LEGAL

PRIVACY POLICY

Last updated: September 2, 2026

This Policy explains what personal data Rockye collects on this site, why we collect it, who we share it with, and what you can require of us. It follows the Brazilian General Data Protection Law (LGPD, Law 13.709/2018) and, for visitors in Europe, the GDPR.

Data controller: [razão social a preencher], [CNPJ a preencher], [endereço da sede a preencher]. Data Protection Officer: [email protected].

1. What we collect

Data you give us. When you fill in the contact form: name, email, WhatsApp number and, if you choose to share them, your business name, city, industry, what you need, budget range and your free-text message.

Data collected automatically. IP address, browser and device type, pages visited, time on page, and how you arrived here — the ad or search that brought you.

We do not ask for sensitive data — racial origin, religion, political opinion, health, biometrics — or data about children. If you send any of it unprompted in the message field, we delete it.

2. Why we use it

  • To reply to you and prepare a proposal — without it there is no way to get back to you;
  • To qualify the conversation: knowing your industry, city and budget beforehand keeps us from pitching what does not fit your case;
  • To improve the site: understanding which pages work and where people drop off;
  • To measure our advertising: knowing which campaign brought each enquiry;
  • To meet legal obligations and defend our rights in proceedings, where necessary.

3. Legal basis

We process form data on the basis of pre-contractual steps taken at your request — you asked to be contacted. Browsing and ad-measurement data rely on the consent you give in the cookie banner, and you may withdraw it at any time via "Cookie preferences" in the footer. Access logs are kept under a legal obligation (the Brazilian Internet Civil Framework).

4. Cookies

Necessary cookies make the site work: they store your language choice and your cookie decision itself. They cannot be turned off. Analytics and marketing cookies measure audience and campaign performance, and are only written after you accept.

You can review your choice at any time through the "Cookie preferences" link in the footer, or block cookies in your browser settings — in which case parts of the site may not work as expected.

5. Who we share it with

We do not sell personal data. We share it only with those the service depends on:

  • Infrastructure providers hosting this site and our management system;
  • Advertising and analytics platforms (Google and Meta), which receive browsing data once you accept cookies;
  • Communication tools — email and WhatsApp — used to talk to you;
  • Public authorities, where legally required.

Some of these companies are outside Brazil. Those international transfers rely on standard contractual clauses and the safeguards set out in article 33 of the LGPD.

6. How long we keep it

  • Enquiries that did not become clients: 24 months, then deleted;
  • Client data: for the term of the contract and 5 years after it ends, the period in which it may still be required for tax and legal purposes;
  • Access logs: 6 months, as required by the Internet Civil Framework;
  • Cookie data: for the lifetime of each cookie, up to 12 months.

7. Your rights

The LGPD gives you the right to:

  • know whether we process your data and access it;
  • correct incomplete or outdated data;
  • request deletion of data processed on the basis of consent;
  • request portability to another provider;
  • withdraw consent at any time;
  • object to processing you consider unlawful.

To exercise any of these, write to [email protected]. We respond within 15 days. If our answer does not resolve the matter, you may complain to the Brazilian National Data Protection Authority (ANPD), or to your local supervisory authority in the EU.

8. Security

We use encrypted connections (HTTPS), role-based access control, and logging of who accessed what. No system is completely secure; if an incident poses a significant risk to you, we will notify you and the authority, as the law requires.

9. Changes to this policy

When this Policy changes, we update the date at the top of the page. If the change is significant, we email those with an active contact with us.

10. Contact our DPO

Any question about your data: [email protected].