1. About this Privacy Policy
This Privacy Policy explains how Natander Digital Marketing (“Natander”) handles personal data on its website, in contact and diagnostic forms, and in commercial interactions initiated through these channels.
Natander Digital Marketing is a brand of Natander Negócios Digitais Ltda, registered under CNPJ no. 60.238.661/0001-81 and identified on this website through contato@natanderdigital.com.
When it determines the purposes and means of processing, Natander acts as the controller. In client projects, it may act as a processor or independent controller, depending on the context and contract. This Privacy Policy covers Natander's own website and commercial relationship.
2. Data that may be processed
Data provided by the individual
- full name, WhatsApp, and email;
- company, website, and industry;
- services of interest and ad-spend range;
- description of the bottleneck or message sent;
- history of contact, diagnostic, proposal, and engagement;
- record that this Privacy Policy was acknowledged and consent choices, where applicable.
Technical and source data
- IP address, date, and time;
- pages accessed, referral page, browser, and device;
- campaign parameters such as UTMs, gclid, and fbclid;
- cookie or local-storage identifiers, when allowed;
- events such as a WhatsApp click, form start, and form submission.
Instant Website X-Ray
When someone uses Website X-Ray, Natander processes the submitted domain, public technical signals from the home page, response time, and an identifier derived from the IP address to limit abuse. The tool does not request passwords, enter private areas, or retain remote HTML as part of the result.
Natander does not request CPF numbers, bank data, health data, or other sensitive categories in the form. If this kind of information is sent unnecessarily, it may be deleted or access to it restricted, except where retention is legally required.
3. How data is used
- respond to contact and diagnostic requests and confirm receipt of the request by email;
- perform the requested technical Website X-Ray and present its factual signals;
- prepare proposals and carry out requested actions before an engagement;
- deliver and administer contracted services;
- maintain service history;
- protect forms, accounts, and infrastructure against abuse and fraud;
- measure the source of inquiries and website performance;
- fix issues and improve the experience;
- meet legal obligations and exercise legal rights;
- send promotional communications only when there is a legal basis and an opt-out option.
4. Legal bases
Depending on the purpose, processing may rely on pre-contractual procedures, performance of a contract, compliance with a legal or regulatory obligation, regular exercise of rights, legitimate interest after a necessity assessment, and consent where applicable.
Withdrawal of consent does not invalidate prior lawful processing or prevent processing supported by another legal basis.
6. Sharing
Natander does not sell or rent personal data. Data may be shared only as necessary with hosting, security, and email providers; customer-service tools; WhatsApp when the individual initiates a conversation; analytics and advertising platforms when authorized; service providers under protection duties; and authorities when legally required.
7. International transfers
Some providers may process data outside Brazil. In those cases, Natander seeks providers and mechanisms compatible with the LGPD and limits the transfer to what is necessary.
8. Retention and deletion
Data is kept for the time needed to respond to a request, conduct a negotiation, deliver any service, meet obligations, and exercise rights. Leads without an active purpose should be reviewed and deleted or anonymized.
In Website X-Ray, the factual result may remain cached for up to 15 minutes, and the technical identifier used against abuse remains for up to one hour. Remote HTML is not part of the result cache. Local attribution data is valid for up to 30 days. After the applicable period, data is deleted or anonymized unless retention is permitted or required by law.
9. Security
Natander adopts technical and administrative measures appropriate to the context, including form validation, anti-abuse controls, and restricted access. No system is completely immune; material incidents will be contained and communicated as required by law.
10. Data-subject rights
Under the LGPD, individuals may request confirmation and access; correction; anonymization, blocking, or deletion; portability; information about sharing; withdrawal of consent; objection; review of an automated decision, where applicable; and submission of a petition to the ANPD.
Natander may request information to confirm identity and protect data against unauthorized access.
11. Children and adolescents
The website is aimed at company representatives and professionals. Natander does not intentionally seek to collect children's data. A responsible adult may request deletion of an improper submission.
12. Automated decisions
The commercial flow does not use an exclusively automated decision to accept or reject an engagement.
13. External links
The website may link to WhatsApp, Instagram, or other platforms. Processing in those environments is also subject to each provider's policies.
14. Updates
This Privacy Policy may be updated to reflect legal, technical, or operational changes. The current version and date will remain on this page.
15. Contact the controller
The controller is Natander Negócios Digitais Ltda, registered under CNPJ no. 60.238.661/0001-81. Requests about privacy and data-subject rights can be sent to contato@natanderdigital.com with the subject line “Privacy — Data Subject Right,” or through the contact page.