obligations;
• Companies within the same group (Grecale, Neo Pagamentos) when relevant to deliver the requested solution;
• Competent authorities upon judicial order, administrative requisition, or legal/regulatory requirement (Central Bank, ANPD, Federal Revenue, etc.);
• Card networks and partner financial institutions when strictly necessary for the execution of contracted payment operations.

7. International Data Transfer

Some services we use (e.g., Web3Forms, Google Fonts) may involve international data transfer to countries that offer an adequate level of protection or under specific contractual clauses, in accordance with art. 33 of the LGPD.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, subject to the following periods:

• Commercial contact data: up to 5 (five) years from the last interaction, unless deletion is requested;
• Data retained for legal obligations: for the applicable legal period (e.g., 5 years for tax purposes, under Brazilian tax law);
• Logs and technical data: up to 6 (six) months, unless retention is required by law.

9. Your Rights as a Data Subject

Under art. 18 of the LGPD, you have the right, at any time and upon request, to:

• Confirm the existence of processing of your personal data;
• Access your data;
• Correct incomplete, inaccurate, or outdated data;
• Request anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in non-compliance with the LGPD;
• Request data portability to another provider;
• Request deletion of data processed based on consent;
• Obtain information on the public and private entities with which we share your data;
• Be informed about the option not to provide consent and its consequences;
• Revoke consent at any time;
• Lodge a complaint with the Brazilian National Data Protection Authority (ANPD).

10. How to Exercise Your Rights

To exercise any of the rights above, send an email to [email] identifying yourself and describing your request. FastPay will respond within 15 (fifteen) days, a period that may be extended upon formal justification.

11. Information Security

We adopt technical and administrative measures to protect your personal data against unauthorized access, loss, alteration, or destruction. Our infrastructure follows recognized market standards, including PCI DSS and ISAE 3402 certifications, with TLS encryption, 24/7 monitoring, and least-privilege access controls.

Despite all efforts, no system is absolutely impenetrable. In the event of a security incident with risk to data subjects, FastPay will notify the ANPD and affected individuals within the periods required by law.

12. Cookies

The use of cookies on this site is detailed in our Cookie Policy.

13. Changes to This Policy

This Policy may be updated periodically to reflect regulatory, operational, or technological changes. The current version will always be available on this site, with the last-updated date at the top. We recommend regular review.

14. National Data Protection Authority (ANPD)

If you believe your rights have not been adequately addressed, you may file a complaint with the Brazilian National Data Protection Authority (ANPD), at www.gov.br/anpd.

15. Governing Law and Jurisdiction

This Policy is governed by the laws of the Federative Republic of Brazil. The courts of the City of São Paulo — SP are elected for the resolution of any disputes arising from this Policy, with waiver of any other, however privileged.