1. Who is responsible for your data
This website is operated by Alder & Hale. The controller responsible for the personal data described in this policy is Eduardo Reis Busso.
For privacy questions or to exercise your rights, email [email protected] with the subject “Privacy and personal data”. This is our contact channel for data protection requests.
2. Who this policy applies to
This policy covers visits to alderhale.com and its language versions, domains that redirect to this website, and contact initiated through its form, by email or through the WhatsApp number displayed on the website. It also applies to information received through Alder & Hale advertising forms that link to this page.
The website presents B2B services and is not directed at children. Contracted projects may involve specific processing activities defined in the relevant contracts and notices.
3. Information that may be processed
- Website contact form: name, email address, company if provided, message content and form language.
- Email and WhatsApp: information you send during a conversation and information made available by the channel, such as your email address, telephone number and profile identification.
- Access and security: IP address, request date and time, requested pages and technical browser or device information, depending on how infrastructure providers operate. The form also uses an identifier derived from the IP address to limit abusive submissions.
- Website metrics: information about visits, pages, referral sources, device types and page performance, as explained in the measurement section.
- Advertising forms: the fields shown in the advertisement itself, when this feature is in use. The purpose will be stated on that form.
Only send information needed to handle your request. Avoid including passwords, identity documents, banking details, health information or other sensitive data in your message.
4. Why we use information
- Responding to and handling your request
- We use the information to understand your needs, answer questions, prepare a proposal you have requested and follow up on that conversation. Depending on the context, processing relies on steps taken at your request before entering into a contract, or on a legitimate interest in responding to a request, with due regard for your rights.
- Operating and protecting the website
- Technical information helps deliver pages, prevent spam, diagnose faults and maintain security. Processing relies on a legitimate interest in maintaining and protecting these services, limited to what is necessary and subject to data subjects’ rights.
- Understanding usage and improving the website
- Metrics without advertising cookies help identify popular pages and performance issues. They are used to improve the service, based on legitimate interest and respect for privacy.
- Meeting obligations and exercising rights
- We may retain information when necessary to meet a legal or regulatory obligation or to exercise legal rights.
- Promotional communications and personalized advertising
- Submitting a contact request does not provide blanket permission for newsletters, inclusion in advertising lists or sharing with advertising platforms. Any additional purpose that relies on consent will be presented separately, with the ability to decline and withdraw consent.
5. Cookies, measurement and campaigns
The current version of the website uses Cloudflare Web Analytics for access and performance metrics. According to the provider’s documentation, this service does not use cookies or local storage to identify visitors, or browser fingerprinting techniques. This does not eliminate the technical processing needed to deliver and protect the website. Learn more in the Cloudflare Privacy Policy.
Google Analytics, Google Ads tags, Meta Pixel and LinkedIn Insight Tag are not installed in this version. A visit originating from an advertisement may include campaign parameters in the address. Infrastructure may process them when receiving the request; the current form does not include these parameters in the message content.
If optional analytics, conversion or remarketing tools are activated, this policy will be updated to describe the relevant providers, information, purposes and choices. Technologies that require consent will remain disabled until the corresponding choice is made. Declining optional advertising will not prevent you from using the contact form.
Forms hosted on advertising platforms and WhatsApp have their own privacy practices. If you choose these channels, also consult the platform’s notices. Using the WhatsApp link does not, by itself, activate an advertising pixel on this website.
6. Who information is shared with
Information may be accessed by people authorized to handle your request and by providers needed to operate the services, according to its purpose:
- Cloudflare: website hosting and delivery, infrastructure protection, and access and performance metrics.
- Locaweb: form processing, message transmission and storage in the corporate mailbox.
- WhatsApp/Meta: when you choose to start a conversation through that channel, also subject to the service’s terms and privacy policy.
- Advertising platforms: when you use a form hosted on the platform itself, within the scope described in the advertisement and this policy.
- Authorities or advisers: when sharing is necessary to meet an obligation or exercise rights.
We do not sell information submitted through the form. Sharing with providers does not authorize uses incompatible with the stated purposes.
7. Processing outside Brazil
Cloudflare operates international infrastructure. Technical information related to the delivery, protection and metrics of the website may therefore be processed outside Brazil. WhatsApp may also involve global infrastructure when you choose that channel.
International transfers must meet the requirements of Brazil’s General Data Protection Law (LGPD) and ANPD regulations, using a mechanism applicable to the provider and the processing involved. You can request information about recipients and applicable safeguards through our privacy contact channel.
8. How long we retain information
Messages remain in the corporate mailbox for as long as they are needed to respond to your request, follow up on the opportunity or retain records relevant to the relationship established. The criteria consider the purpose, the progress of the contact and any legal obligations or need to exercise rights. Messages are not automatically deleted after a single fixed period.
The form’s abuse control uses recent technical records within a counting window of up to one hour. Expired records are discarded when this control is updated by a new submission; this does not mean that all infrastructure records are deleted within the same period. Providers may retain logs and backups according to the service and applicable obligations.
When information is no longer needed and there is no justification for retaining it, it must be deleted or anonymized. You can ask us to assess a deletion request through the privacy contact channel.
9. Your rights and how to make a request
Under the LGPD, you may request confirmation of processing, access, correction of information, details about sharing and, where applicable, anonymization, blocking or deletion of unnecessary, excessive or unlawfully processed information. You may also request portability under applicable regulations, withdraw consent, request deletion of information processed with consent in the cases provided by law, and object to unlawful processing based on another legal ground.
To make a request, email [email protected]. Describe your request and provide the email address used when contacting us. We may request proportionate identity verification to avoid disclosing information to third parties. Do not send personal documents unless requested through an appropriate channel.
Your request will be handled within the applicable legal time limits and conditions. If information must be retained, we will explain the relevant reason. You may also seek guidance or submit a petition to Brazil’s National Data Protection Agency (ANPD).
10. Security and changes to this policy
The website uses HTTPS. The form transmits messages over an encrypted connection and uses field validation and measures to prevent abuse. Access to contact information is restricted; no internet service can guarantee zero risk.
This policy may be updated to reflect actual changes to the website, providers and purposes. The version date appears at the top of the page. Material changes will be communicated appropriately; where a new purpose requires consent, it will be requested before that use.