Privacy Policy

1. Who we are

This website (erfsantosadvisory.online) is published under the trade name "ERF Santos Advisory" and is wholly owned and operated by ERF SANTOS CONSULTORIA LTDA, a Brazilian management consulting firm registered under CNPJ 04.126.039/0001-00, with headquarters at Rua Primeiro de Março, 07 — Salas 801 a 804 (parte), Centro, Rio de Janeiro/RJ, CEP 20.010-000, Brazil. Throughout this document, "we", "us" and "the firm" refer to this legal entity.

We are the data controller for all personal data collected through this website. Any question about how we process your information can be directed to [email protected].

2. What information we collect

We only collect the personal data you provide voluntarily through this website or through direct correspondence with us. This typically includes:

• Name and surname
• Corporate or personal email address
• Company name and role, when relevant to your enquiry
• The content of the message you choose to send us

We also collect basic technical information generated automatically by your browser — such as approximate geographic location, browser type, operating system and the pages you visit — in order to monitor the health of the website and to prevent abuse. This information is not used to build individual profiles.

3. How we use your information

Personal data submitted through the contact form or by email is used exclusively to reply to your enquiry, to schedule an introductory conversation and, where a professional relationship is established, to send you documents strictly related to the engagement. We do not sell, rent or share your data with third parties for marketing purposes, and we do not use it to build advertising audiences.

4. Legal basis for processing

Processing is carried out on the basis of your consent (Law 13.709/2018 — LGPD, art. 7, I), the performance of a contract or preliminary steps requested by you (art. 7, V), and the pursuit of our legitimate interests as a professional services firm (art. 7, IX), always balanced against your fundamental rights.

5. Retention period

Contact records are kept for as long as necessary to respond to your enquiry and, where relevant, for the duration of the professional relationship and the periods required by applicable Brazilian legislation (typically five years for commercial records and longer periods for tax-related documents).

6. Storage and security

Personal data is stored on servers located in Brazil and in the European Union, protected by access controls, encryption in transit (HTTPS) and periodic backups. Access is restricted to members of the firm who need the information to perform their duties, under written confidentiality obligations.

7. Your rights under the LGPD

You have the right to confirm the existence of processing, to access your data, to correct incomplete or inaccurate data, to request anonymisation or deletion of unnecessary data, to request data portability and to withdraw consent at any time, in accordance with articles 18 and 19 of Law 13.709/2018. Requests can be submitted to [email protected] and will be answered within a reasonable period.

8. Cookies

This website uses only strictly necessary cookies for its basic functioning. We do not deploy advertising cookies, remarketing pixels or cross-site tracking. Your browser can be configured to refuse cookies at any time; doing so will not prevent you from consulting the content of this site.

9. Changes to this policy

This policy may be updated from time to time to reflect changes in our practices or in applicable legislation. The date at the top of this page indicates when it was last revised. Substantive changes will be announced on the homepage before they take effect.

10. Contact