Operazor · Legal
Legal Summary (English)
Operazor Technology Ltd. is registered with the UK's Information Commissioner's Office (ICO). This page summarizes our Privacy Policy and Terms of Use in English for convenience. It is not a substitute for the full documents — the Portuguese-language Privacy Policy and Terms of Use are the legally binding versions under LGPD and UK GDPR.
Last updated: August 29, 2026
Who we are
Operazor Technology Ltd. (United Kingdom) is the data controller for Operazor, a back-office management platform for barber shop chain owners and managers in Brazil. We are ICO-registered and comply with both the UK GDPR and Brazil's LGPD.
Data we collect
- Account data: name, email, role, session/login history
- Payment data: processed by Stripe — Operazor never stores card details directly
- Operational and financial data your organization enters into the Platform
- End-customer contact data (name, phone) your organization may enter for its own barber shop clients
Legal bases for processing
- Contract performance — to provide the subscribed service
- Legal obligation — retaining data as required by tax and accounting law
- Legitimate interest — platform security, fraud prevention, and service improvement
Your rights
Under LGPD art. 18 and UK GDPR, you have the right to confirmation, access, correction, anonymization/blocking/erasure, portability, consent withdrawal, and to petition a supervisory authority (ANPD or the ICO). To exercise any of these rights, contact our DPO — response SLA: 15 business days.
privacidade@operazor.com
Retention periods
- Account and operational data: retained for the contract term, plus 90 days after cancellation
- Billing and transactional records: 6 years (UK Companies Act 2006 / Brazilian tax law)
- Access logs: 6 months. This does not apply to the financial audit trail, which is retained indefinitely as a legally-required accounting record
- Support and correspondence: 2 years after the contact is closed
Subprocessors
Clerk (authentication), Stripe (payments), Railway (hosting/database), Cloudflare R2 (financial attachment storage), Resend (transactional email), Sentry (error monitoring), and Google Analytics (site analytics, on the marketing site only, gated behind visitor consent). International transfers are covered by Standard Contractual Clauses. Full details: Privacidade §5.
Full documents
This page is a convenience summary only. The complete, legally authoritative Privacy Policy and Terms of Use are published in Portuguese: