Privacy Policy

This Policy explains how personal data is handled on vero4.com, including its institutional pages, blog and contact form. Vero4 is a division of BM Adapta Consultoria Ltda, registered in Brazil under CNPJ 57.935.452/0001-82. The company is responsible for decisions about this processing and operates from Brasília, Federal District, Brazil.

Last updated: November 12, 2026. For privacy matters, email contact.us@vero4.com or use our contact page. You do not need to create an account to make a request.

1. Scope of this Policy

This document covers browsing and contacting us through the website. Processing carried out for contracted projects, including information about our clients' customers, may require separate conditions, defined responsibilities and specific agreements. This Policy does not replace those arrangements or the policies of external websites reached through links.

2. Information we receive and why

• Contact requests: your name, email address, subject and message are needed to understand and answer your request. Company and phone number are optional. We also record the submission date. Do not send passwords, health information, identification documents or unnecessary information about other people.
• Operation and protection: the infrastructure receives technical information such as IP address, date and time, requested page and browser information. The form uses controls against abusive submissions, including a protected identifier derived from the IP address with a limited lifetime.
• Privacy preferences: the consent manager records your choices, the notice version and information needed to remember your decision. Details are provided in the Cookie Policy.

Contact submissions are stored in a private WordPress area accessible to authorized administration. An email notification announces receipt and provides a link to the administration area without reproducing the message or other form details. If you email us directly, the information you send is processed to handle that correspondence.

3. Purposes and legal bases

We do not rely on a blanket authorization for every activity. The basis depends on the purpose and our relationship with you:

• Answering questions and preparing a requested proposal: steps taken at the individual's request before entering into a contract, where appropriate. Relevant professional communications and follow-up may also rely on legitimate interests, subject to an assessment of necessity and the rights involved.
• Maintaining the website and preventing abuse: legitimate interests in security and service continuity, limited to what is necessary, or a legal obligation where a specific requirement applies.
• Meeting obligations and protecting rights: compliance with legal or regulatory obligations and the establishment, exercise or defense of legal claims, as applicable.
• Enabling optional technologies: specific consent, where required, which may be refused or withdrawn. No optional audience analytics or advertising tools are active in the current configuration.

Submitting the form does not subscribe you to a newsletter or authorize advertising unrelated to your inquiry. The privacy acknowledgment confirms that you have been informed about processing needed to answer the request; it does not replace consent choices for other purposes.

4. Who may receive the information

Access is limited to people authorized to handle requests and administer the website. Hosting, infrastructure, maintenance and email providers may process information as necessary to deliver their services. This website is hosted through Hostinger. A competent authority may receive information where a legal basis and applicable procedure require it.

This website does not use mechanisms for selling personal information or sharing it for cross-context behavioral advertising. Blog links lead to external publications with their own practices. Displaying a link does not authorize those websites to access contact form information.

5. Processing outside Brazil

Supplier infrastructure or support may involve other countries. An international transfer must have a lawful basis and a valid transfer mechanism under applicable law, such as an adequacy decision or recognized contractual safeguards. Where relevant, the LGPD and ANPD rules apply, along with the safeguards required by the GDPR when it covers the processing.

You may request information about recipients, countries involved and safeguards applicable to your situation. The cookie banner does not provide blanket authorization for any international transfer.

6. How long information is kept

Contact information is kept for as long as necessary to answer the inquiry, follow the associated negotiation or relationship, and meet obligations or exercise legal rights. Its necessity must be reviewed in light of the last contact, any resulting contract, legal time limits and disputes. Once no longer needed, information must be deleted or anonymized, unless a legal retention ground applies.

Temporary form abuse controls expire within one hour. A submission confirmation identifier expires after fifteen minutes and does not display the submitted content. Technical records subject to mandatory retention follow the applicable legal period. Browser storage durations are described in the Cookie Policy.

7. Your rights and how to contact us

Depending on applicable law and its conditions, you may request confirmation and access, correction, portability, anonymization, blocking or deletion; obtain information about sharing and consent; withdraw consent and object to unlawful processing. You may also request review and explanation of solely automated decisions affecting your interests. This website does not use such decisions to grant or deny access to services.

Send your request to the privacy contact, explaining the right you wish to exercise and providing enough information to locate the relevant interaction. We may request proportionate identity confirmation to protect your information, without requiring excessive details. Rights may be exercised free of charge as provided by law. If a request cannot be fully fulfilled, we will explain the basis and relevant alternatives.

Applicable statutory deadlines are observed. Under the LGPD, confirmation or access may be provided immediately in simplified form, or through a complete statement within fifteen days under Article 19. If your rights request remains unresolved with us, you may petition ANPD, subject to its procedural requirements. You may also contact consumer protection authorities where relevant.

8. Visitors in other jurisdictions

European Union and European Economic Area: where processing falls within the GDPR's scope, its rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent apply subject to legal conditions. You may complain to the competent data protection authority. Requests subject to the GDPR are generally answered within one month, with any permitted extension communicated to you.

California: where the CCPA, as amended by the CPRA, applies to the company and the processing, rights include knowing, correcting and deleting information, opting out of sale or sharing, limiting certain uses of sensitive information and receiving equal treatment when exercising rights. The consent manager recognizes Global Privacy Control signals. An English-language website alone does not determine whether these laws apply.

9. Security and intended audience

The website uses HTTPS, restricted access to contact records and controls against abuse. These measures reduce risks, but no service is free from failures. Incidents will be assessed and, where required, reported to affected individuals and the competent authority within statutory time limits.

Our services and forms are intended for professional and business inquiries. We do not intentionally request information from children or teenagers. If you identify an inappropriate submission, contact us so it can be assessed with attention to their best interests and applicable legal protections.

10. Changes and related documents

This Policy may be updated to reflect changes to the website and applicable obligations. The date above identifies the current version. Material changes will be communicated through appropriate means; where a new purpose requires consent, a specific choice will be presented before it is enabled.

See also the Terms of Use and Cookie Policy.

Legal references and guidance

• Brazil's LGPD, Law 13,709/2018, consolidated text in Portuguese.
• ANPD: data subject rights, in Portuguese.
• ANPD: international data transfers, in Portuguese.
• GDPR, Regulation (EU) 2016/679.
• California Privacy Protection Agency: CCPA scope and rights.