Version updated on October 2023
1. PERSONAL DATA PROCESSED BY HOTMART COMPANY
2. WHAT ARE THE PURPOSES OF PROCESSING OF PERSONAL DATA
3. LEGAL BASES OF PROCESSING
6. SHARING OF PERSONAL DATA
7. INTEGRATIONS AND THIRD PARTY PARTNERS
8. INTERNATIONAL TRANSFERS
11. PROCESSING OF CHILDREN'S PERSONAL DATA
12. CONTACT INFORMATION
This Policy may be modified at any time, so it is important that you always review its terms. When substantial alterations are made to this Policy, you will be informed by email if you are a User registered on the Hotmart Platform or with the services provided by Hotmart Company. This Policy and its respective updates prevail over any prior proposals, contracts, understandings or agreements, whether verbal or written, that may have existed between you and any one of the companies of the Hotmart Company, especially concerning privacy or personal data.
B. To facilitate the reading of this Policy, we offer a Glossary, which gives the meaning of expressions beginning with capital letters in the Hotmart Terms, as well as in this or in other Policies of companies of Hotmart Company. Furthermore, it is important that you understand the specific meanings of the expressions below used in the context of protection of privacy and highlighted in the Terms, in this Policy or in other Policies of Hotmart Company companies without capital letters:
“Personal data”, in the singular or in the plural, means any information that identifies the User or which makes their identification possible. So as generic as this may appear, personal data may be any information that identifies you directly or any information which functions as a piece in a puzzle that leads to your identification.
“Processing”, as well as the verb “process”, means any operation done with personal data, such as that which refers to the collection, production, receiving, classification, use, access, copying, transmission, distribution, processing, filing, storage, deletion, evaluation, control, modification, communication, transfer, diffusion or extraction.
“HotPay Services”, Hotmart may allow their partners (such as financial institutions, payment institutions responsible for the issuing of cards under the license of major credit card companies, the major credit card companies and correspondent banks) to offer their services in an aggregated form such as, for example, the provision of the Card to the UsersFor more information about Hotpay Services, access Hotmart's General Payment Policy.
“User account Data”: means data relating to the User which are necessary for the provision of the services offered by Hotmart Company.
“Creator account Data”: means the data which are processed by Hotmart in the name of the Creator, when the personal data is transferred to the Creator and/or extracted, collected and/or generated directly by the Creator. The rules for the processing of personal data between Hotmart and Creator are established in the Term of Personal Data Processing.
Personal Data. The personal data processed by Hotmart Company (“User account Data" and “Creator account Data”) may vary, in accordance with each one of the respective companies and their processing of personal data practices, as well as depending on the type of interaction of the User with the Platform or with each of Hotmart Company.
These personal data may be collected directly from the User, obtained from third parties or collected automatically.
The personal data may involve, by way of example: (a) registration information, such as email, full name, address, telephone, cell phone, identification documents, profile photo, and passport; and (b) banking information, such as the name of the financial institution with which the User has a bank account, account number, type of account, branch, the first six and last four digits of the credit card, including the name of the holder.
Below is a list of the personal data collected by Hotmart Company, shown in categories and different forms of collection for ease of understanding.
1.1. Personal Data collected directly from the User. Hotmart Company may collect personal data directly from you, when you, for example, set up an account, initiate a process of purchase directly via checkout and/or interact with Hotmart Company through any means, including by our chatbot.
1.2. Interaction “offline”. Hotmart Company may collect personal data when you interact with them by means other than access through the Platform, such as, for example, your registration data or your image when you participate in an event organized by Hotmart Company or an event organized by a third party whose activity is contractually linked to Hotmart Company.
1.3. Optional fields. The Platform provides certain fields for optional completion. These fields are marked as optional and have the purpose of improving the personalization of content provided to the User.
1.4. Public data. Hotmart Company consider some personal data as public, because they may be seen by any person, within or outside of the Platform, including if this person does not have an account on the Platform. The information is considered as public data that you enter in the fields marked as “public data”. You, other persons that use the Platform and Hotmart Company themselves may provide access or send public data to any person outside of the Platform. It is also possible to view, access, share once again or download public data through tools of third parties, as well as search mechanisms, APIs and offline media, or through applications, sites and other Services of Third parties.
