Legal
Privacy notice
Last updated: 25 April 2026
This notice explains how NavegaFluxo Segurança Digital Ltda. ("NavegaFluxo", "we") collects and handles personal data. We process data under the Brazilian General Personal Data Protection Law (LGPD, Law 13.709/2018) and, where it applies, the EU General Data Protection Regulation (Regulation 2016/679, "GDPR").
Who is responsible
NavegaFluxo is the controller of personal data collected through this website. Our registered office is at Av. Brigadeiro Faria Lima, 3477, 14º andar, Itaim Bibi, São Paulo — SP, 04538-133, Brazil. Company registration: CNPJ 38.412.706/0001-54.
What we collect
- Contact details you submit through our forms: name, company, email, phone, and the content of your message.
- Technical data your browser sends: IP address, device and browser type, and pages visited.
- Usage data from cookies and similar technologies, only where you have given consent. See our cookie policy.
Why we use it
We use your data to respond to enquiries, to provide and improve our services, to meet legal and regulatory obligations, and to keep this website secure. We rely on the legal bases set out in Article 7 of the LGPD and Article 6 of the GDPR — typically your consent, the performance of a contract, or our legitimate interest in running the business.
How long we keep it
We keep personal data only as long as needed for the purpose it was collected, or as required by law. Enquiry records are kept for up to 24 months unless a contractual relationship begins, after which retention follows the service agreement.
Sharing
We do not sell personal data. We share it only with service providers who help us operate (for example, hosting and analytics), under contracts that require them to protect it, and with authorities where the law requires.
Your rights
Under the LGPD and GDPR you may request access to your data, correction, deletion, portability, and information about how it is shared. You may also withdraw consent at any time. To exercise any right, write to [email protected]. We respond within the periods set by law.
Security
We apply technical and organisational measures appropriate to the risk, including access control, encryption in transit, and monitoring of our own systems. No method of transmission is perfectly secure, but we work to reduce risk continuously.
Changes
We may update this notice as our practices or the law change. The date at the top reflects the most recent revision. Material changes will be highlighted on this page.
Contact
Questions about this notice or your data can be sent to [email protected] or by post to the address above.