LGPD · Law No. 13,709/2018
Privacy Policy
Last updated:
The 30-second summary
- We only collect what you send us (form, email, WhatsApp) and the technical minimum the site needs to work.
- We use this data to respond to you and, if there's a fit, to prepare a proposal.
- We do not sell or rent personal data.
- Analytics cookies are only turned on if you accept them.
- You can ask to access, correct or delete your data at any time by writing to contato@grupoarantho.com.br.
1. Who we are
This policy applies to the website grupoarantho.com.br and to any contact made through it. The data controller is Arantho Ltda. (Arantho Group), CNPJ (Brazilian company tax ID) 43.951.150/0001-93, headquartered at Rua Rio Branco, 70, Sala 22, Centro, Americana, São Paulo, Brazil, postal code (CEP) 13465-030.
We are a strategic marketing advisory. We process personal data only to the extent needed to talk with you and provide our services, in accordance with the LGPD (Brazil's General Data Protection Law, Law No. 13,709/2018).
2. What data we collect
Data you send us
- Contact form: name, company, email, WhatsApp number, topic of interest, the message you write and a record that you accepted this policy.
- Email and WhatsApp: the content of the messages and the contact details that appear in them.
Data collected automatically
- Technical access data: IP address, browser and device type, pages visited, and date and time, logged by the hosting server for security purposes.
- Cookie preference: we store in your browser the choice you made in the cookie notice.
- Analytics data: only if you accept analytics cookies (see section 7).
We do not ask for sensitive data (such as health, religion, political opinions or biometrics). Please do not include it in your messages.
3. How we use your data
- To respond to your inquiry and schedule the initial call.
- To understand your challenge and, if there's a fit, prepare a proposal or the M.A.P.A. Diagnosis.
- To perform the contract, if you become a client.
- To keep the site secure and prevent spam and fraud.
- To understand, in aggregate, how the site is used so we can improve it, only with your consent.
- To comply with legal and tax obligations.
We do not use your data to send newsletters or offers you have not asked for.
4. Legal bases (Article 7 of the LGPD)
| Use | Legal basis |
|---|---|
| Responding to your inquiry and preparing a proposal | Preliminary procedures related to a contract, at your request (item V) |
| Providing the contracted service | Performance of a contract (item V) |
| Site security and fraud prevention | Legitimate interest (item IX) |
| Analytics and advertising cookies | Consent (item I), which you can withdraw at any time |
| Keeping records required by law | Compliance with a legal obligation (item II) |
5. Who we share data with
We do not sell, rent or transfer personal data. We share it only with providers that help us operate, and only what each function requires:
- FormSubmit: a service that delivers form messages to our email inbox.
- Email provider: where we receive and reply to messages.
- WhatsApp (Meta): when you choose to contact us there.
- Website hosting: which logs technical access data.
- Google Fonts: provides the site's fonts. When the page loads, your browser connects to Google's servers, which receive your IP address.
- Analytics tools (such as Google Analytics and Meta Pixel), only if you accept analytics cookies.
- Public authorities, when there is a legal obligation or a court order.
6. International transfers
Some of these providers store data on servers outside Brazil. In these cases, the transfer follows Article 33 of the LGPD, and we choose providers that adopt recognized data protection standards.
7. Cookies
Cookies and similar technologies are small files stored in your browser.
- Essential: needed for the site to work and to remember your choice in the cookie notice. They are always on.
- Analytics and advertising: help us understand traffic and measure campaigns. They are only turned on if you click Accept. If you click Essential only, they are not loaded.
You can change your choice whenever you want, as easily as you made it: click Cookie preferences in the site footer and choose again.
8. How long we keep data
- Inquiries that did not become projects: up to 2 years after the last interaction. After that, the data is deleted.
- Clients: for the duration of the contract and, after it ends, for the period required by tax and civil law.
- Technical access data: for the minimum period required by Brazil's Internet Civil Rights Framework (Marco Civil da Internet), which is 6 months.
You can ask us to delete your data before these periods end, except where the law requires us to keep it.
9. Security
We take technical and administrative measures to protect data (Article 46 of the LGPD): a secure connection (HTTPS) on the site, access to messages restricted to the team handling the inquiry, strong passwords with two-step verification on company accounts, and providers with sound security practices. No system is completely immune to failures. If an incident occurs that could pose a significant risk to you, we will notify you and the ANPD (Brazil's National Data Protection Authority), as the law requires.
10. Your rights (Article 18 of the LGPD)
At any time and free of charge, you can:
- confirm whether we process your data and access it;
- correct incomplete, inaccurate or outdated data;
- request the anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
- request the portability of your data to another provider;
- request the deletion of data processed on the basis of your consent;
- find out who we share your data with;
- withdraw your consent and be informed of the consequences of not giving it;
- request a review of decisions made solely on the basis of automated processing.
To exercise any of these rights, write to contato@grupoarantho.com.br. We may ask for some information to confirm your identity. We respond within 15 days. You can also file a complaint with the National Data Protection Authority (ANPD) at gov.br/anpd.
11. Children and teenagers
Our site and services are intended for businesses and professionals. We do not knowingly collect data from anyone under 18. If this happens by mistake, we will delete the data as soon as we become aware of it.
12. Privacy contact channel
For questions, requests or complaints about personal data, get in touch with us:
- Email: contato@grupoarantho.com.br (subject: “Privacy”)
- WhatsApp: +55 19 98209-1290
13. Changes to this policy
We may update this policy when our practices change or when the law requires it. The date at the top of the page shows the version in effect. If a change is significant, we will highlight it on the site.