Privacy Policy

SEMEIA LAB SERVIÇOS LTDA

Effective as of July 12, 2026

This Privacy Policy describes how SEMEIA LAB SERVIÇOS LTDA, enrolled under CNPJ No. 66.940.215/0001-09, headquartered at Rua Visconde de Inhaúma, nº 134, Sala 2001, CEP 20091-901, Rio de Janeiro/RJ, Brazil ("Semeia Lab", "we", "us"), collects, uses, stores, and protects the personal data of users ("you", "data subject") who access our websites semeialab.com and semeialab.com.br and their subdomains (the "Site").

We take your privacy seriously and process your personal data in compliance with Brazilian Law No. 13.709/2018 (General Personal Data Protection Law — LGPD) and other applicable regulations. By using the Site, you acknowledge that you are aware of the conditions described in this document.

1. Who is the controller of your data

The controller responsible for processing your personal data is SEMEIA LAB SERVIÇOS LTDA, which decides on the purposes and means of processing the data collected through the Site.

Controller details:

• Legal name: SEMEIA LAB SERVIÇOS LTDA

• CNPJ (company registration): 66.940.215/0001-09

• Address: Rua Visconde de Inhaúma, nº 134, Sala 2001, CEP 20091-901, Rio de Janeiro/RJ, Brazil

• Contact e-mail: hello@semeialab.com

2. Privacy communication channel

As a small-scale processing agent under ANPD Resolution CD/ANPD No. 2/2022, Semeia Lab is exempt from the formal appointment of a Data Protection Officer (Encarregado/DPO). Nevertheless, we provide a communication channel through which you may exercise your rights, ask questions, or submit requests regarding your personal data:

E-mail: hello@semeialab.com

3. What personal data we collect

The Site is currently primarily informational. We collect personal data only when you choose to contact us through the contact form available on the Site. The data collected may include:

• Your name or how you prefer to be addressed;

• E-mail address;

• Phone number (if you choose to provide it);

• The content of the message you send us and any other information you voluntarily provide.

We do not use tracking cookies, analytics tools (such as Google Analytics), advertising pixels, or similar profiling technologies on the Site. Only strictly necessary cookies required for the Site's basic operation may be used, where applicable (see section 8).

We do not intentionally collect sensitive personal data (such as racial origin, religious belief, political opinion, health, or biometric data). Please do not include this type of information in messages sent through the contact form.

4. Why we use your data

We process your personal data for the following purposes:

• To respond to your messages, questions, and requests submitted through the contact form;

• To establish and maintain communication with you regarding the matters you raise with us;

• To comply with applicable legal or regulatory obligations;

• To exercise rights in judicial, administrative, or arbitration proceedings, if necessary.

5. Legal basis for processing your data

The processing of your personal data relies on the following legal bases set out in the LGPD:

• Consent (Art. 7, I): when you voluntarily complete and submit the contact form;

• Compliance with a legal or regulatory obligation (Art. 7, II);

• Regular exercise of rights in judicial, administrative, or arbitration proceedings (Art. 7, VI);

• Legitimate interest (Art. 7, IX), where applicable, to respond to and appropriately follow up on your requests, always respecting your fundamental rights and freedoms.

6. Who we share your data with

Semeia Lab does not sell, rent, or trade your personal data. We currently do not share your data with third parties for their own purposes.

Your data may be shared only in the following situations:

• With service providers acting on our behalf (for example, website hosting or e-mail service providers), strictly to the extent necessary and subject to confidentiality and security obligations;

• To comply with a legal or regulatory obligation or an order from a competent authority;

• To protect the rights of Semeia Lab in judicial or administrative proceedings.

7. International data transfer

If the hosting or e-mail providers used by Semeia Lab store data on servers located outside Brazil, such international transfer will be carried out in compliance with the requirements of the LGPD, adopting the appropriate safeguards set out in the legislation.

8. Cookies

The Site may use only strictly necessary cookies, i.e., those essential for the Site to function properly and to provide basic browsing features. These cookies do not collect data for advertising purposes and do not create behavioral profiles.

We do not use analytics, performance, or advertising cookies that require your consent. Should we start using such cookies in the future, this Policy will be updated and we will display a cookie notice with management and rejection options, in line with ANPD guidelines.

You may, at any time, configure your browser to block or delete cookies. Instructions on how to do so are available in your browser settings.

9. How long we keep your data

We keep your personal data only for as long as necessary to fulfill the purposes described in this Policy, including any legal, contractual, or regulatory obligations. After this period, the data is securely deleted, unless its retention is authorized or required by law.

10. Your rights

Under Art. 18 of the LGPD, you, as a data subject, have the right to:

• Confirm the existence of processing of your data;

• Access your data;

• Correct incomplete, inaccurate, or outdated data;

• Request the anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in non-compliance with the LGPD;

• Request the portability of your data to another provider, subject to legal limits;

• Request the deletion of data processed based on your consent;

• Obtain information about the parties with whom your data has been shared;

• Be informed about the possibility of not providing consent and the consequences thereof;

• Withdraw your consent at any time.

To exercise any of these rights, please contact us at hello@semeialab.com. We may request additional information to confirm your identity before fulfilling the request.

11. How we protect your data

We adopt technical and administrative measures that are reasonable and appropriate to our size to protect your personal data against unauthorized access and situations of destruction, loss, alteration, or improper communication or dissemination. Despite our efforts, no system is entirely immune to incidents; in the event of a relevant security incident, we will take the appropriate measures, including any communication to data subjects and to the ANPD as required by law.

12. Children's and adolescents' data

The Site is not intended for children and adolescents, and we do not intentionally collect personal data from this audience. If we become aware that we have collected data from a minor without proper authorization, we will take steps to delete it.

13. Changes to this Policy

This Privacy Policy may be updated at any time to reflect changes in our practices or in legislation. The current version will always be available on the Site, together with its update date. We recommend that you review it periodically.

14. Contact and applicable law

If you have any questions about this Policy or about the processing of your personal data, please contact us at hello@semeialab.com.

This Policy is governed by Brazilian law, in particular by Law No. 13.709/2018 (LGPD).

Notes

This English version is provided for the convenience of international visitors.In the event of any conflict or discrepancy, the Portuguese-language version prevails, as it is the legally binding version under Brazilian law