Privacy Policy
How personal data is handled on this site, under Brazil’s General Data Protection Law (LGPD, Law 13,709/2018).
Effective from
Who the controller is
This website (consultoranataly.com.br) is run by Nataly Maria, a Microsoft Power Platform consultant based in Sorocaba, São Paulo, Brazil. For the purposes of the LGPD, she is the controller of the personal data processed through this site.
Data subject contact channel
For any matter about your personal data, including exercising your rights, contact the controller directly at nataly@consultoranataly.com.br. This is the data subject communication channel required by article 41 of the LGPD.
What data is processed
- Browsing data, only with your consent: pages visited, time on page, clicks on contact links (WhatsApp, email, phone and LinkedIn), traffic source, device and browser type and approximate location (city and country), collected by Google Analytics 4. Google Analytics 4 does not log or store IP addresses.
- Preferences stored in your browser: your chosen language and theme, and your cookie choices. They stay on your device only.
- Data you choose to send when you reach out via WhatsApp, email or LinkedIn: name, phone number or email address and the content of your message.
- Technical access logs (such as IP address, date and time), kept by the hosting provider for server security and operation.
This site has no forms, requires no sign-up and does not collect sensitive personal data.
Purposes and legal bases
| Purpose | Data | Legal basis (LGPD, art. 7) |
|---|---|---|
| Measure audience and improve the site | Browsing data (Google Analytics 4) | Consent (item I) |
| Reply to messages and prepare proposals | Contact details and message | Pre-contractual steps at the data subject’s request (item V) and legitimate interest (item IX) |
| Remember your preferences | Language, theme and cookie choices | Legitimate interest (item IX), required for the site to work |
| Server security and operation | Access logs | Compliance with a legal obligation (item II) and legitimate interest (item IX) |
International transfers
Google, Meta and LinkedIn may process data on servers outside Brazil, such as in the United States. These transfers follow article 33 of the LGPD, based on the contractual clauses and safeguards these providers offer.
How long data is kept
- Google Analytics 4: up to 14 months.
- Contact messages: for as long as needed to handle your request and any resulting business relationship, within legal time limits.
- Cookie choice: 12 months. After that, the notice appears again.
- Access logs: according to the hosting provider’s policy and applicable legal time limits.
Your rights
Under article 18 of the LGPD, you may request at any time:
- confirmation that your data is being processed;
- access to your data;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary or excessive data;
- data portability;
- deletion of data processed based on consent;
- information about who your data has been shared with;
- information about the option not to consent and its consequences;
- withdrawal of consent.
To exercise any of them, email nataly@consultoranataly.com.br. You will get a reply within 15 days. You may also file a complaint with Brazil’s National Data Protection Authority (ANPD) at gov.br/anpd.
Security
The site is served over HTTPS only, collects no data through forms and loads third-party tools only after your consent. Reasonable technical and administrative measures are taken to protect personal data, as required by article 46 of the LGPD.
Children and teenagers
This site is aimed at businesses and professionals and is not intended for anyone under 18.
Changes to this policy
This policy may be updated to reflect changes to the site or to the law. The effective date at the top of the page always shows the current version. If cookie use changes in a meaningful way, the cookie notice appears again so you can decide.