1.5. Personal data obtained from third parties. Hotmart Company may have access to certain personal data through third parties, whether they be registration or bank information. This happens, for example, when, due to compliance with legal or regulatory obligation, a Hotmart Company needs to consult databases maintained by third parties that enable the analysis of credit restrictions, anti-fraud analyses and other analyses of risk management integrated into the Platform. Hotmart Company also collect registration information through third parties when you sign up, connect to or log in to the Platform through a Third Party Service (for example, Facebook). Hotmart Company may also have access to the registration information through third parties for enrollment in events, surveys, publicity campaigns and other activities organized by these third parties, whose activity is contractually linked to Hotmart Company.
1.6. Personal Data collected automatically to access the Platform. Personal data is collected automatically when you access the Platform, even if you do not have an account on the Platform. This information may include that given as examples below.
1.6.1. Transaction payment information: an instrument of payment used; date and time of the transaction; the amount of the payment; date of expiry of the instrument of payment; billing postal code; IBAN information, address and other details related to the payment transaction.
1.6.2. Access or use information: pages and content you view; searches by ads; frequency of use of the Platform; information about your browser; connection data; purchase history and browser history.
1.6.3. Device information and log data: details on how you accessed and used the Platform (including links accessed); IP address; dates and times of access; hardware and software information; device information; device event information; exclusive identifiers (for example, Hotmart ID); fault data; cookies data, pixel and similar technologies (see Cookies Policy) and the pages you viewed or interacted with before and after accessing or using the Platform.
1.6.4. Cookies, pixels, and similar technologies, as described in the Cookies Policy.
1.6.5. Participation in Creator content. When you sign on to a course, use or access to other Creator content, we collect personal data relating to your participation in Creator content, such as courses you have enrolled on, test results, your progress and certifications.
1.7. Creators' payment information. We use third party payment gateways to process payments made through the Platform. For payments processed by the native payment gateways of some of Hotmart Company, third parties provide us with information related to the payment status of your account, with you having to link your payment account to the Platform to receive your payments. When linking to your account, we receive certain information related to your payments, including the type of your payment card and its last 4 digits, your postal code, country of origin, date of expiration, and your email address associated with the type of payment. Besides this, we collect certain personal information for tax purposes, which may include your full name, address and registration number. Our outsourced payment gateways are independent and have their own privacy policies. For further information on how your payment data is processed and stored, we recommend that you analyze the privacy policies of the payment gateways.
1.8. Participation in Creator content. When you enroll in a course, Coaching service or use or access other Creator content, we collect personal data relating to your participation in Creator content, such as courses you have enrolled on, test results, your progress, and certifications.
2.1. Purposes of the processing of User Personal Data. Hotmart Company may use the personal data for the following ends:
2.1.1. Providing and developing the Platform:
2.1.2. Supplying and optimizing publicity and marketing activities
2.1.3. Enabling HotPay Services
2.1.4. Maintaining a secure environment
2.1.5. Purposes of processing Visitor's Personal Data. We may collect personal data of visitors to the Platform for the following purposes:
3.1. Legal Bases. The processing of personal data by Hotmart Company is always founded on a legal basis provided for in the applicable legislation. The legal bases used by Hotmart Company may vary depending on the context of processing, and include the following:
3.1.1. Consent. When the User accepts the processing of personal data, for example, when agreeing to receiving advertising or survey communications. This consent may be cancelled at any time by the User.
3.1.2. Compliance with legal or regulatory obligation. When a Hotmart Company is obliged to process personal data due to a legal or regulatory determination, for example, such as when a Hotmart Company stores access records for the purposes of compliance with legislation on money laundering prevention.
3.1.3. Execution of Contract or procedures related to the Contract. When the processing of personal data is necessary for the execution of a contract signed between a Hotmart Company and the data subject, or when necessary for procedures preliminary to the contract, for example, such as when we need to process your payment data at the time when you purchase on the Platform.
3.1.4. Exercising regular rights in a judicial, administrative or arbitral process. When there is the need to process personal data due to judicial, administrative procedure, or arbitral action.
3.1.5. Legitimate interest. When a Hotmart Company decides to proceed with the processing of personal data after a careful analysis involving the evaluation of the purpose and need of the processing the User and the expectation of the User in the processing of Personal Data. This legal basis is used when, for example, Hotmart sends out a newsletter related to the User's interests, considering their interaction with the Platform to help in the support and promotion of Hotmart Company and enteprisies’ activities. In this case, Hotmart Company always allow the User the option to cancel the receiving of these communications.
