Privacy Policy

1. Introduction

Chapéus de Palha Direct Response Marketing LTDA ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

By accessing our website or engaging with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Fill out contact forms on our website
• Request a consultation or information about our services
• Subscribe to our newsletter or marketing communications
• Engage with us through email, phone, or other communication channels
• Participate in surveys, promotions, or contests

This information may include:

• Full name
• Email address
• Phone number
• Company name and position
• Business information and requirements
• Any other information you choose to provide

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information, including:

• IP address and device information
• Browser type and version
• Operating system
• Pages visited and time spent on our website
• Referring website addresses
• Clickstream data and navigation patterns

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your experience on our website and analyze usage patterns. You can control cookie settings through your browser preferences.

3. How We Use Your Information

We use the collected information for various purposes, including:

• Service Delivery: To provide, maintain, and improve our Google Ads management and digital marketing services
• Communication: To respond to inquiries, send newsletters, and provide customer support
• Marketing: To send promotional materials, special offers, and updates about our services (with your consent)
• Analytics: To analyze website usage, optimize our services, and improve user experience
• Legal Compliance: To comply with legal obligations, enforce our terms, and protect our rights
• Campaign Management: To create, manage, and optimize Google Ads campaigns on behalf of our clients
• Business Operations: To process transactions, maintain records, and conduct internal business activities

4. Legal Basis for Processing (LGPD Compliance)

In accordance with Brazil's General Data Protection Law (Lei Geral de Proteção de Dados - LGPD), we process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities
• Contractual Necessity: To execute contracts and provide requested services
• Legal Obligation: To comply with legal and regulatory requirements
• Legitimate Interest: For business operations, fraud prevention, and service improvement

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who assist in website hosting, email delivery, analytics, and payment processing
• Google and Advertising Platforms: To manage and optimize advertising campaigns
• Business Partners: When necessary to provide integrated services (with your consent)
• Legal Authorities: When required by law, court order, or to protect our legal rights
• Business Transfers: In connection with mergers, acquisitions, or asset sales

We do not sell, rent, or trade your personal information to third parties for their marketing purposes without your explicit consent.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication protocols
• Employee training on data protection practices
• Secure backup and disaster recovery procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights Under LGPD

Under Brazilian data protection law, you have the following rights:

• Access: Request confirmation and access to your personal data
• Correction: Request correction of incomplete, inaccurate, or outdated data
• Anonymization or Deletion: Request anonymization, blocking, or deletion of unnecessary or excessive data
• Portability: Request transfer of your data to another service provider
• Information: Request information about entities with which we share your data
• Consent Withdrawal: Withdraw consent for data processing at any time
• Opposition: Object to processing conducted without your consent
• Review: Request review of automated decisions made based on your data

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When your information is no longer needed, we will securely delete or anonymize it.

Retention periods vary depending on:

• The nature of the information and purpose of collection
• Legal, tax, and accounting requirements
• Active business relationships and contractual obligations
• Dispute resolution and enforcement of our rights

9. International Data Transfers

Your information may be transferred to and processed in countries other than Brazil, including the United States and European Union, where our service providers and partners are located. We ensure that appropriate safeguards are in place to protect your information in accordance with LGPD requirements.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately so we can delete it.

11. Third-Party Links

Our website may contain links to third-party websites, including social media platforms and partner sites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before providing any personal information.

12. Google Ads and Analytics

We use Google Ads, Google Analytics, and other Google services to manage advertising campaigns and analyze website performance. These services may collect information through cookies and similar technologies. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

13. Marketing Communications

With your consent, we may send you marketing communications about our services, industry insights, and special offers. You can opt out of receiving these communications at any time by:

• Clicking the "unsubscribe" link in our emails
• Contacting us directly using the information below
• Updating your communication preferences in your account settings

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website with a new "Last Updated" date. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, or if you wish to exercise your rights under LGPD, please contact us:

Complaint Rights: If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Brazilian National Data Protection Authority (Autoridade Nacional de Proteção de Dados - ANPD).