Privacy Policy

1. Data Controller

2. Data We Collect

2.1 Data you provide directly

• Contact form: name, company, e-mail, phone/WhatsApp, and description of the request
• Newsletter: name and e-mail
• Service agreement: individual or business data required for service delivery and billing

2.2 Data collected automatically

• IP address and browsing data (via cookies — see our Cookie Policy)
• Pages visited, time spent, and interactions on the site
• Device type, browser, and operating system

2.3 Data we do not collect

We do not collect sensitive data (health, biometric, political/religious orientation) or data from children under 18.

3. Why We Collect This Data

We collect and process your data under the following legal bases set out in Brazil's LGPD (articles 7 and 11):

• Contract performance: to provide the contracted services, issue invoices, and maintain communication about the project
• Consent: to send newsletters, marketing e-mails, and updates about JWK — you may withdraw consent at any time
• Legitimate interest: for browsing analysis and site improvement, fraud prevention, and security
• Legal obligation: to comply with applicable tax and legal obligations

4. How We Use Your Data

• Respond to contact and quote requests
• Execute and manage the contracted services
• Send newsletters and marketing communications (only with consent)
• Issue tax documents and comply with accounting obligations
• Improve the site experience and our services
• Prevent fraud and ensure information security

5. Data Sharing

Your data may be shared only with:

• Brevo (Sendinblue): e-mail marketing platform — newsletter subscriber data. Brevo privacy policy
• Tax/accounting processors: when necessary for legal obligations
• Public authorities: when required by law or court order

All third parties are contractually required to protect your data in accordance with the LGPD.

6. How Long We Keep Your Data

• Contact form data: up to 2 years after the last contact
• Newsletter data: as long as your subscription remains active
• Contract data: for the period required by tax and labor legislation (minimum 5 years)
• Browsing data: according to cookie settings (see Cookie Policy)

After the retention period, data is permanently deleted or anonymized.

7. Your Rights as a Data Subject (LGPD)

Under article 18 of Brazil's LGPD, you have the right to:

To exercise your rights, send an e-mail to privacidade@jwk.com.br. We respond within 15 business days.

8. Data Security

We adopt appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration, or improper disclosure, including:

• Transmission via HTTPS/TLS
• Access to personal data restricted to those with an operational need
• Periodic review of access and permissions

In the event of a security incident affecting your data, we will notify you and the ANPD (Brazil's national data protection authority), as required by the LGPD.

9. Cookies

We use cookies to improve the browsing experience. For details on which cookies we use and how to manage them, see our Cookie Policy.

10. External Links

Our site may contain links to third-party sites. We are not responsible for the privacy practices of those sites. We recommend reading the privacy policy of each site you visit.

11. Changes to This Policy

This policy may be updated periodically. The current version will always be available at jwk.com.br/privacidade. Significant changes will be communicated by e-mail to our registered contacts.

12. Contact and DPO