> How Safefy processes personal data collected on its website: legal basis, retention, sharing, security and how to exercise your rights under the LGPD. url: https://www.safefy.com.br/privacy formato: markdown gerado do HTML publicado, sem apresentação versao_html: https://www.safefy.com.br/privacy --- Legal document # Privacy policy Updated on September 1, 2026. Applies to the website www.safefy.com.br and the blog. This is a translation. The binding version is the one in Portuguese, under Brazilian law (LGPD). [Read the original](https://www.safefy.com.br/pt/privacidade). This policy describes how Safefy processes the personal data collected on this website, for what purpose, with whom it is shared, how long it is kept and what your rights are. ## Who the controller is SAFEFY TECNOLOGIA LTDA., CNPJ 61.065.015/0001-22, Av. Nossa Senhora da Penha, 2598, Santa Luíza, Vitória/ES, CEP 29.045-402. Under Brazil's General Data Protection Law (LGPD), we are the controller of the data processed on this website: decisions about what is collected and for what purpose are ours. ## Data processed, purposes and legal basis We process the data you actively give us and data about where your visit came from. We do not collect sensitive personal data or data from children and teenagers. - Identification and contact data (name, email, company and phone), provided when you request materials or start a conversation. Purpose: deliver what was requested, reply and maintain a business relationship. Legal basis: consent (art. 7, I) for marketing communications and legitimate interest (art. 7, IX) for customer service. - Content of your request, when you describe a question in our channels. Purpose: understand the context and reply. Legal basis: legitimate interest (art. 7, IX). This content is not added to the contact database and is not used for marketing. - Data about the origin of your visit, such as the campaign or website that referred you. Purpose: measure the reach of our outreach. Legal basis: legitimate interest (art. 7, IX). Without a submitted form, this information is not linked to an identified person. - Records required by law, when an applicable rule requires them to be kept. Legal basis: compliance with a legal obligation (art. 7, II). Your consent to receive communications is recorded with your contact details and can be withdrawn at any time. ## Cookies and similar technologies We only use storage that is strictly necessary for the website to work. It stays in your browser, does not identify you individually and can be deleted at any time in your browser settings. We do not use advertising cookies and do not share browsing data with social networks. We use cookieless audience measurement that counts aggregate visits to the website. It stores nothing in your browser, does not identify you individually and does not follow you across other websites. A visitor is represented by a code calculated from the visit itself, discarded within 24 hours; what remains is a count, not a person. It records the page visited, the website or campaign that referred you, approximate country and region, operating system, browser and device type. Purpose: understand which content is useful and how people find us. Legal basis: legitimate interest (art. 7, IX). If we ever adopt an analytics tool that stores cookies, identifies you individually or serves marketing, that processing will depend on your prior consent, collected through a specific notice, and this policy will be updated beforehand. Features run by third parties, such as meeting scheduling, may store their own cookies, subject to the privacy policies of those providers. ## Sharing and international transfer We share data only with processors that provide services to Safefy, and each receives only what it needs to perform its role, under contractual confidentiality and security obligations. We do not sell, rent or give away personal data to third parties. Some of these processors are based outside Brazil, which constitutes an international data transfer, carried out with the safeguards set out in article 33 of the LGPD. The list of processors is available to data subjects on request to the data protection officer. ## Information security We adopt technical and administrative measures to protect data against unauthorized access, loss, alteration and improper disclosure, including encryption in transit and at rest, role-based access control, access logging for audit purposes and logical segregation between databases. These measures are part of our Information Security Policy and our Personal Data Protection Policy, which are reviewed periodically. ## Automated decisions We do not build behavioral profiles of website visitors or subject them to automated decisions that produce legal effects or significantly affect them. ## Retention period Data is kept while the purpose that justified its collection lasts, or for the period required by a legal obligation. The contact database is reviewed yearly to delete records without interaction, and deletion can be requested at any time. ## Your rights Under article 18 of the LGPD, you may at any time: - Confirm that processing exists and access your data - Correct incomplete, inaccurate or outdated data - Request anonymization, blocking or deletion of unnecessary data - Request data portability - Obtain information about the entities we share data with - Withdraw consent - Object to processing you consider irregular Requests should be sent to atendimento@safefy.com.br and are answered within 15 days, free of charge. Marketing communications also carry their own unsubscribe link. ## Data protection officer Eduardo Franceschett, at eduardo@safefy.com.br. The officer receives communications from data subjects and from Brazil's National Data Protection Authority (ANPD) and takes the appropriate measures. ## Changes to this policy This policy may be updated at any time, and the update date appears at the top of the document. Relevant changes to the purposes or legal bases of processing are communicated in advance to registered data subjects. ## Complaints Requests and complaints can be sent to the data protection officer at the address above. You may also petition Brazil's National Data Protection Authority at gov.br/anpd.