Policy updated on August 28, 2026.

RÁPIDO DOESTE LTDA (“Rápido d’Oeste” or “We”), registered under CNPJ No. 55.958.318/0001-71, located at Av. Bandeirantes, 1.226, ZIP 14030-680, values customer satisfaction and is committed to protecting and safeguarding the privacy of your personal data. Therefore, we strive to be transparent in clarifying and disclosing our privacy policy, which establishes the company's guidelines and practices regarding the storage, use, retention, and sharing of the personal information we collect.  

In accordance with the LGPD (Law No. 13.709/2018 - General Data Protection Law), our goal is to provide an understanding of how we handle your information, allowing you to make informed decisions and have control over your data.

With whom we share data

The personal data processed by RÁPIDO D'OESTE may be shared with partners, suppliers, service providers, and operators strictly necessary for the execution of services provided by the company, observing compatible measures of confidentiality, information security, and personal data protection.

The categories of sharing carried out by the company are described in the table below.

Technological Partners

Certain types of contracting or use of services may be operated by independent technological partners, who have their own terms of use, privacy policies, and procedures related to the protection of personal data.

In these cases, the documents provided by the respective partner will complement the information provided in this Privacy Policy, observing the responsibilities assumed by each party in the provision of services.

Security Measures

We adhere to best practices for the protection and care of data in our environment. This includes regular backup routines, robust security measures such as the use of strong passwords, maintenance of updated systems and antivirus, as well as an effective firewall to prevent unauthorized access. Additionally, access to the physical storage environment is strictly limited.

Our internal policy emphasizes the continuous awareness of our employees who handle this data, reinforcing individual responsibility for the care of information. Data security is a priority for us, and we are committed to protecting the privacy of our users.

Security Incidents

RÁPIDO D'OESTE adopts procedures aimed at the prevention, identification, evaluation, treatment, and mitigation of security incidents that may affect personal data processed in its operations.

In the event of a security incident involving personal data, the company will take appropriate measures for containment, analysis, and mitigation of the identified impacts, observing applicable legal and regulatory requirements.

When necessary, relevant communications will be made in compliance with current legislation and the guidance of competent authorities.

Data Storage

We store your personal data in a secure environment in Brazil without international information sharing. All details about data usage are described in our policy.

We retain your data for the time strictly necessary to fulfill the purposes for which it was collected, ensuring that your information is used appropriately and responsibly. Note that for some documents, there is a longer legal period, such as accounting and tax information, which may be retained for up to 5 years, in accordance with current legislation.

Data Subject Rights

As provided in Law No. 13.709/2018 (General Data Protection Law - LGPD), the data subject has the following rights regarding the information processed by RÁPIDO D'OESTE:

• Confirmation of processing existence: request confirmation about the existence of processing of your personal data.

• Access to data: request access to personal data processed by the company.

• Data correction: request the correction of incomplete, inaccurate, or outdated data.

• Anonymization, blocking, or deletion: request the anonymization, blocking, or deletion of personal data when considered unnecessary, excessive, or processed in non-compliance with applicable legislation.

• Data portability: request the portability of personal data, when applicable and observing the requirements provided in current legislation.

• Information on sharing: request information about public and private entities with which RÁPIDO D'OESTE has shared your personal data, when applicable.

• Revocation of consent: when processing is based on consent, the data subject may revoke it at any time, observing the legal hypotheses that authorize the continuation of processing.

• Review of automated decisions: request the review of decisions made solely based on automated processing of personal data, when applicable.

To exercise your rights, the data subject may contact RÁPIDO D’OESTE via email lgpd@niff.com.br.

Data Protection Officer (DPO)

Data Protection Officer (DPO): Geraldo Valdeci Dama.

Important: To ensure the security of information and protect the rights of data subjects, RÁPIDO D'OESTE may request additional documents or information to validate the identity of the requester or their legal representative before fulfilling the request.