Effective Date: April 6, 2025
Lucas de Ataides Barreto Consultoria em Tecnologia da Informação LTDA ("we", “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, https://ataides.com, and when you engage with us through our contact forms, email communications, or consulting services.
This policy complies with the Lei Geral de Proteção de Dados (LGPD), General Data Protection Regulation (GDPR), and other applicable data protection regulations, including but not limited to the California Consumer Privacy Act (CCPA).
1. Information We Collect
We may collect and process the following categories of personal information:
A. Information you provide voluntarily
- Full name
- Business email address
- Company name
- Job title or role
- Contact messages or form submissions
- Preferred language
B. Information collected automatically
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and referring URLs
- Time zone and geolocation (approximate)
- Cookies and usage data
We do not collect sensitive personal data such as health, biometric, or financial information through this website.
2. How We Use Your Information
We use your data for the following purposes:
- To respond to inquiries submitted via contact forms
- To assess business opportunities or project proposals
- To provide consulting services and follow-up communication
- To comply with legal or regulatory obligations
- To improve website functionality and user experience
- To analyze anonymous traffic metrics via analytics tools
We do not use your data for profiling or automated decision-making.
We do not sell or rent your personal data to third parties under any circumstances.
3. Legal Basis for Processing (GDPR / LGPD)
We rely on one or more of the following legal bases:
- Consent: when you submit a form or opt-in to communications
- Legitimate interest: to communicate, analyze site usage, and secure our platform
- Contractual necessity: when processing data as part of a service agreement
- Legal obligation: to comply with applicable laws and tax or audit requirements
4. Data Sharing and Third Parties
We only share your data when necessary and with trusted third-party service providers, including:
- Microsoft 365 / Microsoft Forms: communication and data capture
- Amazon Web Services (AWS): hosting and infrastructure
All vendors are required to comply with data protection regulations and contractual confidentiality obligations.
5. International Transfers
Your data may be processed outside your country of residence, including in Brazil, the European Union, and the United States. We ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs), to protect your data in line with GDPR and LGPD requirements.
6. Data Retention
We retain your personal data only for as long as:
- Necessary to fulfill the purpose for which it was collected
- Required to comply with legal, tax, or contractual obligations
- Permitted by applicable data protection laws
After this period, data is securely deleted or anonymized.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction or deletion of inaccurate or outdated data
- Withdraw your consent at any time
- Object to processing or request restriction
- Receive a copy of your data in a structured, machine-readable format (data portability)
To exercise your rights, contact us at: contact@ataides.com
8. Cookies and Tracking Technologies
We may use cookies or similar technologies to enhance the user experience, such as:
- Remembering your language preference
- Measuring site traffic and performance (e.g., with Google Analytics)
You may disable cookies through your browser settings. Where required by law, we will request consent before placing cookies.
9. Security Measures
We implement administrative, technical, and physical safeguards to protect your personal data, including:
- HTTPS and SSL encryption
- Access control and authentication
- Cloud provider security (AWS, Microsoft)
- Limited retention and secure deletion procedures
Despite these efforts, no system can guarantee 100% security. We encourage users to avoid sending sensitive information through open forms.
10. Minors
Our services are intended for business professionals. We do not knowingly collect data from children under the age of 16. If you believe we may have unintentionally collected data from a minor, please contact us immediately.
11. Changes to This Policy
We may update this policy to reflect changes in law or our practices. When we do, we will revise the “Effective Date” at the top of the page. We recommend reviewing this page periodically.
12. Contact
If you have any questions or concerns regarding this Privacy Policy or our data handling practices, please contact:
Ataides Consulting
📍 Brazil (serving international clients)
We take your privacy seriously — and operate with transparency, responsibility, and full regulatory compliance.