4.1. Processing of Personal Data at the Request of Third Parties. There is personal data processed by Hotmart Company at the request of third parties. Hotmart Company process these personal data according to rules formalized with these third parties through written contracts. For example, the Creator may request, through the Platform, additional personal data from the Purchaser (“Creator Data”). The types of Creator Data may vary depending on the specific orientation of the Creator.
4.2. Processing of Personal Data relating to HotPay Services. Hotmart Company may also process certain personal data in the name of third parties when you opt to use HotPay Services. For more information about Hotpay Services, access Hotmart's General Payment Policy.
4.3. Responsibility for the Processing of Personal Data by Third Parties. The third parties referred to in the previous items are also processing agents responsible for the personal data in the context of offering their products and services. Particularly the third parties may be the Creators whose responsibilities and attributions are established in the Term of Processing of Personal Data.
5.1. Processing Period. The personal data is processed by Hotmart Company until at least one of the circumstances described below is reached:
5.2. Conservation of Personal Data. In certain situations, Hotmart Company may conserve the personal data residually even after the circumstances of the end of processing of personal data, due to compliance of a legal or regulatory obligation, or even in circumstances in which there is a legitimate purpose of Hotmart Company. In these cases, the personal data will be stored in a secure place with restricted access and for the time necessary to comply with the legal or regulatory obligation, or until the end of the legitimate purpose of Hotmart Company.
5.2.1 The periods of conservation of the personal data is different and depend on the type of information and the objectives for which we use the information. For more details on the period of retention of a given category of personal data, please contact us through the form.
6.1. Hotmart Company only share personal data with third parties in the circumstances described below. These third parties sign a written contract with Hotmart Company and are aware of their responsibilities at each stage of the processing, principally of the duty to implement security measures that meet the requirements of the contract and of the legislation applicable. Hotmart Company does not sell personal data.
6.1.1. User Consent. When you give your consent, we share your information as described at the time of the consent – for example, such as authorizing the sending of personal data to third parties to enable participation in events.
6.1.2. Compliance with the law, prevention of damages and security. When there is a need to share personal data with third parties in order to (a) prevent fraud (for example, such as money laundering risk analyses), which may involve automated decisions; (b) verifying a list of Users with restrictions; (c) authenticating documentation sent; (d) enabling a support service; (e) avoiding illegal activities; (f) proceeding matters of disputes between Users; (g) proceeding matters of internal investigations relating to any conduct which may violate the rules of the Terms or of the Policies of Hotmart Company.
18.104.22.168. You agree and authorize Hotmart to process, store and share your personal data, for the purpose of supporting procedures aimed at controlling and preventing fraud, in accordance with the guidelines established by the competent authorities.
6.1.3. HotPay Services. The personal data may also be shared with third parties when the User, in any way, makes use of the HotPay Services, in particular when the User opts for the Hotmart Card. The personal data, including the card number, will be shared with the credit card company and with the partner payment institution of Hotmart Company. This sharing is for the purposes of processing payment, providing the card services, preventing, detecting and investigating any fraud or restriction lists, facilitating in resolution of disputes involving reimbursement or chargeback.
6.1.4. Between Companies of their Business Group. The sharing of personal data may occur between the parent companies, subsidiaries, affiliated companies or ones under common control of Hotmart, or any companies of the Group, to enable the Services of Hotmart Company, to generate administrative efficiencies and to facilitate the use of various services by the same User. Hotmart Company may also share your personal data in transaction scenarios involving part or all of our business, such as a sale of a business unit, acquisition, merger, consolidation, or in the event of bankruptcy or judicial recovery.
6.1.5. Service Providers. Your personal data may be shared with third parties involved in the activities of financial, accounting, legal advice, non-profit activities and potential investors, as well as third parties involved in the provision of data backup, cloud computing services providers or to carry out analytic studies.
6.1.6. Sharing Information between Users. When you participate with Creator content, Hotmart Company will share certain information with the Creator to allow the Creator to supply the services to you. This information includes: (a) information of the account, such as your name and email address; (b) payment information , such as the amount paid, your address and other billing information, but never the complete number of your credit card; (c) your IP address; (d) information on your participation in the content of the Creator, including your enrollments, progress, results of tests and certificates; (e) any message you have exchanged with the Creator through the Platform. Another situation may occur when you use the Services of Hotmart Company to publish Creator content, information contained in your Creator content will be visible to the Users which have access to the Creator content . For example, when you publish your bio on the sales page, personal data from your bio will be visible to the people who visited the sales page.
6.1.8. With Business Partners. Hotmart Company may make partnerships with third parties to offer events, promotions, competitions and other programs. To take part in these offers, you may be requested to provide your email address and other personal data.
