Privacy Policy

1. Who controls your data

Comelato Company (C&Co.) is responsible for the processing decisions described in this policy. We operate from São Paulo — Faria Lima and Americana — SP, Brazil.

For privacy questions or to exercise your rights, email contato@comelatocompany.com.

2. Data we process

When you submit our website form, we may receive:

• your name and company;
• business email and phone or WhatsApp number;
• the main challenge you select;
• your message and business context;
• the website language and source page.

While you browse, our technical infrastructure may record information needed for operation and security, such as IP address, date and time, browser, device, pages accessed and error logs.

3. Why we use this data

We process personal data to:

• respond to enquiries and schedule requested meetings;
• understand the business context and prepare proposals or assessments;
• take requested pre-contractual steps and provide contracted services;
• maintain website security, stability and performance;
• measure visits and campaign effectiveness when you authorise optional cookies;
• comply with legal obligations and establish or defend legal claims.

Depending on the context, processing may rely on consent, steps requested before entering into a contract, contract performance, compliance with legal obligations or legitimate interests, while respecting the individual’s rights and reasonable expectations.

4. Sharing and international transfers

We do not sell or rent personal data. We share only what is necessary with providers that support hosting, infrastructure, security, media delivery and form processing.

Our form uses FormSubmit to deliver your message to contato@comelatocompany.com. Institutional videos may be delivered through Cloudinary. With your permission, the Meta Pixel receives visit events for campaign measurement and may associate them with identifiers, browser and device information, IP address and website activity. If you choose to open WhatsApp, Instagram, LinkedIn, Google or another external service, that provider’s privacy terms will also apply.

Some providers may process information outside Brazil. Where this occurs, we seek services that adopt contractual and technical safeguards appropriate to the applicable requirements.

5. Storage and retention

We keep personal data for as long as necessary to answer the request, develop the business relationship, provide services, comply with legal obligations and protect legal rights. We then delete or anonymise the information unless retention is permitted or required by law.

6. Your rights

Under Brazil’s LGPD, you may request confirmation of processing, access, correction, information about sharing, portability where applicable, anonymisation, restriction or deletion of improper data, objection, review of automated decisions and withdrawal of consent.

Where the GDPR or another applicable privacy law applies, you may also have rights such as restriction, erasure and objection. To protect individuals, we may request enough information to verify identity before acting on a request. Email contato@comelatocompany.com.

7. Cookies and local technologies

The website uses session storage (sessionStorage) to record the most recent navigation and support technical experience measurement. This record is limited to the browser session.

After you give permission, the Meta Pixel may use cookies such as _fbp and _fbc to identify browsers, measure visits and attribute campaign results. Meta states a typical lifetime of up to 90 days for these identifiers.

Also after you give permission, Google Tag Manager may load Google Analytics to measure visited pages, traffic source, interactions and website performance. Google may use cookies and device identifiers under its own policies. You can accept, reject or revisit this choice through Cookie preferences in the footer.

External services opened at your request may use cookies or similar technologies under their own policies.

8. Security

We use reasonable technical and organisational measures to reduce the risk of unauthorised access, loss, alteration or improper disclosure. No digital environment is entirely risk-free, so we review practices and providers as the website evolves.

9. Children and teenagers

Comelato’s websites and services are intended for businesses and professionals, not children. We do not knowingly seek personal data from children or teenagers through our commercial form.

10. Updates and contact

We may update this policy to reflect changes in our websites, services or applicable law. The current version will always display its last-updated date.

Questions or requests: contato@comelatocompany.com.