Privacy Policy

1. Overview & Data Controller

This Privacy Policy applies to the digital properties, websites, applications, and services operated by:

When you purchase products such as the SlimReset Protocol, Metabolic Shield Handbook, OneMealFix, or subscribe to the SlimFit App, we act as the data controller responsible for the lawful handling of your information.

2. Information We Collect

We only collect personal information that is relevant and necessary to fulfill our commitments to you:

a) Personal Identification & Billing Data

• Contact Information: Full name, email address, telephone number, and delivery email.
• Billing Identifiers: Tax ID (such as CPF for Brazilian residents, as mandated by Brazilian fiscal regulations), billing address, and transaction records.
• Payment Details: Payment card numbers, PIX keys, and bank details are processed directly by certified, PCI-DSS compliant third-party payment gateways (such as Centerpag and Stripe). CM Marketing Lab does not store raw credit card numbers on our servers.

b) Technical & Usage Data

• Device & Network Information: IP address, browser type, operating system version, screen resolution, and language settings.
• Interaction Logs: Access dates, pages visited, time spent on features, referring URL, and error diagnostic logs.

c) Voluntary Information

Any details you choose to share when contacting customer support, providing testimonials, or configuring preference settings in our mobile wellness apps.

3. How We Use Your Information

Your data is processed strictly for legitimate, defined business and operational purposes:

• Fulfillment & Access: Delivering purchased digital guides, managing app memberships, and generating order confirmations.
• Customer Service: Responding to inquiries, troubleshooting technical issues, and processing refund or cancellation requests.
• Platform Improvement: Analyzing aggregated usage metrics to optimize page speed, interface usability, and content quality.
• Legal & Fiscal Compliance: Generating electronic invoices (NF-e), maintaining audit trails required by Brazilian tax law, and preventing payment fraud.
• Important Communications: Sending service updates, security alerts, policy revisions, and receipts.

4. Legal Bases for Processing (LGPD & GDPR)

Under Article 7 of the Brazilian LGPD (Lei Geral de Proteção de Dados - Lei 13.709/2018), we process your data based on:

• Execution of Contract (Art. 7, V): Required to deliver digital products, grant software access, and process transactions.
• Compliance with Legal Obligation (Art. 7, II): Retaining tax and fiscal invoice records in compliance with Brazilian Federal Revenue (Receita Federal) and Marco Civil da Internet (Law 12.965/2014).
• Legitimate Interests (Art. 7, IX): Improving our services, securing our website against cyber attacks, and conducting fraud prevention.
• Consent (Art. 7, I): Where explicitly requested, such as opting into optional wellness newsletters or non-essential cookies.

5. Cookies & Tracking Technologies

Cookies are small text files placed on your device to ensure smooth site functionality. We utilize:

• Strictly Necessary Cookies: Essential for session navigation, security checks, and shopping cart persistence.
• Performance & Analytics Cookies: Anonymous aggregated data to help us understand which sections are most popular and identify technical errors.
• Functional Cookies: Remembering your UI preferences and language choices.

You can modify your browser settings at any time to reject cookies; however, certain interactive features of our apps and checkout forms may not operate properly without them.

6. Third-Party Service Providers & Sharing

We never sell, rent, or trade your personal data to third-party data brokers. We share data only with verified technical partners under strict contractual confidentiality:

• Payment Processors: Centerpag and Stripe for secure, encrypted payment processing.
• Cloud Infrastructure: AWS (Amazon Web Services) and Google Cloud Platform for safe, redundant data storage and hosting.
• Customer Communications: Transactional email service providers for delivery of purchase receipts and digital downloads.
• Legal Authorities: When strictly required by court orders, lawful subpoenas, or regulatory directives.

7. Data Storage & Security Measures

We employ administrative, technical, and physical safeguards designed to protect personal data from unauthorized access, accidental loss, alteration, or disclosure:

• Transport Layer Security (TLS 1.3 / SSL) encryption for all transmitted web traffic.
• Role-based access controls and multi-factor authentication for administrative accounts.
• Periodic vulnerability scans, database backups, and server monitoring.

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy or to comply with statutory retention terms (such as 5 years for tax documentation under Brazilian law).

8. Your Privacy Rights

Under Article 18 of the LGPD and international data protection laws, you have the right to:

• Confirmation & Access: Confirm whether we process your data and obtain a copy of your records.
• Correction: Request the update or rectification of incomplete, inaccurate, or outdated data.
• Anonymization, Blocking, or Deletion: Request the erasure of unnecessary, excessive, or unlawfully processed data.
• Portability: Request the transfer of your personal data to another service provider.
• Revocation of Consent: Withdraw consent previously granted for optional communications at any time.

To exercise any of these rights, please submit a written request to support@cmmarketinglab.com. We will process and respond to your request within the statutory timeframe.

9. Contact & Data Protection Officer (DPO)

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, please contact our privacy desk:

We may update this Privacy Policy periodically to reflect technological changes, product updates, or legal requirements. Updates will be posted on this page with an updated revision date.