INTRODUCTION

NJF INDÚSTRIA E COMÉRCIO DE MÓVEIS IMPORT E EXPORT LTDA. , a private legal entity, headquartered at Rua Anna Riffel, nº 364, CEP 89935-000, Bairro Área Industrial, in the city of Princesa, State of Santa Catarina, registered with the CNPJ under nº 12.218.680/0001-01, hereinafter referred to as GRUPO SOLLOS, owner of the electronic address https://sollos.ind.br/ (“site” or “platform”), in order to provide information on how it processes personal data, presents its Privacy Policy (“Policy”). This Policy was prepared based on the terms of Federal Laws nº 13.709/18 (Personal Data Protection Law or LGPD), 12.965/2014 (Marco Civil da Internet) and other applicable legislation. It is important that you read and understand this document and, if you have any questions, contact GRUPO SOLLOS through the channels provided at the end of the document.

This Policy uses technical concepts provided for in applicable legislation, especially those set forth in Article 5 of the LGPD (Brazilian General Data Protection Law). To facilitate reading, the main concepts used are indicated below:

Controller: a natural or legal person, governed by public or private law, who is responsible for decisions regarding the processing of Personal Data.

Personal Data: any information relating to an identified or identifiable natural person, that is, information that directly identifies a person, such as full name, CPF (Brazilian tax identification number), RG (Brazilian identity card), photograph, or that indirectly identifies them, such as email address, IP address, location, for example.

Operator: a natural or legal person, governed by public or private law, who processes Personal Data on behalf of the controller.

Data subject: the natural person to whom the personal data being processed refers.

Processing: any and all operations performed with Personal Data, whether by the Controller or the Processor, such as collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, elimination, evaluation or control of information, modification, communication, transfer, dissemination or extraction.

As a general rule, the SOLLOS GROUP will act as the Controller of Personal Data under its responsibility, and may in some cases share it with other Controllers or Operators, as explained further below.

The Personal Data processed by the SOLLOS GROUP can be classified according to origin as:

1) Data provided by the Data Subject or by companies with which the Data Subject has an employment relationship: Data provided by express and conscious action of the Data Subject, such as when the Data Subject registers on our website, enters their data in the "Contact" field, or when their employer provides us with their data (e.g., service providers);

2) Data collected or generated by the Site: This category includes all information that we will generate or collect about you indirectly (in the background or through third parties) whenever you interact with the site. This includes browsing information generally collected through cookies. For more information, please see the specific section on Cookies and similar technologies in this Policy.

When does the treatment take place?
Customer interactions

What data is processed?
Name; Taxpayer Identification Number (CPF); Address; Email; Phone Number; Bank Details (bank account, credit card).

For what purposes?

• Complete the customer registration in internal systems;
• Process and deliver your orders;
• To facilitate the receipt of payments, sending of invoices, payment slips, and other actions related to the execution of the contract;
• Fulfill legal obligations of a fiscal nature (e.g., issuing invoices, GNRE payment slips, including information in the tax authorities' systems, among other necessary legal conditions);
• Track goods and inform the customer of their location and estimated delivery date (upon customer request);
• Send proof of delivery of the merchandise to the customer;
• Share the delivery receipt with the sender, recipient, or freight payer for proof of delivery purposes;
• To regularly exercise rights, such as debt collection, credit reporting, legal defense of interests, etc.

When does the treatment take place?
Interactions with suppliers of inputs and services.

What data is processed?
Name; CPF (Brazilian Individual Taxpayer Registry); Driver's License Number (CNH); INSS (Brazilian Social Security Number); PIS (Brazilian Social Integration Program Number); CTPS (Brazilian Work and Social Security Card); Email; Address; Phone Number; Vehicle Registration Certificate (CRLV); Bank Details.

For what purposes?

