Privacy policy
Version 1.0 · Effective from Oct 19, 2026 · This English translation is provided for convenience; the Portuguese version prevails.
This Privacy Policy explains how Farol Consultoria Financeira Ltda. ("Farol Consultoria" or "Farol") collects, uses, shares and protects the personal data of people who visit the farolconsultoria.com website or contact us. It complies with Brazilian Law No. 13,709/2018 (General Personal Data Protection Law, LGPD) and Law No. 12,965/2014 (Brazilian Internet Civil Framework).
We wrote this text to be read. If anything is unclear, contact us through the channel indicated in section 10.
1. Who the controller is
The controller of the personal data processed through this website is Farol Consultoria Financeira Ltda., registered under CNPJ No. 69.680.667/0001-89, headquartered at Rua Doutor José de Albuquerque Porciúncula, 101, Farol neighborhood, postal code 57051-345, Maceió/AL, Brazil. The controller is whoever makes decisions about the processing of personal data (art. 5, VI, of the LGPD).
2. Who this Policy applies to
This Policy applies to the data of people who visit the website, fill in the contact form or talk to us by email or WhatsApp.
Data and documents processed while performing contracted services, such as clients' accounting and financial information, follow the rules of the service agreement and the confidentiality agreement signed with each client.
3. What data we collect
3.1 Data you provide
When you fill in the contact form, you provide:
- Identification and contact: full name, email and WhatsApp number.
- Company data: company name, service of interest and annual revenue range.
- Message: the text you write in the message field.
Please do not include sensitive personal data in your message, such as health information, or data about other people without their authorization.
3.2 Data collected automatically
When you browse the website, we record your IP address and the date and time of access. With your permission, performance and marketing cookies also collect browsing data, such as pages visited, browser type and device (section 8).
3.3 Children and adolescents
The website is aimed at businesses and professionals and is not intended for people under 18. We do not knowingly collect data from children and adolescents. If we identify this type of data, it will be deleted.
4. What we use the data for and on what legal basis
We only process personal data for a defined purpose and on a legal basis provided for in art. 7 of the LGPD:
| Purpose | Data used | Legal basis (LGPD) |
|---|---|---|
| Responding to your contact and sending a proposal | Form data and messages exchanged | Preliminary procedures for a contract, at your request (art. 7, V) |
| Performing the free financial check-up you request | Form data and company information you send | Preliminary procedures for a contract, at your request (art. 7, V) |
| Keeping website access logs | IP address, date and time of access | Compliance with a legal obligation (art. 7, II, and art. 15 of the Internet Civil Framework) |
| Keeping the website secure and running | Technical browsing data and necessary cookies | Legitimate interest (art. 7, IX) |
| Measuring audience and improving content | Performance cookie data | Consent (art. 7, I) |
| Measuring campaigns and displaying ads | Marketing cookie data | Consent (art. 7, I) |
| Defending rights in judicial, administrative or arbitration proceedings | Contact and access records | Regular exercise of rights (art. 7, VI) |
When we rely on legitimate interest, we process only the data necessary for the purpose and remain transparent about this use (art. 10 of the LGPD). We do not use your data for automated decisions and we do not sell personal data.
5. Who we share data with
We share personal data only when necessary and only with:
- Service providers: companies that process data on our behalf, such as website hosting (Cloudflare), contact form delivery (Formspree), email (Zoho Mail) and, if you authorize the corresponding cookies, analytics and advertising tools (the site currently uses none). They act as processors and may only use the data according to our instructions.
- Public authorities: when there is a legal or regulatory obligation, a court order or a request from a competent authority.
- Professional advisors: lawyers and accountants, under a duty of confidentiality, when necessary to fulfill legal obligations or exercise rights.
6. International transfer
Some service providers may store data on servers outside Brazil. In these cases, the transfer only takes place under the circumstances of art. 33 of the LGPD, for example with the contractual safeguards provided for in item II or when necessary for preliminary procedures for a contract requested by you (item IX).
7. How long we keep data
We keep data only for as long as necessary for each purpose:
- Contacts that did not become contracts: up to [12] months after the last contact.
- Clients: for the duration of the contract and, afterwards, for the period needed to fulfill legal obligations and for the regular exercise of rights.
- Website access logs: 6 months, as required by art. 15 of the Internet Civil Framework.
- Cookies: for the period indicated in section 8.
At the end of these periods, the data is deleted or anonymized, except in the retention cases set out in art. 16 of the LGPD.
9. Your rights
The LGPD guarantees you, as a data subject, the rights set out in art. 18. You may request, at any time:
- Confirmation and access: to know whether we process your data and receive a copy of it.
- Correction: to correct incomplete, inaccurate or outdated data.
- Anonymization, blocking or deletion: of unnecessary or excessive data, or data processed in breach of the LGPD.
- Portability: to take your data to another provider, under the regulations of the ANPD (Brazilian Data Protection Authority).
- Deletion: of data processed based on your consent, except in the cases set out in art. 16.
- Information about sharing: to know which public and private entities we share your data with.
- Information about consent: to know that you may refuse consent and what the consequences are.
- Withdrawal of consent: to withdraw consent at any time, free of charge and easily (art. 8, §5).
- Objection: to object to processing carried out without consent, if there is a breach of the LGPD (art. 18, §2).
You may also file a complaint with the Brazilian National Data Protection Authority, the ANPD (art. 18, §1).
10. How to exercise your rights
To exercise your rights, write to contato@farolconsultoria.com with your name and your request. This service is free of charge (art. 18, §5).
We may ask for information to confirm your identity before responding, to prevent your data from being handed over to someone else. Requests for confirmation or full access are answered within 15 days of the request (art. 19, II, of the LGPD).
11. Security and incidents
We adopt technical and administrative measures to protect personal data against unauthorized access and against accidental or unlawful destruction, loss, alteration or disclosure (art. 46 of the LGPD), including:
- Encrypted connection: the website uses HTTPS.
- Restricted access: only team members who need the data have access, with individual logins.
- Vetted suppliers: we hire providers that adopt security standards compatible with ours.
If a security incident occurs that may pose a relevant risk or harm to data subjects, we will notify the ANPD and the affected data subjects (art. 48 of the LGPD).
12. Changes and governing law
This Policy may be updated to reflect changes to the website, the services or the law. The current version is always on this page, with the effective date at the top. Relevant changes will be announced on the website.
This Policy is governed by Brazilian law, in particular the LGPD and the Internet Civil Framework.