1. Who we are
This policy describes how Vita Munhoz Tecnologia ("VM Tecnologia", "we"), registered under Brazilian company tax ID (CNPJ) 59.414.271/0001-36, with its registered office at Rua Clorivaldo Migliari, 150 - Nova Ourinhos, Ourinhos - SP, CEP 19907-475, Brazil, processes personal data collected through the website vitamunhoztecnologia.com.br.
We act as the data controller for the data described here — that is, we decide the purposes and the means of the processing. Processing follows the LGPD (Lei Geral de Proteção de Dados, Brazil's General Data Protection Law, Law No. 13,709/2018) and, where they add further protection, best practices drawn from the European General Data Protection Regulation (GDPR). This is not a claim of GDPR compliance: the governing law for this processing is the LGPD.
For anything related to privacy, reach us at contato@vitamunhoztecnologia.com.br.
2. Data we collect
2.1. Data you give us
When you fill in the form on the Contact page, we collect:
- Name and email (required);
- Company and phone (optional — only if you choose to provide them);
- Subject and message — whatever you write. We ask that you do not include sensitive personal data (LGPD, art. 5, II) or confidential information that is not needed for us to reply.
2.2. Data collected automatically
Along with the form submission, and in the server's technical records, we collect:
- IP address — used for security, abuse prevention and rate limiting of bulk submissions;
- Browser information (user agent), which indicates the browser, operating system and device type;
- The page the submission came from, plus date and time;
- Request logs — endpoint accessed, method, response code and processing time, for auditing and troubleshooting.
2.3. Statistics data (only with your consent)
If — and only if — you allow the Statistics category in our cookie notice, analytics tools (Google Analytics 4 and Microsoft Clarity) may collect information such as:
- pages visited and time spent on the visit;
- traffic source, referrer and campaign parameters (UTM);
- browser, operating system, language, device and screen resolution;
- approximate location (derived from the IP, at city/region level);
- IP address — in Google Analytics 4, the IP is neither logged nor stored, and we configure anonymization as an additional layer;
- navigation events, clicks, page scrolling and conversions (such as submitting the form or clicking through to WhatsApp);
- in Microsoft Clarity, heatmaps and session recordings that reproduce mouse movement, clicks and scrolling — Clarity automatically masks content typed into form fields.
This data may be associated with your interactions within the site itself for statistical and analytical purposes, to improve the experience, for security and for performance measurement — always respecting your consent choice. Google and Microsoft also process this data under their own privacy policies and terms of service.
Without your consent, these scripts are not loaded — not even in an anonymous mode. You can review your choice at any time on the Cookie Preferences page.
2.4. What we don't do
- We do not sell personal data.
- We do not currently use advertising or remarketing pixels (Google Ads, Meta, LinkedIn, TikTok). If we ever do, it will depend on your consent in the Marketing category.
- We do not make automated decisions that produce legal effects or significantly affect you.
- We do not intentionally collect data from children or adolescents.
3. What we use the data for
- Replying to your message and preparing proposals and quotes;
- Delivering the services you hire us for and maintaining the business relationship;
- Security and fraud prevention — blocking automated submissions (spam/bots), abuse and unauthorized access attempts;
- Statistics and site improvement — understanding what works and what needs to get better (subject to consent);
- Marketing and campaign measurement — if we ever adopt it, always subject to consent;
- Compliance with legal obligations and the regular exercise of rights in legal proceedings.
4. Legal bases (LGPD, art. 7)
| Processing | Legal basis |
|---|---|
| Contact form data | Preliminary procedures related to a contract, at the data subject's request (art. 7, V) and, where applicable, consent (art. 7, I) |
| Performance of contracted services | Performance of a contract (art. 7, V) |
| Logs, IP and protection against abuse | Legitimate interest in information security (art. 7, IX) |
| Statistics, analytics and heatmaps | Consent (art. 7, I) |
| Marketing and advertising (if adopted) | Consent (art. 7, I) |
| Tax/accounting retention and legal defense | Legal obligation (art. 7, II) and regular exercise of rights (art. 7, VI) |
When processing relies on legitimate interest, we assess whether it is necessary, proportionate, and whether your fundamental rights and freedoms do not override it. You may object to such processing at any time (see section 8).
5. Who we share data with
We share data only when it is necessary for the purposes above, or when required by law. We do not sell or transfer data to third parties for their own marketing purposes.
| Recipient | Role and purpose |
|---|---|
| Hosting provider (Locaweb) | Data processor — hosts the site, the message database and the email service. Servers located in Brazil. |
| Google (Analytics 4, Maps) | Usage statistics and display of the location map. Triggered only with your consent in the corresponding categories. |
| Microsoft (Clarity) | Heatmaps and session recordings to improve usability. Only with Statistics consent. |
| Public and judicial authorities | Upon a legal request, a court order, or where necessary to defend our rights. |
If we adopt other tools (CRM, customer support, advertising, CDN), this policy will be updated before or at the time of adoption.
6. International transfers
The site and the database holding your messages are hosted in Brazil. However, when you allow statistics or the map, Google and Microsoft may process data on servers outside the country, including in the United States.
These transfers rely on standard contractual clauses and on the adequacy mechanisms adopted by those providers, in line with art. 33 of the LGPD. If you do not allow those categories, the site sends no data of yours to those providers.
7. How long we keep data
- Form messages: kept for as long as the relationship lasts and for up to 5 years after the last contact — the general statute of limitations period for a possible defense of rights. You may request deletion before that (see section 8).
- Technical logs (IP, user agent, requests): up to 12 months, in line with art. 15 of the Brazilian Internet Bill of Rights (Marco Civil da Internet) for application access records.
- Record of your consent: stored in your browser (localStorage) for as long as you don't change it or clear your browser data. It is also requested again whenever we publish a new version of this policy.
- Analytics data: retained according to each platform's configuration (in Google Analytics 4 we use the default 14-month period for user and event data).
Once the period or the purpose ends, the data is deleted or irreversibly anonymized, ceasing to be personal data.
8. Exercising your rights as a data subject
The LGPD grants you, as the data subject, the following rights (art. 18), which may be exercised free of charge and at any time:
- Confirmation that processing exists;
- Access to your data;
- Correction of incomplete, inaccurate or outdated data;
- Anonymization, blocking or deletion of data that is unnecessary, excessive, or processed in breach of the law;
- Portability to another provider, upon express request;
- Deletion of data processed on the basis of your consent;
- Information about who we share your data with;
- Information about the possibility of not giving consent and the consequences of refusing;
- Withdrawal of consent, at any time;
- Objection to processing based on legitimate interest;
- Review of automated decisions — we currently make no decisions of this kind.
How to submit a request
- By email: contato@vitamunhoztecnologia.com.br, with the subject line "LGPD — Data Subject Rights";
- Through the form on the Contact page, describing your request in the message field.
We will respond within 15 days of receipt (LGPD, art. 19, II). We may ask for additional information to confirm your identity — that protects you against fraudulent requests made in your name.
To manage cookies and statistics, the fastest route is the Cookie Preferences page — the change is immediate and requires no request.
You also have the right to petition the ANPD (Autoridade Nacional de Proteção de Dados, Brazil's National Data Protection Authority), if you believe your rights have not been honored.
9. Information security
We take technical and administrative measures to protect your data against unauthorized access, loss, alteration or destruction:
- Encryption in transit — the entire site is served over HTTPS (TLS 1.2/1.3), with automatic redirection and HSTS;
- SQL injection protection — every database query uses prepared statements;
- Input sanitization and XSS protection;
- Rate limiting per IP, on the form and on administrative login attempts;
- Administrative passwords stored only as hashes (bcrypt) — never in plain text;
- Access control to the admin area through authentication, with session expiry;
- Security headers (CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, among others);
- Audit logs and periodic backups.
No system is 100% infallible. If a security incident occurs with relevant risk to your rights, we will notify you and the ANPD, as required by art. 48 of the LGPD.
10. Cookies
Each technology, its purpose and its duration are detailed in the Cookie Policy. You control your choices on the Cookie Preferences page.
11. Updates to this policy
We may revise this policy to reflect legal, technical or service changes. The date of the last revision is always at the top of the page. When a change is significant — especially if it involves new purposes or new recipients — we will ask for your consent again.
12. Contact
Vita Munhoz Tecnologia
CNPJ (Brazilian company tax ID): 59.414.271/0001-36
Rua Clorivaldo Migliari, 150 - Nova Ourinhos, Ourinhos - SP, CEP 19907-475
Email: contato@vitamunhoztecnologia.com.br
Phone: +55 (14) 99901-5049
See also our Terms of Use.