• Interact commercially with supplier representatives to negotiate and acquire raw materials and services;
• Making business contacts for scheduling, obtaining quotes, and contracting truck maintenance services;
• To identify the drivers of the third-party transport companies contracted by the clients;
• Register drivers to: complete the hiring process; authorize access to warehouses; and process payments.
• Verify the delivery note to authorize the shipment of products from customers, recording the names of the drivers responsible for the cargo;
• Making contacts regarding shipments, delivery forecasts, scheduling, etc.;
• Perform legally mandated tax withholdings;
• Manage the contract signed with suppliers of inputs and services;
• To monitor compliance with safety standards, labor obligations, and social security regulations in the provision of services.

When does the treatment take place?
Contact environment

What data is processed?
Name; Email; Phone number; Subject and message

For what purposes?

• To receive, analyze, and provide clarification on contacts received from data subjects through the Site.

When does the treatment take place?
While browsing the website

What data is processed?
Browsers used; Pages visited; Ads viewed; Type of device used; IP address; Average access time to the platforms.

For what purposes?

• To improve and customize the site's functionalities;
• Enable website functionalities;
• Target personalized advertising content to the Data Subject.

When does the treatment take place?
Interactions in physical spaces of the SOLLOS GROUP

What data is processed?
Name; CPF (Brazilian tax identification number); Images.

For what purposes?

• To carry out security monitoring in physical spaces;
• Identification at guard posts, entrances, and reception areas for people entering the organization's physical buildings.

When does the treatment take place?
Job applications

What data is processed?
Name; Phone Number; Email; City; State; Desired Position; Other personal information included in the resume provided by the applicant.

For what purposes?

• Identify the Candidate;
• Conduct screenings and contact candidates for job openings;
• Proceed with the curriculum evaluation, analyzing its compatibility with the job criteria and profile sought by GRUPO SOLLOS;
• To proceed with interviews, administer tests, and, if necessary, conduct examinations or prepare psychological reports.

If you are interested in participating in the GRUPO SOLLOS selection processes through partner portals, such as recruitment and selection companies, etc., it is important that you read and understand the Privacy Policies of these partners.

The SOLLOS GROUP may also share the aforementioned Personal Data with third parties, always under its supervision, in the following circumstances:

• Logistics and Delivery: During the logistics management procedure for the delivery of goods, we may share data with freight forwarders, cargo terminals, and transportation companies that are partners of the SOLLOS GROUP.
• Data storage: We can share data with companies specializing in data storage and processing (storage providers, cloud software).
• Online Platform Management: We may also share data with website development and hosting companies for the management and maintenance of the infrastructure that ensures the operation of our websites.
• Claims Management: If any of our vehicles are involved in an accident, we may share data with public authorities for the preparation of records such as a police report. In addition, the police report may be shared with service providers responsible for any process related to the accident, such as insurance companies, cargo removal companies, and highway cleaning services.
• Support for GRUPO SOLLOS processes: To enable the fulfillment of contracts signed between Clients and GRUPO SOLLOS, we may share data with companies specializing in auditing, technical assistance, accounting, legal services, etc.
• With public or private entities: We may share data with public entities to comply with court orders or legal obligations.

The SOLLOS GROUP does not carry out international data transfers; however, in any case of sharing with partners located in other countries, we will contractually establish that the partner has the duty to maintain data protection and information security standards compatible with this Privacy Policy and the LGPD (Brazilian General Data Protection Law).

Cookies, tags, pixels, or similar technologies (hereinafter generically referred to as "Cookies") are small files sent by the website to the device, which are stored in the browser used by the User, containing information related to their interaction with the website. This information allows the website to recognize the User and create a behavioral profile about them.

The most common functions of cookies are to enable and personalize browsing, target marketing, and conduct statistical surveys to guide companies' market strategy. According to the Glossary of Personal Data Protection and Privacy of the ANPD (Brazilian National Data Protection Authority), cookies in general can be defined as follows: asdasd

Necessary Cookies: Cookies used to enable the website or application to perform basic functions and operate correctly. These cookies do not identify you and cannot be disabled without affecting or even preventing the operation of our website.

Non-Necessary Cookies: Cookies that do not meet the definition of necessary cookies and whose disabling does not prevent the website or application from functioning or the user from using the services. These cookies collect information that may
This identifies the user and can be disabled.

