1. Who we are.
Hailoo [legal name and CNPJ, being registered], Rio de Janeiro, Brazil. We are the controller of the personal data of people who browse this site and of people who contact us through it, under Brazil's General Data Protection Law (Lei Geral de Proteção de Dados, "LGPD"). This policy does not cover the documents clients entrust to us; for those, see Security and data (PT).
2. What we collect.
- Through the form: name, organization, email, type of work, approximate size of the document set and any message you write.
- When the form is sent: a hashed version of your IP address and your browser type, to block spam and abuse.
- Through cookies: only those the site needs to work, plus analytics and marketing cookies if you accept them (section 6).
We don't receive documents through this site. Please don't include third-party data or confidential information in your message: that comes after an NDA.
3. Why we use it and on what legal basis.
| Purpose | Legal basis (LGPD, art. 7) |
|---|---|
| Replying to you and preparing a proposal | Steps prior to a contract, at your request (item V) |
| Protecting the form from spam and abuse | Legitimate interest (item IX) |
| Measuring site use and ad performance | Consent (item I), through the cookie banner |
4. Who we share it with.
Only with the providers that help us run the site: Hostinger (hosting and storage of form submissions), Resend (email notifications about new contacts) and, if you accept optional cookies, [analytics and advertising tools]. We don't sell personal data. We may disclose it to authorities when the law requires it.
5. International transfers.
These providers may process data outside Brazil. When they do, we rely on the safeguards in article 33 of the LGPD, such as contractual clauses.
6. Cookies.
| Category | What it does | Can you refuse it? |
|---|---|---|
| Necessary | Makes the site work and remembers your cookie choice | No, always active |
| Analytics | Shows which pages are read, without identifying you | Yes |
| Marketing | Measures ads and shows Hailoo ads on other sites | Yes |
You can change your choice at any time through the "" link in the footer.
7. How long we keep it.
- Contacts who don't become clients: 24 months after the last contact.
- Technical data from form submissions: 90 days.
- Optional cookies: up to 13 months; we ask for your choice again after that.
- Contacts who become clients: for the term of the contract and whatever period the law requires afterwards.
8. Your rights.
Under the LGPD (art. 18), you can ask us to confirm whether we process your data, give you access, correct it, anonymize, block or delete it, port it, tell you who we share it with, and withdraw your consent. Write to our data protection officer (section 10). We reply within 15 days. You can also file a complaint with Brazil's data protection authority (ANPD).
9. Security.
Encrypted connections across the whole site, access to contact data restricted to the partners, and two-factor authentication.
10. Data protection officer.
[name], [email].
11. Changes.
When this policy changes, the date at the top changes with it. Material changes are highlighted on the site.