Privacy Policy

01Who is the data controller

The controller of the personal data processed through this website is OAKIDEAS SOLUCOES EM TI LTDA, a Brazilian company registered under CNPJ 50.187.195/0001-07 (“OakIdeas”, “we”, “us”).

For any matter related to privacy and data protection, please contact our Data Protection Officer (DPO) at privacidade@oakideas.com.br.

02What data we collect

Data you provide when filling out the contact form:

• name;
• email address;
• company (optional);
• phone or WhatsApp number (optional);
• type of project of interest and the content of your message.

Data collected automatically, required for the website to work securely:

• IP address, date and time of access;
• browser type, operating system and pages visited (server technical logs).

We do not intentionally collect sensitive personal data or data from children and teenagers. Please do not include this type of information in your messages.

03How we use your data

• to respond to your inquiry, understand your needs and send commercial proposals you request;
• to carry out pre-contractual steps at your request;
• to keep the website secure and prevent fraud and abuse;
• to comply with legal and regulatory obligations, such as the retention of access logs required by the Brazilian Internet Civil Framework (Law No. 12,965/2014);
• to improve our services and your browsing experience.

We do not sell, rent or trade your personal data.

04Legal bases

We process personal data based on the grounds set out in article 7 of Brazilian Law No. 13,709/2018 (LGPD), in particular:

• Consent (art. 7, I), given when you submit the contact form;
• Pre-contractual procedures (art. 7, V), when you request a proposal;
• Compliance with legal or regulatory obligations (art. 7, II);
• Legitimate interest (art. 7, IX), for website security and service improvement, always respecting your rights and expectations.

05Data sharing

Your data may be shared only to the extent necessary with:

• hosting, cloud infrastructure, communication and customer relationship providers that support the operation of the website and our services;
• public authorities, upon legal request or court order;
• legal and accounting advisors, for the regular exercise of rights.

We require our vendors to commit to confidentiality and to security standards consistent with this Policy and the LGPD.

06International transfers

Some of our technology providers may store data on servers located outside Brazil. In such cases, we adopt the safeguards set out in article 33 of the LGPD, such as engaging providers that offer an adequate level of data protection and specific contractual clauses.

07Cookies

This website currently uses only cookies and technologies that are strictly necessary for it to function securely — such as remembering your language preference. We do not use advertising or third-party tracking cookies.

If we start using analytics or marketing tools, this Policy will be updated and, where required, we will ask for your consent beforehand. You can manage or block cookies at any time in your browser settings.

08How long we keep your data

We keep personal data only for as long as necessary to fulfill the purposes described:

• commercial contact data: up to 2 (two) years after the last contact, unless there is an ongoing contractual relationship;
• access logs: 6 (six) months, as required by article 15 of the Brazilian Internet Civil Framework;
• contract-related data: for the period required to meet legal obligations and to exercise rights.

After these periods, the data will be deleted or anonymized.

09Your rights as a data subject

Under article 18 of the LGPD, you may request at any time:

• confirmation that we process your data and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of the law;
• portability of your data to another service provider;
• deletion of data processed based on consent;
• information about the entities with which we share your data;
• information about the possibility of not giving consent and its consequences;
• withdrawal of consent.

To exercise your rights, email privacidade@oakideas.com.br. We will respond within the legal deadline. You also have the right to file a complaint with Brazil's National Data Protection Authority (ANPD) or the data protection authority of your country.

10Information security

We adopt technical and administrative measures to protect personal data from unauthorized access and from accidental or unlawful destruction, loss, alteration or disclosure — such as encryption in transit (HTTPS), access control and the principle of least privilege. No system is completely risk-free, but in the event of a relevant security incident we will notify affected data subjects and the ANPD, as required by law.

11Changes to this Policy

This Policy may be updated from time to time to reflect changes in our practices or in the law. The current version will always be available on this page, with the date of the last update. We recommend checking it periodically. See also our Terms of Use.