Analytical or Performance Cookies: Cookies that allow us to collect data and information about how users use the website, which pages they visit most frequently on that website, the occurrence of errors, or information about the performance of the website or application itself. These cookies collect information that can identify the User and can be disabled.

Functionality Cookies: Cookies used to provide basic services requested by the user and to remember site or application preferences, such as username, region, or language. These cookies collect information that may identify the user.
Users can be disabled.

Advertising Cookies: Cookies used to collect information from the user for the purpose of displaying advertisements. More specifically, by collecting information about the user's browsing habits, advertising cookies allow for identification, profiling, and the display of personalized advertisements according to their interests. These cookies collect information that can identify the User and can be disabled.

Session or Temporary Cookies: Cookies designed to temporarily collect and store information while users access a website. They are usually discarded after the session ends, i.e., after the user closes the browser. They are regularly used to store information that is only relevant to providing a service requested by users or for a specific temporary purpose. These cookies do not identify the User and can be disabled; however, disabling them may affect the proper functioning of our website.

Third-party cookies: Cookies created by a domain different from the one the user is visiting. They result from functionalities of other domains that are incorporated into a web page, such as the display of advertisements. These cookies collect information that can identify the user and can be disabled.

First-party or first-party cookies: Cookies set directly by the website or application the user is visiting. These types of cookies may include information such as login credentials, shopping cart items, or preferred language. These cookies collect information that can identify the user and can be disabled.

Cookies found on this website can be managed in the settings of the internet browser used by the User. To this end, we provide links to manage cookies for the most popular browsers on the market (addresses may vary depending on the browser version):

• Internet Explorer
• Microsoft Edge
• Mozilla Firefox
• Google Chrome
• Safari
• Opera

Data subjects may request the following via email at privacidade@jaderalmeida.com :

• Confirmation of the existence of treatment;
• Access to your Personal Data processed by the SOLLOS GROUP;
• Correction of incomplete, inaccurate, or outdated data;
• Anonymization, blocking, or deletion of unnecessary, excessive, or processed data in violation of the LGPD (Brazilian General Data Protection Law);
• Data portability to another service or product provider, respecting commercial and industrial secrets;
• Deletion of Personal Data processed with your consent;
• Information on public and private entities with which the SOLLOS GROUP has shared data;
• Revocation of consent (when the processing is based on this legal basis);
• Request a review of decisions made solely on the basis of automated processing of Personal Data that affect your interests, including decisions intended to define your personal, professional, consumer and credit profile or aspects of your personality.

We will fulfill requests within the legal timeframe. However, if there is legal basis, some requests may be partially granted or even denied, in which case we will provide the necessary clarifications and justifications.

Personal data will be kept by GRUPO SOLLOS or authorized third parties for as long as necessary to fulfill its purposes. Personal data will only be kept for a period sufficient to guarantee the achievement of the purposes indicated in this Policy. Beyond that, data may be kept (i) to comply with legal obligations; (ii) in cases of legitimate interest, as legally defined; and (iii) when a public authority so determines.

With some precautions, the Data Subject can contribute to a safer relationship regarding the processing of their Personal Data. Below are some tips:

• Notify the SOLLOS GROUP of any and all suspicions or findings of violations of this Policy, such as the misuse of your Personal Data by third parties;
• Provide the SOLLOS GROUP with truthful and complete information and always keep it updated;
• Refrain from interacting with the SOLLOS GROUP in any way that involves the illegal processing of third-party Personal Data;
• Do not pay any invoices allegedly sent by GRUPO SOLLOS without first verifying the document's authenticity by checking the amount, barcode, financial institution, and beneficiary.

For any matter related to the processing of Personal Data, the SOLLOS GROUP can be contacted through the Data Protection Officer:

Supervisor: Fernanda Rech
Email: privacy@jaderalmeida.com .

This Policy was published on January 14, 2026, and may be updated, with updates being duly communicated.

NJF INDUSTRY AND TRADE OF FURNITURE IMPORT AND EXPORT LTDA.