Glossary

LGPD

Brazilian personal data protection law, which defines how a buyer's data can be collected, stored, and used.

The Lei Geral de Proteção de Dados (LGPD) regulates the handling of personal data in Brazil. In payments, it covers everything the checkout collects: name, email, phone, ID document, and address.

In practice, the seller needs to state what each piece of data is used for, keep only what's necessary, allow the buyer to request deletion, and not pass the database on to third parties without a legal basis.

Card data has its own, stricter rule, set by PCI-DSS: it shouldn't even pass through your server.

Documentation exists so a seller never learns a rule on the day it costs them. Worth reading before you need it.
Wellington CostaGlobal Payments Specialist

Need to deal with lgpd in practice?

Mundpay processes payments in 190 countries with local currency checkout, a human risk team and fast payouts. Open an account and test it against your own operation.

Abrir minha conta na Mundpay

Written by Wellington Costa Global Payments Specialist

Writes about payment infrastructure, checkout conversion and chargeback reduction. Works directly with digital product sellers, affiliates and creators selling to more than 40 countries through Mundpay.