Draft text, pending legal review.
Privacy Policy
Last updated: [DATA]
This policy explains how [RAZÃO SOCIAL], registered in Brazil under CNPJ [CNPJ] (“Bendita!”), handles the personal information collected on this website, in compliance with Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018).
1. Information we collect
- Information you provide in the form: name, phone number, email, company name, role, company size and industry, processes of interest and budget range.
- Browsing and referral data: campaign parameters (UTMs), ad click identifier (fbclid), referring page, date and time, and a code derived from your IP address (we never store your IP address in plain text).
- Analytics cookies, only if you accept them in the cookie banner. [PREENCHER: lista dos cookies e prazos.]
2. How we use it
- To contact you and run the free assessment you requested.
- To prepare a proposal.
- To measure the performance of our ad campaigns in aggregate.
- [PREENCHER: outras finalidades, se houver, como envio de conteúdo.]
3. Legal basis
- Consent (LGPD, Art. 7, I), given through the checkbox on the form and the cookie banner.
- Steps taken at your request prior to entering into a contract (LGPD, Art. 7, V).
- Legitimate interest in keeping the website secure and preventing fraud (LGPD, Art. 7, IX). [PREENCHER: avaliação de legítimo interesse.]
4. Sharing
- Service providers that support us: hosting [PREENCHER], database [PREENCHER], scheduling [PREENCHER], automations [PREENCHER] and ad platforms [PREENCHER].
- With your consent, we send Meta conversion events containing encrypted (hashed) personal data. [PREENCHER: detalhar.]
- We do not sell personal information.
5. International transfers
- [PREENCHER: quais operadores processam dados fora do Brasil e com quais salvaguardas.]
6. Data retention
- Contact information: [PREENCHER] from our last contact.
- Campaign and analytics data: [PREENCHER].
- After these periods, the data is deleted or anonymized.
7. Security
- Database access is restricted to the application server, with row-level security enabled and no public access.
- [PREENCHER: demais medidas — criptografia, controle de acesso, registro de auditoria.]
8. Your rights
- You may request confirmation that we process your data, access, correction, anonymization, portability, deletion, information about who we share it with, and withdrawal of consent.
- We respond within [PREENCHER] days. Just email us at the address below.
9. Data Protection Officer (DPO) and contact
- DPO: [NOME DO ENCARREGADO].
- Email: [EMAIL].
- Address: [ENDEREÇO].
10. Changes to this policy
- We may update this policy from time to time. The “last updated” date above shows the current version.