Private Policy


Welcome to our Privacy Policy! BR MALLS PARTICIPAÇÕES S.A., its affiliated companies in Brazil and the shopping centers managed by the group companies, are committed to protecting your privacy, in accordance with the rules relating to the protection of privacy and personal data.

This privacy policy clarifies how brMalls handles personal information collected and used in the context of the activities carried out by brMalls and its relationship with its customers. In these contexts, brMalls is the controller responsible for the processing of your personal data.

For the purposes of this Privacy Policy, "User" or "You" means any and all individuals who use or have access to the websites, applications, online platforms, Wi-Fi, customer service and/or any sales and delivery channels provided. by brMalls; access and/or frequent shopping centers in which brMalls manages; or, that participates in opinion polls, promotions, and/or events carried out by brMalls or by one of the shopping centers in which brMalls manages.

This Privacy Policy only applies to cases in which brMalls performs the processing of personal data. It will not apply to the processing of personal data carried out by other companies or individuals, retailers, websites or other third parties, including any brMalls partners. We encourage You to consult the privacy policies of these other companies to understand how they treat your personal data. brMalls will not be responsible for the processing of personal data in these cases.

This Privacy Policy was last updated on 6/25/2021


  • Name, address with zip code, telephone, date of birth, gender, e-mail, ID, CPF;
  • Complementary identification information, provided when You use a service (SAC), record an occurrence or participate in any of our promotional actions, surveys and/or events (such as, for example, profession and/or education level);
  • Data related to your vehicle, such as your driver‘s license number, license plate;
  • Financial and payment data, to the extent permitted and in accordance with criteria established by applicable law;
  • Information about your consumption;
  • Technical information collected from the device You use to access our website, applications, online platforms, wi-fi (IP, Mac Address, IMEI, Location, among others possible);
  • Information We receive about You from third parties, including from publicly available databases, information You voluntarily make available to the general public (such as your profile, posts or information on social media);
  • Your image, including video, sent by You through our website, applications and online platforms or captured through closed circuit systems in shopping malls.

Sensitive Data. According to the legal definition, sensitive personal data are those related to: racial or ethnic origin, religious conviction, political opinion, affiliation to a union or organization of a religious, philosophical or political nature, data relating to health or sexual life, genetic or biometric data ("Sensitive Data"). In the event of capturing such data, it will be carried out following the criteria required by the applicable legislation.

Children and Adolescents Information. We collect information from children with the consent of a legal guardian or when collection is necessary for the protection of the child. We may collect information from teens only in their best interest, to fulfill requests or provide a requested product or service.

Update. From time to time, we may ask you to update your registration data.


We collect your information in a variety of circumstances, including:

  • When creating your registration in one of our Activities, your registration may be associated with other information that we collect or that You provide to us;

  • When You visit a shopping center in which brMalls manages;

  • When You access, request or use one of brMalls‘ Activities, including, but not limited to, our websites, applications, online platforms, sales and delivery channels and Wi-Fi;

  • When You record a service request or an occurrence, such as compliments, complaints and suggestions to brMalls;

  • When we work with business partners who have information about You, collected independently and for the purposes described in Section 3, below.

Data collected online. As You access the Activities, especially our websites, applications and Wi-Fi, technical information regarding your device or connection may be obtained by brMalls, such as IP address, browser used, SSID and signal strength of nearby wireless networks, type and brand of mobile device, mobile device identifiers, operating system version, network information, Internet connection provider used, device configuration and software data.

When You use our websites, applications and Wi-Fi, we may also use cookies or other similar technologies to learn how You interact with our content and to improve your experience when visiting our website. These technologies allow statistical analysis of usage of a particular application, offering or development of features, but may also allow identification of devices, browsers, technical information, user profiles, to personalize content, including advertising, while You access the Activities. Cookies and similar technologies from third-party companies are subject to their privacy policies, not this Policy.

You can manage these technologies through your device settings or web browser. The configuration of these technologies, however, may affect some features offered by our online platforms.

Information collected from third-party databases. brMalls may also obtain information about You from public and private databases, such as business partners, when You link your login to them, as well as from other service providers, provided that your information has been obtained in accordance with applicable law and can be shared with brMalls.


Your personal data is used for the following purposes:

  • Make available, provide, provide and maintain our Activities;
  • Promote your safety, when you go to the malls in which brMalls manages;
  • For purposes of recording and resolving incidents, such as lost ticket or return of lost and found;
  • To get to know you better as a customer, providing promotions, offers, discounts and benefits, according to your information, profile and/or location;
  • For advertising purposes and advertisements about brMalls and/or third party products and services, including targeted advertising, in the context of our Activities;
  • to allow the provision of services by third parties that are commercial partners of brMalls, such as, for example, services related to parking;

  • to communicate with You, including through service announcements, dissemination of events, news, newsletters, notifications, SMS, messages via apps such as WhatsApp, social networks and/or marketing related to our Activities;

  • to comply with requests made by You in connection with the Activities;

  • to conduct or support commercial promotions, contests or sweepstakes when You choose to participate in such activities;

  • to generate analysis and statistical reports on the functioning and operation of the Activities, for the benefit of brMalls and its business partners, aiming at improving the services provided/available to You;

  • customize, develop and improve our Activities and functionality by combining and using the information we have about You, such as the way You interact with the Activities, the resources You use the most, the content You interact with the most and your preferences in general;

  • carry out satisfaction surveys on the Activities;

  • to detect, identify, deter and defend against fraudulent, abusive or illegal activities;

