Privacy Policy

Last updated: 1/20/2026

1. Definitions

For the purposes of this policy:

• Personal Data: Information related to an identified or identifiable natural person.
• Data Controller: Concept Sistemas, responsible for decisions regarding the processing of personal data.
• Data Subject: Natural person to whom the personal data being processed refers.
• Processing: Any operation performed with personal data, such as collection, storage, use, sharing or deletion.

2. Information We Collect

2.1. Information Provided by You

We collect information that you voluntarily provide when:

• Fill out contact forms on our website
• Request a commercial proposal or budget
• Subscribe to our newsletter (if applicable)
• Communicate with us via email, phone or WhatsApp
• Participate in surveys or events

This information may include:

• Full name
• Email address
• Phone number
• Company name and position
• Information about your project or business needs
• Any other information you choose to share

2.2. Information Collected Automatically

When you access our website, we automatically collect certain information, including:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Referral source (site that directed you to us)
• Device information (mobile, tablet, desktop)
• Cookies and similar technologies

2.3. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your browsing experience. Cookies are small text files stored on your device. We use:

• Essential Cookies: Necessary for the website to function properly.
• Performance Cookies: Help us understand how visitors interact with the website.
• Functionality Cookies: Remember your preferences and settings.
• Analytics Cookies: Collect information about website usage to improve our services.

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of the website.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under LGPD:

• Consent: When you provide explicit consent for specific processing activities.
• Contract Performance: To fulfill contractual obligations or respond to your service requests.
• Legitimate Interest: For business purposes such as improving our services, fraud prevention, and network security.
• Legal Obligation: To comply with legal and regulatory requirements.

4. How We Use Your Information

We use the collected information for the following purposes:

• Respond to your inquiries and service requests
• Prepare and send commercial proposals and budgets
• Provide customer support and technical assistance
• Process and manage service contracts
• Improve and personalize your experience on our website
• Conduct analytics and research to enhance our services
• Send relevant communications about our services (with your consent)
• Comply with legal obligations and enforce our terms
• Prevent fraud and ensure network security
• Maintain records for accounting and tax purposes

5. Information Sharing and Disclosure

We do not sell, rent or trade your personal information with third parties for their marketing purposes. We may share your information only in the following circumstances:

5.1. Service Providers

We may share your data with trusted service providers who assist us in operating our business, such as hosting providers, email service providers, analytics tools, and payment processors. These providers are contractually obligated to protect your data and use it only for the purposes we specify.

5.2. Legal Requirements

We may disclose your information when required by law, court order, or government request, or when we believe disclosure is necessary to protect our rights, property, safety, or that of others.

5.3. Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

5.4. With Your Consent

We may share your information with other parties when you have given us explicit consent to do so.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we securely delete or anonymize it. Specific retention periods may vary depending on the type of data and applicable legal requirements.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Employee training on data protection practices
• Secure backup and disaster recovery procedures
• Firewalls and intrusion detection systems

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

8. Your Rights Under LGPD

Under the Brazilian General Data Protection Law (LGPD), you have the following rights regarding your personal data:

• Right to Confirmation and Access: Confirm whether we process your data and request access to it.
• Right to Correction: Request correction of incomplete, inaccurate, or outdated data.
• Right to Anonymization, Blocking or Deletion: Request anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data.
• Right to Data Portability: Request transfer of your data to another service provider, when applicable.
• Right to Information: Obtain information about third parties with whom we share your data.
• Right to Information About Consent: Obtain information about the possibility of not providing consent and the consequences.
• Right to Withdraw Consent: Withdraw your consent at any time.
• Right to Object: Object to processing based on legitimate interest or for non-compliance with LGPD.
• Right to Review Automated Decisions: Request review of decisions made solely based on automated processing.

How to Exercise Your Rights

To exercise any of these rights, please contact us through the channels listed in the Contact section of this policy. We will respond to your request within the timeframe required by LGPD (15 days, extendable for an additional 15 days if needed). We may request additional information to verify your identity before processing your request.

9. International Data Transfers

Your personal data is primarily stored and processed in Brazil. If we transfer your data to other countries, we ensure adequate protection measures are in place, such as standard contractual clauses or adequacy decisions, in compliance with LGPD requirements. We will inform you of any international transfers and the safeguards applied.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children or adolescents without parental or legal guardian consent. If we become aware that we have collected data from a minor without proper consent, we will take steps to delete such information promptly. If you believe we have collected data from a minor, please contact us immediately.

11. Third-Party Links

Our website may contain links to third-party websites, plugins, or applications. Clicking on these links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

13. Data Protection Officer (DPO)

We have designated a Data Protection Officer (DPO) to oversee our data protection strategy and ensure compliance with LGPD. Our DPO is responsible for handling data subject requests, monitoring data protection practices, and serving as a point of contact with regulatory authorities. You can contact our DPO through the contact information provided below.

14. Complaints to Regulatory Authorities

If you believe your data protection rights have been violated, you have the right to file a complaint with the Brazilian National Data Protection Authority (ANPD - Autoridade Nacional de Proteção de Dados). However, we encourage you to contact us first so we can address your concerns directly.

ANPD:
Website: https://www.gov.br/anpd/
Email: anpd@anpd.gov.br

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us: