Privacy Policy
Transparency about your data.
Which data we process, why, who we share it with and how you stay in control — in plain language, with no small print.
This document is a courtesy translation. The Portuguese version is the original and prevails in the event of any divergence — the contract, the tax record and the applicable law are all Brazilian.
1. Who we are
This policy describes how Vita Munhoz Tecnologia ("we"), registered under Brazilian tax number 59.414.271/0001-36, with offices at Rua Clorivaldo Migliari, 150 - Nova Ourinhos, Ourinhos - SP, 19907-475, Brazil, processes personal data collected through the website vitamunhoztecnologia.com.br.
We act as the controller of the data described here — that is, we decide the purposes and the means of the processing. The processing follows the Brazilian General Data Protection Law (Law 13,709/2018 — LGPD) and, where they add protection, good practices from the European General Data Protection Regulation (GDPR).
For anything related to privacy, write to us at contato@vitamunhoztecnologia.com.br.
2. Data we collect
2.1. Data you give us
When you fill in the form on the Contact page, we collect:
- Name and email (required);
- Company and phone (optional — only if you want to tell us);
- Subject and message — whatever you write. We ask that you do not include sensitive data or confidential information that is not needed to answer you.
2.2. Data collected automatically
Along with the form submission and in the server's technical logs, we collect:
- IP address — used for security, abuse prevention and rate limiting;
- Browser information (user agent), indicating browser, operating system and device type;
- Originating page of the submission, plus date and time;
- Request logs — endpoint, method, response code and processing time, for auditing and fault diagnosis.
2.3. Analytics data
This site loads two third-party tools: Google Analytics 4, only if you authorize the Statistics category, and the Meta Pixel, only if you authorize the Marketing category. There is no Google Tag Manager, Microsoft Clarity, external fonts or embedded maps. While you have not decided, and if you decline, no third-party script is loaded: declining is not loading in anonymous mode, it is not loading.
With your consent in the Statistics category, Google Analytics 4 collects: pages visited and visit duration, traffic source and campaign parameters (UTM), browser, operating system, language and device, approximate location derived from the IP address, and navigation events — such as form submission, WhatsApp clicks and page scrolling. The IP address is anonymized before storage.
What we do not send to analytics: the content of your message, your name, your email and your phone number. That data stays in our database and with the commercial team. What leaves here is the subject category, the language and the campaign source.
The Marketing category has the Meta Pixel in use, and it loads only with your consent in it. The Preferences and Functional categories exist in your choice panel and currently have no technology in use.
2.4. What we do not do
- We do not sell personal data.
- The only advertising pixel we use is the Meta Pixel, and only with your consent in the Marketing category. We do not use Google Ads, LinkedIn or TikTok for remarketing.
- We do not make automated decisions that produce legal effects or significantly affect you.
- We do not intentionally collect data from children or adolescents.
3. What we use data for
- Answering your enquiry and preparing proposals and quotes;
- Delivering the services contracted and maintaining the commercial relationship;
- Security and fraud prevention — blocking automated submissions (spam/bots), abuse and unauthorized access attempts;
- Analytics and improving the site — understanding what works and what needs improving (subject to consent, should analytics be adopted);
- Compliance with legal obligations and the regular exercise of rights in legal proceedings.
4. Legal bases (LGPD, art. 7)
| Processing | Legal basis |
|---|---|
| Contact form data | Preliminary procedures related to a contract, at the data subject's request (art. 7, V) and, where applicable, consent (art. 7, I) |
| Delivery of contracted services | Performance of a contract (art. 7, V) |
| Logs, IP and abuse protection | Legitimate interest in information security (art. 7, IX) |
| Analytics (if adopted) | Consent (art. 7, I) |
| Marketing and advertising (if adopted) | Consent (art. 7, I) |
| Tax and accounting retention, and legal defence | Legal obligation (art. 7, II) and regular exercise of rights (art. 7, VI) |
Where processing rests on legitimate interest, we assess whether it is necessary, proportionate, and whether your fundamental rights and freedoms do not prevail. You may object to that processing at any time (see section 8).
5. Who we share it with
We share data only where necessary for the purposes above, or where required by law. We do not sell or transfer data to third parties for their own marketing purposes.
| Recipient | Role and purpose |
|---|---|
| Hosting provider (Locaweb) | Processor — hosts the website, the message database and the email service. Servers in Brazil. |
| Google (Google Analytics 4) | Processor — measures site usage. It only receives data if you authorize the Statistics category. It receives neither the content of the form nor your contact details. |
| Public and judicial authorities | Where there is a legal request, a court order, or a need to defend rights. |
Should we adopt other tools (CRM, support, advertising, CDN), this policy will be updated before or at the time of adoption.
6. International transfer
The website and the database holding your messages are hosted in Brazil. Your message, your name and your contact details do not leave the country.
Google Analytics 4, when you authorize it in the Statistics category, processes navigation data on Google servers, which may be outside Brazil, including in the United States. That transfer rests on Google's standard contractual clauses and the adequacy mechanisms provided for in art. 33 of the LGPD. If you do not authorize the Statistics category, no data of yours is sent to Google by this site.
No other foreign supplier is called: there are no external fonts, no third-party CDN and no embedded maps. Every script, style, image and video is served from our own domain.
7. How long we keep it
- Form messages: kept for the duration of the relationship and for up to 5 years after the last contact, the general limitation period for any defence of rights. You may request deletion sooner (see section 8).
- Technical logs (IP, user agent, requests): up to 12 months, in line with art. 15 of the Brazilian Internet Civil Framework for application logs.
- Record of your consent: kept in your browser (localStorage) until you change it or clear your browser data.
Once the period or the purpose ends, data is deleted or irreversibly anonymized, ceasing to be personal data.
8. Exercising your rights as a data subject
The LGPD grants you, as the data subject, the following rights (art. 18), exercisable free of charge and at any time. For a deletion request, the step-by-step — channel, what to include and deadline — is in Data Deletion:
- Confirmation that processing exists;
- Access to your data;
- Correction of incomplete, inaccurate or outdated data;
- Anonymization, blocking or deletion of data that is unnecessary, excessive or processed unlawfully;
- Portability to another supplier, on express request;
- Deletion of data processed on the basis of your consent;
- Information about who we share your data with;
- Information about the possibility of withholding consent and the consequences of doing so;
- Withdrawal of consent, at any time;
- Objection to processing based on legitimate interest;
- Review of automated decisions — we make no such decisions today.
How to request
- By email: contato@vitamunhoztecnologia.com.br, with the subject "Data subject rights";
- Through the form on the Contact page, stating your request in the message field.
We will reply within 15 days of receipt (art. 19, II, of the LGPD). We may ask for additional information to confirm your identity — that protects you against fraudulent requests made in your name.
To manage cookies and analytics, the fastest route is the Cookie Preferences page — the change is immediate and requires no request.
You also have the right to petition the Brazilian Data Protection Authority (ANPD) if you believe your rights have not been met.
9. Information security
We adopt technical and administrative measures to protect your data against unauthorized access, loss, alteration or destruction:
- Encryption in transit — the whole site is served over HTTPS (TLS 1.2/1.3), with automatic redirection and HSTS;
- SQL injection protection — every database query uses prepared statements;
- Input sanitization and XSS protection;
- Rate limiting per IP, on the form and on administrative login attempts;
- Administrative passwords stored only as a hash (bcrypt) — never in plain text;
- Access control to the admin area through authentication, with session expiry;
- Security headers (CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, among others);
- Audit logs and periodic backups.
No system is 100% infallible. Should a security incident occur with relevant risk to your rights, we will notify you and the Brazilian Data Protection Authority, in accordance with art. 48 of the LGPD.
10. Cookies
The detail of every technology, purpose and retention period is in the Cookie Policy. You control your choices in Cookie Preferences.
11. Updates to this policy
We may revise this policy to reflect legal, technical or service changes. The date of the last revision is always at the top of the page. Where the change is significant — especially if it involves new purposes or new recipients — we will ask for your consent again.
12. Contact
Vita Munhoz Tecnologia
CNPJ: 59.414.271/0001-36
Rua Clorivaldo Migliari, 150 - Nova Ourinhos, Ourinhos - SP, CEP 19907-475
E-mail: contato@vitamunhoztecnologia.com.br
Phone: +55 (14) 99901-5049
See also the Terms of Use.