Data Protection Officer (DPO) contact details
If you have a question about how your personal information is being processed, you may consult our Data Protection Officer at the following e-mail address: dpo@fits.com.br.

Type to search…
How Fits processes personal data, what your rights as a data subject are and where to exercise them.
Current policy of FITS INSTITUIÇÃO DE PAGAMENTO S.A., reproduced in full. In the event of any discrepancy between translated versions, the Portuguese text prevails.
If you have a question about how your personal information is being processed, you may consult our Data Protection Officer at the following e-mail address: dpo@fits.com.br.
The decision may be communicated to the Data Protection Officer's e-mail address.
Note: the user acknowledges being aware that, even where deletion is requested, Fits will observe the minimum information retention period set by Brazilian law.
1.1. This Privacy Policy (“Privacy Policy”) covers the processing of Personal Data arising from the use of the services provided by FITS INSTITUIÇÃO DE PAGAMENTOS ELETRÔNICOS S.A. (“Fits”), registered under CNPJ No. 13.203.354/0001-85.
1.2. Fits is a technology platform integrated into the Brazilian Payment System (SPB), founded in 2015 and focused on providing white-label technology infrastructure for companies that wish to become Internet Banking providers. Through the system integrations required for a processing operation, Fits customers can focus on their core business and generate value for their market network, leaving responsibility for infrastructure, architecture, security and technology with Fits — while also allowing their own customers to act as payment facilitators and offer the services provided by Brazilian banks indirectly and in a customised way.
1.3. The main purpose of this Privacy Policy is to inform Fits' third parties and customers about the manner in which, and the purposes for which, their information is collected and processed.
1.4. This Privacy Policy applies to every third party who in any way provides their personal data to Fits, as well as to service providers or natural or legal persons acting on the company's behalf.
2.1. The terms used in this Privacy Policy, whenever capitalised, have the meanings set out below, whether in the plural or the singular:
3.1. Under the Brazilian General Data Protection Law, Personal Data is all information capable of identifying a natural person, such as name, CPF, telephone number, e-mail address or postal address.
3.2. The Personal Data processed may also be used in the manner we deem necessary or appropriate:
4.1. You are not obliged to share the Personal Data we request. However, if you choose not to share it, in some cases we will be unable to perform the contract — the same may apply where consent is withdrawn.
7.1. You may, at any time, request that Fits:
Your requests will be handled with particular care so that we can ensure your rights are effective. You may be asked to prove your identity, so that only the data subject exercises rights over their Personal Data.
7.2. You should be aware that in certain cases (for example, due to legal requirements) your request may not be met immediately, and that Fits may be unable to meet it at all in order to comply with legal obligations.
7.3. You may exercise your rights by contacting our Data Protection Officer at dpo@fits.com.br.
9.1. Fits reserves the right to amend the Terms of Use and the Privacy Policy at any time, without prior notice to Data Subjects, so it is the Data Subject's duty to watch for possible updates to those documents, which will be made available immediately through the channels Fits normally uses.
9.2. Amendments take effect on the date the new version of the Terms of Use and the Privacy Policy is published.
9.3. Fits will inform the User, prominently, of:
9.4. We remind you that Fits is committed to not processing your Personal Data in ways incompatible with the purposes described above, unless otherwise required by law or court order.
9.5. Using the website while this Privacy Policy is in force constitutes acceptance of this version.
10.1. If you intend to exercise any of the rights set out in this Privacy Policy and/or in Brazilian Privacy and Data Protection Laws, or wish to clear up any question regarding the Processing of your Personal Data, please contact Fits at dpo@fits.com.br.
10.2. Where the data subject requests the exercise of any of their rights, they must prove the authenticity of their identification at the DPO's request, for the Data Subject's own protection. Response times in these cases follow the statutory period: 15 (fifteen) days from the date of the request.
11.1. In accordance with this Privacy Policy, we may collect your data in various ways, for example through the use of your browser or device.
11.2. This means that some information — such as computer type, screen resolution, and operating system name and version — is collected automatically by browsers or internet-enabled devices and may be used to ensure the Site works properly.
12.1. This Privacy Policy is governed by and construed in accordance with Brazilian Privacy and Data Protection Laws.
12.2. The parties elect the Central Civil Court of the Judicial District of São Paulo, State of São Paulo, as the sole competent forum to settle any dispute arising from this Privacy Policy.
12.3. The website is controlled and operated by Fits from its offices in Brazil and is intended for an audience located in Brazilian territory. We do not warrant that the website's materials are appropriate for, or available for use in, other locations outside Brazil. Users who wish to access the website from outside Brazil are responsible for complying with all local laws, and may not use the website or export its materials where doing so would breach applicable local legislation.