6.1.9. With Advertisers and Data Analytics Providers. We may share your Personal Data with advertisers, advertising networks and providers of data analytics through cookies or other technologies.
6.1.10. With Governmental, Police Authorities or the Judiciary. Hotmart Company may be obliged to share your personal data with governmental, police authorities or with the judiciary, whenever necessary to comply with a judicial order or request from the respective authority.
7.2.1. Hotmart's app use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the limited use requirements.
8.1. International Transfers. Hotmart Company may transfer your personal data to countries other than that where you are located. Hotmart Company adopt the measures required by law, when such exists and is applicable, to ensure the protection of these personal data. In jurisdictions where the legislation or regulation in effect has no specific criteria or clear rules for international transfers of personal data, Hotmart Company will adopt good practices to protect your personal data, signing contracts with the receiving parties of the respective information that establish measures in accordance with the rules of the place where the personal data were collected initially.
9.1. Rights: Depending on the law applicable to the processing of your personal data, you may have certain specific rights in relation to your personal information, which may be exercised through this form.
A list of the applicable rights are given below:
9.2. To speak with the person responsible for the personal data protection, get in touch using this form.
9.3. Whenever any Hotmart Company is acting in the name of third parties, and the User decides to seek satisfaction of their rights through a Hotmart Company, we may attend, in certain circumstances, to this request, if applicable.
9.4. If you wish to cancel the sending of newsletters, emails, telephone calls or SMS publicity, you may do this through the link provided in the communications themselves.
9.5. Hotmart reserves the right to refuse to attend to requests that are manifestly unfounded and/or excessive.
9.6. All the rights above applicable in your jurisdiction may be exercised by you at any time, at no cost, except for the charging of a fee as permitted in accordance with the legislation or regulation in effect, and Hotmart Company undertake to make their best efforts to attend to the requests transparently and in an agile manner.
9.7. To guarantee that the rights are being exercised by you or by your duly constituted legal representative, Hotmart Company may ask for the information or proof necessary of your identity, in order to avoid fraud and to guarantee your privacy, so that your personal data is not shared to those with no authorization for such.
9.8. We will attend to your requests within a reasonable period, in accordance with the applicable legislation, remembering that we shall only respond to some requests after having received the confirmations provided for above.
9.9. In certain cases, such as when your request is particularly complex or when we receive a high volume of requests at the same time, our response may not be as quick as we would like it to be. On these occasions, we will always keep you informed and up to date with the progress of your request.
10.1. Security Measures. Hotmart Company employ security, technical and organizational measures necessary to protect the personal data processed. The efforts aim to mitigate the risk of the destruction, accidental or illegal loss, alteration, disclosure or unauthorized access or any other form of illegal or unauthorized processing. To this end, Hotmart Company have rigid controls of restricted access, based on levels of privilege, to the information technology systems to protect the personal data against any security incident. For more information, access the Cybersecurity Policy.
Although Hotmart Company implement these measures to minimize the risk of security incidents and undue access, it is not possible to guarantee the absolute security of your data, especially against attacks perpetrated by ill-intentioned persons, who may be highly sophisticated and innovative, with techniques and methods unknown up to that point, even with the best information security tools.
The security of your data will also depend on the adoption of reasonable measures by you in the use of your devices and software.
11.1. Personal Data of Children. Hotmart Company do not collect nor consciously request personal data of children under the age of 13. If we become aware that personal data of a child under the age of 13 has been collected, we will cancel the account set up on the Platform and will exclude the personal data, only keeping personal data we have with the objective of avoiding any new attempt at registration.
For Users located outside the European Union:
Launch Pad Tecnologia, Serviços e Pagamentos Ltda.
Avenida Assis Chateaubriand, nº 499, Bairro Floresta
Belo Horizonte, Minas Gerais, Brazil
For Users located in the European Union:
Frederiksplein, 1 1017XK
Amsterdam, The Netherlands
For Users located in the United Kingdom:
Legal representative: MCF LEGAL TECHNOLOGY SOLUTIONS (UK) LIMITED
ower 42 Level 38C,
25 Old Broad St, Cornhill,
London EC2N 1HQ, United Kingdom
For Users located in Latin America:
Launch Pad Hotmart México
Avenida Paseo de la reforma, número 295,
Piso 8 Oficina A, Cuauhtemoc, Ciudad de México
To speak with the DPO of Hotmart Company, use this form.