LGPD Brazil is an independent educational project focused on practical information about Brazil's data protection framework. We aim to collect only the information reasonably necessary to operate the website, respond to users, maintain security, and support our products.
1. Scope of This Policy
This Privacy Policy applies to information processed through the LGPD Brazil website at lgpdbrazil.com and related pages that link to this policy.
It does not govern the independent data-processing activities of third-party websites or services that you choose to visit, including Stripe Checkout. Those services operate under their own privacy policies.
2. Who Operates This Website
For purposes of this Privacy Policy, “LGPD Brazil,” “we,” “us,” and “our” refer to the operator of lgpdbrazil.com and the LGPD Brazil educational project.
Privacy-related questions about this website may be submitted through our Contact page.
3. Information We May Collect
Depending on how you use the website, we may process the following categories of information:
| Category | Examples | Why it may be used |
|---|---|---|
| Contact information | Name, email address, and information you choose to include in a message. | To receive and respond to inquiries, support requests, or other communications. |
| Technical and security data | IP address, browser/device information, request logs, timestamps, error logs, and security events. | To operate, protect, troubleshoot, and maintain the website and prevent abuse. |
| Website interaction data | Pages requested, referring page, navigation information, and similar operational data generated by the website or hosting environment. | To understand technical performance, maintain the website, and investigate problems or misuse. |
| Purchase-related reference data | Information you provide to us when requesting product support, such as an order reference or purchase email. | To help identify a purchase or assist with product access and support. |
We ask users not to send sensitive personal data, payment-card numbers, passwords, government identification documents, medical records, or other unnecessary confidential information through general website contact forms.
4. Information We Do Not Intentionally Collect Through Our Own Checkout
LGPD Brazil does not directly collect or store full payment-card numbers for its digital products. Purchases are processed through Stripe Checkout.
When you click a purchase button and proceed to Stripe Checkout, you are interacting with a separate payment service. Stripe may collect payment, billing, transaction, fraud-prevention, device, and other information according to its own privacy and service terms.
5. Purposes of Processing
We may use information processed through the website for purposes such as:
- operating and maintaining the website;
- responding to questions, messages, and support requests;
- protecting the website against fraud, abuse, unauthorized access, and malicious activity;
- troubleshooting errors and improving reliability;
- maintaining appropriate records of communications and support activity;
- complying with applicable legal or regulatory obligations; and
- establishing, exercising, or defending legal rights where necessary.
6. Legal Bases and Privacy Principles
Where a privacy law requires a legal basis for processing, the applicable basis depends on the specific activity and circumstances. Depending on the context, processing may be based on steps requested by the user, legitimate interests in operating and securing the website, compliance with legal obligations, consent where appropriate, or another lawful basis available under applicable law.
We aim to apply principles such as purpose limitation, necessity/data minimization, transparency, security, prevention, and accountability when handling personal information through the website.
7. Cookies, First-Party Analytics, and Approximate Geography
LGPD Brazil uses a lightweight first-party, cookieless analytics system to understand website use without creating third-party advertising profiles. It can record page views, approximate unique visitors and sessions, active engagement time, scroll activity, CTA clicks, source/channel, campaign parameters, language, device category, and similar operational metrics.
Home Analytics is designed not to store raw IP addresses and does not rely on analytics cookies or browser localStorage. A truncated or derived technical identifier may be used to estimate visitors and sessions. Logged-in users may be excluded and browser Do Not Track signals may be honored according to the active configuration.
Approximate country, region/state, and city may be derived from network information. When server or CDN geography is unavailable, the currently enabled external fallback may send the visitor's IP address to ipwho.is at request time solely to return approximate geography. LGPD Brazil does not store that raw IP address in its Home Analytics database.
Home Analytics records are configured for an operational retention period of up to 180 days. The data is used to understand traffic, improve content and navigation, measure purchase-funnel performance, maintain security, and identify technical or conversion issues.
8. Stripe and Other Service Providers
We may use third-party service providers to operate the website or support our products, such as website hosting, security, email, technical infrastructure, geolocation, analytics support, and payment services.
Stripe is used as the payment processor for LGPD Brazil digital products. When you proceed to Stripe Checkout, Stripe independently processes information necessary to complete the transaction, detect fraud, operate payment services, and provide payment-related functionality under its own terms and privacy practices.
LGPD Brazil may receive transaction references, payment status, purchase amount, customer email, and other limited order information from Stripe when reasonably necessary to verify a purchase, deliver the digital product, provide support, administer refunds, reconcile transactions, and protect against abuse. Full payment-card numbers are not stored by LGPD Brazil.
9. Sharing of Information
We do not sell personal information to data brokers or other parties for their independent use.
We may disclose or make information available to third parties when reasonably necessary to:
- operate hosting, security, communication, or technical services;
- respond to a request initiated by you;
- protect the website, our users, or our legal rights;
- investigate suspected fraud, abuse, or security incidents;
- comply with a valid legal requirement; or
- support a business transition where permitted by law and subject to appropriate safeguards.
10. International Data Transfers
Some service providers or technical infrastructure used by LGPD Brazil may operate in countries other than the country where you are located. As a result, personal information may be stored, supported, or accessed internationally.
Where applicable law requires safeguards for international transfers, we will seek to use an appropriate legal or contractual mechanism for the relevant processing relationship.
11. Data Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, legitimate operational or security needs, applicable legal requirements, dispute resolution, or enforcement of agreements.
Retention periods may differ by category. For example, technical security logs may be retained for a limited operational period, while records connected to a legitimate dispute or legal requirement may need to be preserved longer.
12. Security
We use reasonable technical and organizational measures intended to protect information handled through the website against unauthorized access, loss, misuse, alteration, or disclosure. No website, network, storage system, or transmission method can be guaranteed to be completely secure.
13. Your Privacy Rights
Depending on your location and the law that applies to a particular processing activity, you may have rights concerning your personal information. These may include rights to request information about processing, access, correction, deletion or anonymization in applicable circumstances, restriction or objection, withdrawal of consent where consent is the basis, or other rights provided by law.
To submit a privacy request concerning information controlled by LGPD Brazil, email support@lgpdbrazil.com or use our Contact page and describe your request. We may need to verify your identity in a proportionate manner before fulfilling certain requests.
If your request concerns payment data processed directly by Stripe, you may need to contact Stripe or your payment provider in addition to contacting LGPD Brazil, depending on the nature of the request.
14. Children and Minors
LGPD Brazil is a business and professional educational resource and is not directed to children. We do not knowingly design the website to collect personal information from children for behavioral advertising or similar purposes.
If you believe a child has submitted personal information to us unnecessarily, please contact us so we can review the situation.
15. External Links
Our website may link to government websites, regulatory materials, Stripe, technology providers, or other third-party resources. We are not responsible for the privacy practices of websites that we do not operate. Review the privacy notice of the relevant third party before providing information to it.
16. Changes to This Privacy Policy
We may update this Privacy Policy when our website, technology stack, service providers, legal requirements, or data-processing practices change. The “Last updated” date at the top of the page indicates the most recent version.
Material changes may be communicated through the website where appropriate.
17. Contact Us
Questions about this Privacy Policy or privacy requests concerning LGPD Brazil may be submitted to support@lgpdbrazil.com.