  • comply with legal obligations to collect, retain and/or share data, including with government authorities, pursuant to applicable laws and regulations;

  • for the exercise of brMalls‘ rights in administrative, arbitration or judicial proceedings, in accordance with the law, and for the defense of brMalls, its rights, assets and legitimate interests.


brMalls may share your information:

  • with business partners, to fulfill the purposes set out in this Privacy Policy and/or support activities, such as parking operators, and such business partners may be controllers of your personal data as they establish a direct relationship with You;
  • for brMalls service providers acting on behalf of brMalls and for its benefit in carrying out the purposes set out in this Privacy Policy, and such service providers will not have a right to use their information, except for those necessary for the execution of the respective service provision;
  • in the event of an accident occurring on the premises of Shopping Centers in which BrMalls holds an interest, data relating to the vehicle‘s license plate may be shared with authorities;
  • when You request or consent to sharing;
  • to bodies, authorities and other entities of the Public Power, as well as to individuals or legal entities of a private nature, in compliance with a legal obligation or a court order;
  • for the exercise and defense of any rights of brMalls, at its discretion, including within the scope of legal or administrative proceedings;
  • in the event of a change in the ownership or control of brMalls or of a shopping center in which brMalls holds an interest and manages, due to a merger, acquisition, spin-off or sale of assets, and its information may be transferred to the new owner, at its discretion from brMalls.

brMalls does not sell or offer Users‘ personal data to companies, organizations or other individuals outside of brMalls.

International Transfer of Personal Data. brMalls has business partners and service providers in Brazil and abroad and, in this sense, uses a technical infrastructure on a global scale, with the objective of optimizing the efficiency, performance and safety of the Activities.

Therefore, your personal data may be transferred to other countries, for data processing and storage, in accordance with the terms and purposes defined in our Privacy Policy, as well as for the provision of the Activities requested by You.

brMalls may process your personal data, including storage, in Brazil or abroad. In any case, brmalls will adopt the necessary technical and legal measures and safeguards to ensure compliance with this privacy policy and your rights related to the protection of personal data.


  1. The information collected by brMalls may be stored directly by brMalls and/or by brMalls service providers. brMalls will adopt security standards to protect the integrity, confidentiality and availability of the information stored as set out below.

How Long Do We Keep Your Information? Your information is processed and maintained for the period necessary to provide the Activities, while You remain using or linked to one of our Activities; to fulfill the purposes set forth in Section 3; and to handle any demands, as well as to comply with applicable legal, accounting or regulatory requirements. The minimum storage period will be of 5 (five) years, being, at brMalls‘ discretion, the reduction of this period, considering, among others, the engagement or connection of the data subject to our Activities.

Safety. brMalls adopts reasonable security, technical and administrative measures to prevent irregular or unlawful processing of Users‘ personal data, including unauthorized cases of access, destruction, loss, alteration or communication of data. These measures include physical, operational and technological protections, including the control of access to information, the use of security software and the training of our employees.

Security measures apply to your information only from the moment brMalls receives it and while it is in its custody. The operation and security of the device You use to access the Activities, as well as third-party networks through which the data travels, is not the responsibility of brMalls.

Links to Third Party Websites. The Activities, advertisements and other communications may from time to time contain links to and from third party websites. The personal data that You provide on these sites are not subject to this Privacy Policy, and the processing of your personal data by such sites is not our responsibility.


The following rights of the holder of personal data may be exercised as applicable, upon User‘s request:

  • confirmation of the existence of processing of personal data;
  • access to personal data;
  • correction of incomplete, inaccurate or outdated personal data;
  • anonymization, blocking or deletion of unnecessary, excessive or processed data in violation of the provisions of the LGPD;
  • portability of personal data to another provider of a service or product, subject to national authority regulation;
  • deletion of personal data processed on the basis of your consent, except when the law authorizes the maintenance of these data for another reason;
  • information about public and private entities with which BrMalls has shared use of your personal data;
  • information about the possibility of not giving consent to the processing of your personal data and about the consequences of such action; and
  • revocation of its consent, when the processing has been carried out on the basis of the holder‘s consent.


If you wish to exercise any of these rights or wish to obtain further clarification on the application of this Privacy Policy, please contact us, through the Data Supervisor at the email address , using the channel‘s Privacy Channel Data or by the electronic address .

We will be happy to clarify any doubts and/or respond to your request. Please note that under applicable law, we reserve the right to verify your identity before we respond to your request.

brMalls may keep certain personal data stored and/or anonymize them, after your request for deletion, as and to the extent authorized by applicable law.

If you request the deletion of your information, but still have an outstanding obligation to comply with brMalls, your information will not be deleted and will remain stored for the purpose of enabling the solution of the pending issue and the adoption of appropriate measures.


This Policy may be periodically updated.

All changes must be considered as applicable and effective immediately, unless otherwise communicated by brMalls to the data subjects.

brMalls will take reasonable steps to notify Users of updates under this Privacy Policy.


The GDPL (General Data Protection Law), Law No. 13.709/18, entered into force in September 2020 and establishes rules for the use, collection, storage, processing and sharing of users‘ personal data by public and private companies.

brMalls is committed to adapting the company‘s processes to comply with the law and, in this regard, we inform you that Marina Moreira, Deputy Director of Legal Affairs, has been designated brMalls Data Protection Officer (DPO - Data Protection Officer), responsible among others, through communication with ANPD, whose electronic contact is

We remain available for any questions or further clarification, through the contact channels: or