Privacy Policy | Paes Consulting & Management

01 General Information

This Privacy Policy is intended to demonstrate the commitment of PAES CONSULTORIA E GESTAO LTDA, a private legal entity registered under Tax ID (CNPJ) No. 60.462.837/0001-84, headquartered at R. Luiz Delfino, 685, Apt. T 404, Glória, Joinville - SC, ZIP 89216-120, Brazil ("Company", "we" or "our"), to the privacy and protection of personal data of our clients, partners, suppliers, employees, and website visitors ("Data Subjects" or "you").

This policy has been prepared in compliance with the Brazilian General Data Protection Law (Law No. 13,709/2018 — LGPD) and other regulations applicable to the processing of personal data in Brazil.

02 Personal Data Collected

We may collect and process the following personal data, according to the purpose and applicable legal basis:

Identification data: full name, CPF (tax ID), RG (identity card), date of birth, position and company.
Contact data: business and/or residential address, email, phone/mobile number.
Professional data: company, position, department, and corporate information relevant to the provision of services.
Browsing data: IP address, browser type, pages visited, time spent on site, cookies, and approximate geolocation data.
Contractual data: information related to service agreements, commercial proposals, and administrative documents.

Important: We do not collect sensitive personal data (racial or ethnic origin, religious beliefs, political opinions, health or sexual life data, genetic or biometric data) unless strictly necessary and with the express consent of the data subject.

03 Purpose of Data Processing

The personal data collected is used for the following purposes:

Provision of contracted consulting, administrative management, and office support services.
Preparation and management of contracts, proposals, and commercial documents.
Communication regarding project progress, deadlines, and deliverables.
Issuance of invoices and compliance with tax and accounting obligations.
Sending institutional and informational communications (with consent).
Improving the browsing experience on our website and digital platforms.
Responding to requests, questions, and complaints from data subjects.
Compliance with legal and regulatory obligations.
Statistical analysis and continuous improvement of our services.

04 Legal Basis for Processing

The processing of personal data by Paes Consulting & Management is based on the following legal grounds provided by the LGPD (Article 7):

Contract performance (Art. 7, V): for the provision of contracted consulting and management services.
Data subject consent (Art. 7, I): for sending institutional communications and informational materials.
Legal obligation compliance (Art. 7, II): for issuing tax documents and meeting regulatory requirements.
Legitimate interest (Art. 7, IX): for service improvement, statistical analysis, and commercial prospecting.
Regular exercise of rights (Art. 7, VI): for defense in judicial, administrative, or arbitration proceedings.

05 Personal Data Sharing

The personal data collected may be shared with third parties in the following cases:

Service providers: companies contracted for IT, accounting, legal, and marketing services, acting under our instructions and in compliance with this Policy.
Public authorities: when required by law, regulation, or court order.
Business partners: for the execution of joint projects, with prior consent of the data subject when applicable.

Guarantee: All third parties with whom we share data are subject to contractual obligations of confidentiality and data protection, in compliance with the LGPD.

06 Data Storage & Security

We adopt appropriate technical and organizational measures to protect personal data against unauthorized access, destruction, loss, alteration, or any form of improper processing, including:

Encryption of data in transit and at rest.
Restricted access controls based on role profiles.
Continuous monitoring of systems and technological environments.
Employee training and awareness on data protection.
Internal information security policies and incident management.
Regular backups and disaster recovery planning.

Data is stored on secure servers located in Brazil, in compliance with LGPD requirements.

07 Data Subject Rights

In accordance with Articles 17 to 22 of the LGPD, you, as a data subject, have the following rights:

Confirmation of the existence of personal data processing.
Access to the personal data we process about you.
Correction of incomplete, inaccurate, or outdated data.
Anonymization, blocking, or deletion of unnecessary, excessive, or non-compliant data.
Portability of data to another service or product provider.
Deletion of personal data processed based on consent.
Information about public and private entities with which we share your data.
Information about the possibility of withholding consent and the consequences of such refusal.
Revocation of consent at any time.

How to exercise your rights: To exercise any of the above rights, please contact us through the channels provided in the "Contact & DPO" section of this Policy. We will respond to your request within 15 (fifteen) business days, as established by the LGPD.

08 Cookies & Tracking Technologies

Our website may use cookies and similar technologies to improve your browsing experience. The cookies used may include:

Essential cookies: necessary for the basic functioning of the website.
Performance cookies: collect information about how visitors use the site.
Functionality cookies: allow the site to remember your choices and preferences.
Analytics cookies: used for traffic analysis and browsing behavior.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

09 Data Retention

Personal data will be stored for as long as necessary to fulfill the purposes for which it was collected, including legal, contractual, accountability, or regulatory authority obligations.

At the end of the retention period, data will be securely deleted or anonymized, unless there is a legal basis justifying its continued storage.

10 Changes to This Policy

Paes Consulting & Management reserves the right to modify this Privacy Policy at any time by publishing the updated version on our website. We recommend that you periodically review this page.

If substantial changes are made, we will notify data subjects through available contact channels or through a prominent notice on our website.

11 Contact & Data Protection Officer (DPO)

To clarify any questions about this Privacy Policy, exercise your rights as a data subject, or report security incidents, please contact us:

PAES CONSULTORIA E GESTAO LTDA
Tax ID (CNPJ): 60.462.837/0001-84
Address: R. Luiz Delfino, 685, Apt. T 404, Glória, Joinville - SC, ZIP 89216-120, Brazil

If you wish, you may also file a complaint with the Brazilian National Data Protection Authority (ANPD) at www.gov.br/anpd.

12 Final Provisions

This Privacy Policy is governed by the laws of the Federative Republic of Brazil. Any disputes arising from this Policy shall be resolved in the Court of the District of Joinville, State of Santa Catarina, waiving any other jurisdiction, however privileged it may be.

By using our services, accessing our website, or providing your personal data, you acknowledge that you have read and understood the terms of this Privacy Policy.