Version: 0.1-draft · Effective: [PLACEHOLDER: date]
2.1 Summary
- We collect the data you provide in the Website forms to respond to your request.
- We do not sell personal data.
- We only send marketing content if you tick the specific option.
- The Website does not use advertising or analytics cookies.
- You can exercise your rights by writing to admin@idealbusiness.com.br.
2.2 Data controller
Ideal Business Informática Ltda., CNPJ 05.169.017/0001-90, Rua João Meneguelli, 308, Cravinhos/SP, Brazil, CEP 14140-000.
Data Protection Officer (DPO): [PLACEHOLDER: name] · admin@idealbusiness.com.br
We process data under the Brazilian General Data Protection Law (LGPD, Law 13,709/2018).
[PLACEHOLDER: validate with local counsel the laws of the data subject's country]
2.3 What data we process, why and on what legal basis
| Situation | Data | Purpose | Legal basis (LGPD) |
|---|---|---|---|
| Demo, pilot or contact request | Name, email, company, job title, industry, number of sites and sensors (ranges), country, message | Respond to the request, schedule the demo, prepare a proposal | Pre-contractual steps at the data subject's request (art. 7, V) |
| Calculator report | Name, email, company and values entered | Send the PDF report and follow up on it | Art. 7, V |
| Marketing communications | Name, email, company | Send news and content | Consent (art. 7, I), via a separate, unticked option |
| Acceptance record | Date and time, version of the Terms and Policy accepted | Prove consent and acceptance | Legal obligation and exercise of rights (art. 7, II and VI) |
| Visit source | Campaign parameters (UTM) and referring page | Understand which channels bring contacts | Legitimate interest (art. 7, IX) |
| Bot protection | Technical browser and device data, IP address | Prevent automated submissions and abuse | Legitimate interest (art. 7, IX) |
| Website statistics | Pages visited, source, device type and country, without cookies and without identifying you | Measure and improve the Website | Legitimate interest (art. 7, IX) |
| Access logs | IP address, date and time | Security and compliance with Brazil's Internet Civil Framework | Legal obligation (art. 7, II; Law 12,965/2014, art. 15) |
| Platform use | Users' name, email and role; access and action logs | Provide the service, security and auditing | Performance of contract (art. 7, V) and legitimate interest (art. 7, IX) |
2.4 Data inside the Platform
In the Platform, the Customer registers Users and alert contacts. For this data, the Customer is the controller and Ideal Business acts as processor, processing it only to provide the service under the Contract. Data subject requests about this data should be sent to the Customer; we will support the Customer in responding.
Temperature and humidity readings are, as a rule, not personal data.
2.5 Who we share data with
We share data only with providers that help us run the Website and the Platform, under contract and to the extent necessary:
| Provider | Role | Processing location |
|---|---|---|
| Vercel Inc. | Website hosting | USA |
| Neon Inc. | Contact database | São Paulo, Brazil |
| Resend | Email delivery | São Paulo, Brazil |
| Cloudflare Inc. (Turnstile) | Bot protection | USA and global network |
| Umami Software (Umami Cloud) | Cookieless website statistics | USA / European Union |
| Platform providers | Platform hosting, database and email | Vercel (web app), Railway (API), Neon (database, São Paulo) and Resend (email, São Paulo) |
We may also share data when required by law, court order or a competent authority, or to defend our rights.
2.6 International transfers
Some providers process data outside Brazil. In these cases we rely on the mechanisms in art. 33 of the LGPD, such as the standard contractual clauses approved by the ANPD.
2.7 How long we keep data
| Data | Period |
|---|---|
| Contacts (leads) with no business relationship | 24 months after the last contact, or until you request deletion |
| Marketing consent | Until you withdraw it |
| Acceptance and consent records | For as long as needed to prove them, including in legal proceedings |
| Website access logs | 6 months |
| Platform data | According to the Contract and, after termination, clause 1.13 of the Terms |
2.8 Your rights
You may request at any time: confirmation of processing; access; correction; anonymization, blocking or deletion of unnecessary or unlawfully processed data; portability; deletion of data processed based on consent; information about who we share data with; and withdrawal of consent (LGPD art. 18). You may also object to processing based on legitimate interest.
Write to admin@idealbusiness.com.br. We may ask for information to confirm your identity. We will respond within the legal deadline. You may also file a complaint with Brazil's National Data Protection Authority (ANPD) or with the authority in your country.
To stop receiving marketing, use the unsubscribe link in any email.
2.9 Security
We use technical and administrative measures to protect data, such as encrypted connections, role-based access control, two-factor login on the Platform, separation of data between customers and action logs. No system is completely immune to incidents; if a relevant incident occurs, we will notify data subjects and the ANPD as required by law.
2.10 Minors
The Website and the Platform are intended for businesses and are not directed at anyone under 18.
2.11 Cookies
See the Cookie Policy.
2.12 Changes
This Policy may be updated. The version and effective date are shown at the top of the page. Material changes will be announced on the Website and, where there is an active relationship, by email.