This Policy describes how Trotta (“we”) processes personal data of website visitors and people who contact us, in accordance with the Brazilian General Data Protection Law — LGPD (Law 13,709/2018).
1. Who we are (data controller)
Trotta [Razão Social Ltda.], CNPJ [53.198.666/0001-62], based in Florianópolis, Santa Catarina, Brazil. Data Protection Officer (DPO): privacy@trotta.dev.
2. What data we collect
- Data you provide: name, email, company, how you found us, project stage, type of need, budget range, and message submitted through the contact form; email for the newsletter.
- Data collected automatically: IP address, browser and device type, pages visited, date and time of access, and cookie identifiers (see Cookie Policy).
- We do not intentionally collect sensitive data or data from children and adolescents.
3. How we use your data (purposes and legal bases)
- Respond to your inquiry and present proposals — performance of pre-contractual procedures (art. 7, V) and legitimate interest (art. 7, IX).
- Send the newsletter when you subscribe — consent (art. 7, I), revocable at any time via the unsubscribe link.
- Measure audience and improve the site, only with analytical cookies you have accepted — consent (art. 7, I).
- Ensure website security and prevent fraud — legitimate interest (art. 7, IX).
- Comply with legal and regulatory obligations (art. 7, II).
4. Who we share data with
We do not sell personal data. We share only with service providers (hosting, email, forms, analytics), under contract and our instructions, and with authorities when required by law. Some providers may be located outside Brazil; in those cases, we adopt contractual clauses and safeguards provided by the LGPD for international data transfers.
5. How long we keep data
- Business contacts: up to 24 months after the last interaction, unless a contractual relationship follows.
- Newsletter: as long as your subscription is active.
- Access logs: 6 months, as required by the Brazilian Civil Rights Framework for the Internet (Law 12,965/2014, art. 15).
- Cookie consent record: 180 days, in your browser.
6. Your rights
You may, at any time, request: confirmation of data processing; access to your data; correction of incomplete or outdated data; anonymization, blocking, or deletion; portability; information about sharing; withdrawal of consent; and objection to unlawful processing (art. 18 of the LGPD). To exercise your rights, write to privacy@trotta.dev. We respond within 15 days.
7. Security
We adopt technical and administrative measures to protect data against unauthorized access, loss, alteration, or destruction, such as in-transit encryption (HTTPS), access control, and data minimization. No system is infallible; in the event of a significant incident, we will notify you and the ANPD as required by law.
8. Cookies
Cookie usage is detailed in our Cookie Policy. Non-essential cookies are only activated with your consent, which can be changed at any time in "Cookie preferences" in the site footer.
9. Changes
We may update this Policy to reflect legal or operational changes. The current version will always be available on this page, with the update date at the top.
10. Contact
Questions or requests: privacy@trotta.dev.