1. Who we are and our roles
ALAVORA is a consulting brand focused on strategy, marketing, technology, automation, AI and Music Business. The legal entity responsible for this channel is: 68.731.440 Fausto Vieira das Merces – ME, Brazilian CNPJ 68.731.440/0001-52, based in São José do Rio Preto, São Paulo, Brazil. The responsible entity may act as a controller for direct inquiries, lead relationships, newsletters and assessments. When processing information under a business customer’s documented instructions, it may act as a processor; the customer determines the purposes and lawful grounds within the applicable framework.
2. Information we may collect
Depending on how you interact with us, information may include name, email, phone number, organization, role, area of interest, assessment answers, voluntary message content, newsletter subscriptions, technical access records such as IP address, browser and security logs, and interactions with our communications. General forms are not designed to collect passwords or sensitive personal information. Please avoid sharing confidential information in free-text fields.
3. Purposes and lawful grounds
Data may be processed to respond to requests, provide initial assessments, prepare proposals, manage business relationships, perform contracts, deliver requested updates, keep systems secure, prevent misuse, meet legal obligations and understand channel performance. Depending on the activity, grounds may include contract performance or precontractual steps, legal obligations, legitimate interests subject to safeguards, and consent where required. Signing up for updates is not blanket consent for unrelated purposes.
4. Marketing communications
If you subscribe or otherwise validly opt in to promotional communications, we may send news and relevant materials. Marketing messages should offer a straightforward unsubscribe method. Opting out does not prevent necessary responses to active requests or legal obligations.
5. Sharing and providers
Hosting, email, CRM, automation, form, messaging, analytics and authorized AI providers may assist with processing to the extent required for stated purposes. Their actual identities and locations must be verified before this policy is published. No absolute assertion about data sharing or sale should be made without operational verification.
6. Artificial intelligence and confidentiality
AI tools may support workflow organization, editorial production, assistance and analysis where appropriate and authorized. Client secrets, credentials and third-party contact databases must not be submitted to public or unauthorized systems. Contracted engagements require documented instructions on access, retention, providers and permitted AI use.
7. Cookies and similar technologies
Necessary cookies may be used; depending on actual settings, embedded forms, CRM tools, anti-abuse services, analytics and third-party content may use similar technologies. Categories, vendors and available choices must reflect the deployed website. Where consent is legally required for nonessential technologies, such technologies should operate only after valid consent. Publishing this policy does not, by itself, implement a consent mechanism.
8. International transfers
Some digital infrastructure providers may process data outside Brazil. Where international transfers of personal data occur, we must follow the applicable requirements and safeguards under Brazilian data protection law and ANPD rules.
9. Retention and security
We retain personal data only as needed for justified purposes, legal or contractual duties, legitimate claims and security, subject to periodic review. Appropriate confidentiality, access and system-security controls should be applied. No system is entirely risk-free; incidents are assessed and handled under applicable laws and contracts.
10. Your data protection rights
Subject to applicable law, you may request confirmation of processing, access, rectification, anonymization, blocking or deletion, portability where applicable, information about sharing, information on consent and its refusal, withdrawal of consent, objection and review of decisions based solely on automated processing where applicable. We may verify identity before handling requests.
11. Children and teenagers
Our business contact channels are not designed for indiscriminate collection of children’s data. If a service involves minors, processing must follow the applicable legal safeguards, including their best interests and consent rules when required.
12. Contact and changes
For privacy requests, email sac@alavora.online with the subject “Privacy / LGPD”. The privacy contact or data protection officer, where required, must be identified consistently with our actual organization. This notice may change, with appropriate communication of material updates.