Last updated: October 2025
Privacy Policy – BrandBox
Last updated: October 2025
1. Introduction
Your privacy matters to BrandBox. This Privacy Policy describes how we, BrandBox (referred to as “we”, “our” or “BrandBox”), collect, use, store, share and protect the information and personal data of users (“you”) who visit our website at https://brandbox.com.br/. This document was prepared in accordance with the Brazilian General Data Protection Law (LGPD), Law No. 13,709/2018, and reflects our commitment to transparency and security in the processing of your data. By using our website and providing your information, you acknowledge and agree to the terms of this Policy.
This English version is provided for convenience. In case of any discrepancy, the Portuguese version prevails.
2. Data Controller
For the purposes of the applicable legislation, BrandBox, whose company details are to be inserted [here], acts as the Controller of the personal data collected through this website.
3. Personal Data We Collect
We collect your personal data in two main ways:
Data You Provide Directly
We collect the data you voluntarily provide when filling in the contact form on our website.
This data includes:
• Name: to identify you and address you personally.
• Email: to reply to your request and send communications.
• Phone: to contact you where necessary or requested.
• Message: to understand the reason for your contact and your specific need.
Data Collected Automatically
When you browse our website, we may automatically collect certain information through cookies and similar technologies. This data includes:
• IP address (Internet Protocol): for security purposes and geographic analysis.
• Device information: device type, operating system and browser used.
• Browsing data: pages visited, time spent, clicks and search terms used on the website.
4. Purposes of Personal Data Processing
We use the personal data collected for the following purposes:
| Data category | Purpose | Legal basis (LGPD) |
|---|---|---|
| Contact data (name, email, phone, message) | Responding to your questions, requests and commercial proposals. | Consent (Art. 7, I) and pre-contractual procedures (Art. 7, V) |
| Contact data (email) | Sending marketing communications, newsletters and information about our services. | Consent (Art. 7, I) |
| Browsing data (cookies) | Improving your experience on the website, analysing performance and usability, and targeted marketing. | Legitimate interest (Art. 7, IX) and consent (for non-essential cookies) |
5. Sharing of Personal Data
BrandBox does not sell or rent your personal data. However, we may share your information with third parties for the purposes described in this policy, including:
Service providers: companies that provide us with technology services, such as website hosting, marketing automation tools and data analytics platforms.
Public authorities: to comply with legal obligations or court orders. We require all our partners and service providers to adopt the same security and privacy standards as ours.
6. Data Storage and Security
Your personal data is stored on secure servers, located in Brazil or abroad.
We adopt strict technical and administrative measures to protect your data against unauthorised access, destruction, loss, alteration or any form of improper processing.
7. Data Retention Period
We will keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, or to comply with legal, tax or regulatory obligations.
After this period, the data will be anonymised or securely deleted.
8. Your Rights as a Data Subject
Under the LGPD, you have the right to: • Confirm the existence of processing of your data.
• Access your personal data.
• Correct incomplete, inaccurate or outdated data.
• Request the anonymisation, blocking or deletion of unnecessary data or data processed in breach of the law.
• Request the portability of your data to another service or product provider.
• Withdraw consent at any time.
• Obtain information about the entities with which we share your data. To exercise any of these rights, contact us by email:
[insert privacy contact email, e.g. [email protected]].
9. Cookie Policy
Cookies are small text files stored on your device when you visit a website. We use cookies to:
• Essential cookies: ensure the website works correctly.
• Performance and analytics cookies: understand how users interact with our website so we can improve it (e.g. Google Analytics).
• Marketing cookies: show you relevant advertising on other platforms. You can manage your cookie preferences through your browser settings. Refusing non-essential cookies does not prevent the website from working.
10. Links to Third-Party Websites
Our website may contain links to other websites (such as LinkedIn, Instagram, etc.). This Privacy Policy applies only to our website.
We are not responsible for the privacy practices of third-party websites.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. We recommend that you review this document regularly. The date of the latest update will always be shown at the top of the document.
12. Contact
If you have any questions about this Privacy Policy or about how we process your data, please contact our Data Protection Officer (DPO): Data Protection Officer (DPO): Jessica Otte Email: [email protected]