Case Study Sizebay | Diagnosis and Implementation of the LGPD

Sizebay , in addition to being a client, is one of Vanzin & Penteado's major partners. With a revolutionary idea and impeccable timing, founders Janderson Araújo and Marcelo Motta developed a SaaS ( Software as a Service ) platform . This solution ensures greater security and a better user experience for e-commerce consumers.

The so-called Virtual Fitting Room is able to recommend the ideal size for the body of customers accessing the e-commerce site . To do this , the algorithm needs personal data such as weight, height, and age. With positive results, the startup quickly expanded to the United States and Europe.

In this sense, the startup is highly committed to information security, both for the e-commerce businesses that contract the service and for the end consumers who use the tool.

For this reason, the founders have always paid attention to discussions about national, as well as international, legislation related to data processing. This commitment has made the project even more relevant to our partners.

In this regard, they sought advice from the Vanzin & Penteado law firm for new insights and improvement of existing controls. It was then, after the initial meeting, that the scope of the project was defined :

• Adapt the company's entire operation from the point of view of the regulations applicable to the Sizebay platform, which are: LGPD - General Data Protection Law, from Brazil; The GDPR - General Data Protection Regulation, from Europe; and the CCPA - California Customer Privacy Act, from California. 

The project had the following stages:

• Initial alignment meeting;
• Planning: Scope definition, creation of a project committee, creation and validation of the schedule, items to be checked;
• Diagnosis, which involved: Platform, Data inventory, Analysis of operation flows, Analysis of contracts and policies, Data sharing, list of suppliers and customers, Internal personnel, hiring flow, among others;
• Preparation and presentation of reports;
• Implementation.

Following the diagnosis, the team presented the report to Sizebay in a detailed virtual meeting. During the meeting, participants clarified doubts and raised new insights, which were subsequently incorporated into the final documents.

Finally, after completing the analysis phase, Vanzin & Penteado began implementing and deploying the items identified in the report. With the support of a detailed checklist , the startup was able to monitor the project's development, which included: reviewing and drafting legal documents in Portuguese and English; changes to the workflow; adjustments to data collection through cookies ; as well as various other best practices in information security.

The project culminated, among other things, in the creation of a legal page in both English and Portuguese versions, which you can check out on the Sizebay website or in the app itself.

Also check

LGPD ebook for e-commerce, created in partnership with Sizebay , as a result of a Sizetalk between founder Janderson Araújo and Vanzin & Penteado partner, Kael Moro.

Case Study by Sizebay , involving the revision of the DPA - Data Processing Agreement document to comply with international legislation.