DATA PRIVACY POLICY

Merki Sociedade Individual de Advocacia (“Merki Advocacia” or “we”) is committed to the privacy and protection of personal data of users of its website, clientes – individual clients, legal representatives, and any individuals related to clients – partners, or any other natural persons who have a business relationship with Merki Advocacia (“Data Subject” or “you”), in accordance with the Brazilian General Data Protection Law No. 13.709/2018 (“LGPD”).

This Data Privacy Policy (“Privacy Policy” or “Policy”) clearly and transparently explains how Personal Data is processed by Merki Advocacia. Terms used in this Policy that are not expressly defined shall have the meaning assigned by the LGPD, as applicable.

2. What Data Is Processed

Depending on your relationship with Merki Advocacia, we may collect and process, directly or through third parties acting on our behalf, the following data:

• Full name, date of birth, nationality, CPF, RG, CNH, and other identification documents
• Address, phone number, email address
• Professional and academic data
• Banking and financial data

Personal data will be processed to the extent necessary to fulfill the purposes listed below. Data may be collected directly from the Data Subject, from public sources, or through a client (legal entity) with whom the Data Subject works, provides services, or has any other commercial relationship, provided that the client has legal grounds or consent to share such data.

3. Purpose of Processing

Personal Data will be processed exclusively for:

• Formalization of contracts with clients, invoicing, and collection
• Formalization of contracts with suppliers, service providers, and partners, and execution and receipt of payments
• Provision of legal services, including consultancy and training
• Fulfillment of legal and contractual duties
• Communication with the Data Subject
• Sending institutional communications, such as articles, event invitations, and event materials
• Satisfaction surveys
• Recruitment of professionals

4. Data Sharing

Data may be shared with:

• Software providers, cloud hosting services, and other technology services used for registration, storage, and execution of contracted services
• Public agencies and judicial, police, and administrative authorities, as well as regulatory bodies and other authorities
• Partner law firms
• Contracted service providers, such as accountants, auditors, billing and collection companies, IT consultants, financial institutions
• For the preservation and protection of our interests in disputes, such as in legal proceedings

Merki Advocacia may occasionally submit your data to national and international legal publications for the purpose of evaluating our services.

If you are a partner of Merki Advocacia, your data may be shared with clients and through communications related to the partnership.

5. Storage and Security

Merki Advocacia adopts reasonable security measures to ensure that your data is stored in a secure environment, whether physical or digital, with technical and administrative safeguards to prevent unauthorized access, loss, or leakage, in accordance with industry standards.

Despite the measures adopted, no security system is 100% secure and may be subject to failures, so we cannot guarantee complete security of your Personal Data.

6. Data Retention Period

Your data will be retained by Merki Advocacia (i) for the period required by applicable law; (ii) for the time necessary to fulfill the purposes described in this Policy, upon request by the Data Subject, in accordance with applicable law or legal determination; (iii) for the time necessary to preserve Merki Advocacia’s legitimate interests.

7. Data Subject Rights

The Data Subject may request:

• Confirmation of the processing of their Personal Data
• Access to the processed data
• Correction of incomplete, inaccurate, or outdated data
• Revocation of consent, if previously given, and deletion of data processed based on consent, within the limits of the law
• Data portability
• Anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data
• Information about the possibility of not providing consent and the consequences of refusal

The Data Subject may contact us via email at contato@merkiadv.com to make any of the above requests, providing their full name, CPF number (if applicable), and a description of the request. Merki Advocacia may request additional information and documents to confirm the requester’s identity.

Requests will be addressed as promptly as possible and responded to in accordance with applicable legislation.

8. International Data Transfers

Data may be transferred to service providers located abroad. Merki Advocacia will adopt appropriate measures to ensure adequate protection of data transferred internationally and will carry out such transfers only to the extent necessary to fulfill the intended purpose.

9. Cookies and Browsing Data

Merki Advocacia’s website may use cookies and similar technologies to enhance user experience, perform statistical analysis, and deliver personalized content. The Data Subject may configure their browser to refuse cookies, but this may affect certain website functionalities.

10. Questions or Requests

For questions or requests, the Data Subject may contact us via email at: contato@merkiadv.com.

11. Updates

This Policy may be updated periodically. The current version will always be available on the website.