PRIVACY POLICY.

This Policy applies to all personal data processed by our company — including business clients in Pitanga, PR and the Centro-Oeste Paranaense region who engage our services, their employees and contacts whose data we encounter in service delivery, and website visitors. Our services are directed primarily at other businesses (B2B).

• Client identification and contact data: Company name, CNPJ and the name, role, phone and email of the responsible contact at the client business — collected when companies engage our services or request proposals.
• Operational and project data: Business information, project specifications and operational details provided by clients for the purpose of delivering contracted services. Treated as confidential and used only for service delivery.
• Billing data: Name and CNPJ for NFS-e issuance — in compliance with SEFAZ-PR and ISS/Prefeitura de Pitanga requirements.
• Contact and enquiry data: Name, phone and message when submitting enquiries via WhatsApp, phone or our website form.
• Technical website data: IP address, browser type, pages visited and access times.

• SEFAZ-PR / Receita Federal: Tax data for NFS-e issuance and applicable federal and state tax compliance in Paraná.
• Prefeitura de Pitanga (ISS): For ISS/ISSQN obligations on service activities.
• Third parties required for service delivery (client-instructed): Where delivering a service requires coordination with third parties — only with explicit client instruction and minimum necessary data.
• PROCON-PR: When required in a consumer dispute mediation under the CDC.
• Legal authorities: When required by a competent judicial or administrative order.

Our services operate in Pitanga, PR and the Paraná region. All client and operational data is stored in Brazil. Any technology platforms for communication or service delivery that operate on international servers do so under the guarantees of Art. 33 of the LGPD or recognised adequacy mechanisms.

• NFS-e and fiscal records: Minimum 5 years under federal and state tax legislation (CTN, Art. 174; SEFAZ-PR).
• Client service contracts and records: Duration of the client relationship plus 5 years for contractual, fiscal and dispute documentation.
• Project and operational data: Duration of the project plus any applicable post-completion dispute period — typically 2 years after project completion unless a longer period is required.
• Contact and enquiry data (no service commenced): Up to 1 year from last contact.
• Website analytics: Aggregated and anonymised after 12 months.

• Client business data accessible only to team members directly involved in that client's service engagement;
• Client information held in access-controlled systems — not shared between different client engagements;
• Communications via WhatsApp and email handled with appropriate discretion;
• Encryption in transit (HTTPS) for website and digital communications;
• PCI-DSS certified payment platforms — card data never retained;
• As a Ltda, formal internal data handling protocols maintained;
• Incident response procedures and breach notification per LGPD Art. 48.

• Confirmation and Access (Art. 18, I–II): Confirm whether we hold your data and receive a copy.
• Correction (Art. 18, III): Request correction of inaccurate data.
• Anonymisation / Blocking / Deletion (Art. 18, IV): Request restriction or deletion — subject to fiscal and contractual retention obligations.
• Portability (Art. 18, V): Receive your data in a structured format.
• Deletion of consent-based data (Art. 18, VI): Request deletion of data processed by consent.
• Information on sharing (Art. 18, VII): Find out which entities your data has been shared with.
• Withdrawal of Consent (Art. 8º, §5º): Withdraw consent at any time.
• Complaint to the ANPD (Art. 18, §1º): Lodge a complaint at www.gov.br/anpd.

We respond within 15 business days.

Our website may use cookies for essential functionality and aggregated performance analysis. We do not use behavioural tracking or advertising cookies. Preferences can be managed through browser settings.

Our services are directed at businesses — adults acting in a professional capacity. We do not intentionally collect personal data from children under 13. All service engagements are contracted by adults legally authorised to represent the client organisation.

We do not collect sensitive personal data as defined in LGPD Art. 5º, II in our own right. Where business services are delivered for clients whose operations involve sensitive data, we handle such data only on the client's documented instruction and apply the heightened protections of LGPD Art. 11 throughout. Client data is always treated as confidential business information regardless of its classification.

This Policy may be updated to reflect changes in our activities, the LGPD, ANPD guidance or applicable tax legislation in Paraná. Material changes will be communicated via our website or directly to active clients by WhatsApp or email.

All privacy requests, questions and complaints should be directed to our Data Protection Officer (Encarregado — LGPD Art. 41):