The binding version of this policy is the Portuguese one: Política de Privacidade. This English summary is provided for convenience.
This page explains how www.cipaa.com.br collects, uses, stores and shares personal data, under Brazil’s data protection law, LGPD (Law 13.709/2018). Version in force: September 2026.
Data controller
CIPAA, responsible for the website www.cipaa.com.br. Contact for any data protection matter, including data subject requests: info@cipaa.com.br.
What we collect
- Data you submit in forms (contact, talk request, material download, newsletter): name, email, phone, company and your message, according to the fields of the form used.
- Navigation data collected automatically: IP address, browser and device type, pages visited, traffic source, date and time — through cookies and equivalent technologies.
We do not intentionally collect sensitive personal data. Please do not send health information, third-party data, or an identified account of a harassment case through the forms on this site: this is not a whistleblowing channel.
Why we use it, and on what legal basis
- Answering requests and preparing quotes — pre-contractual steps at the data subject’s request (art. 7, V, LGPD).
- Sending educational content by email when you subscribe — consent (art. 7, I), revocable at any time.
- Audience measurement and site improvement — legitimate interest (art. 7, IX), on aggregated data.
- Compliance with legal or regulatory obligations where applicable (art. 7, II).
Cookies and third parties
This site uses Google Tag Manager and Google Analytics (Google LLC) for audience measurement, and WordPress, Fluent Forms and LiteSpeed Cache for site operation, form submission and page caching. You can block or delete cookies in your browser settings; blocking technical cookies may prevent forms from being submitted.
Sharing and retention
We do not sell personal data. We share it only with processors needed to run the service — hosting provider, email provider, the analytics and messaging platforms listed above — and with public authorities where required by law or court order. Some of these processors handle data outside Brazil; such international transfers rely on the grounds in art. 33 of the LGPD. Commercial contact data is kept for as long as the relationship lasts and for any period required by law; newsletter data is kept until you unsubscribe; navigation data follows the retention period of the analytics tool. After that, data is deleted or anonymised.
Your rights
Under the LGPD you may confirm that processing exists, access your data, correct incomplete or outdated data, request anonymisation, blocking or deletion of unnecessary data, request portability, withdraw consent, be told with whom we share your data, and object to processing based on legitimate interest. Write to info@cipaa.com.br with the subject “LGPD”. You may also complain to Brazil’s data protection authority, the ANPD.
Security and AI access
The site is served over HTTPS only, with technical and administrative measures against unauthorised access, loss or alteration. In the event of a relevant security incident we notify affected data subjects and the ANPD, as required by art. 48 of the LGPD. Our published editorial content is open to search engines and to identified AI agents, as stated in robots.txt and llms.txt. That applies to public pages only: data submitted through forms is never published nor made available to third parties for training.
See also About CIPAA and Contact.
