Privacy Policy
Last updated: June 2025
Sciensa Inovação e Estratégia Digital LTDA ("Sciensa", "we", "us" or "our") respects the privacy of your personal data and operates in compliance with Brazil's General Data Protection Law (LGPD, Law 13.709/2018). This notice describes how we collect, use, store and share your information, and how you may exercise your rights as a data subject.
1. What data we collect
We collect the following categories of personal data:
- Identification and contact data: full name, corporate email address, company name, and job title.
- Professional profile data: your organization's current stage of AI adoption, collected through gated content forms and contact forms.
- Navigation and tracking data: IP address, Google Analytics client ID (ga_client_id), cookies, UTM parameters (utm_source, utm_medium, utm_campaign, utm_content, utm_term), and ad-platform click identifiers (gclid, fbclid). This data is collected automatically when you access our website.
- Interaction data: pages visited, access date and time, referrer URL, and landing page URL.
We do not collect sensitive personal data as defined by LGPD art. 11 (racial origin, religious beliefs, health data, biometrics, etc.).
2. Purpose of processing
We use your data for the following purposes:
- Delivering requested gated content (guides, whitepapers, reports) to the email address provided in the form.
- Reaching out to present Sciensa solutions that may be relevant to your professional profile and your organization's AI adoption stage.
- Sending marketing communications, news, and educational content if you have given explicit consent via opt-in in the form.
- Analyzing browsing behavior to improve our website, measure campaign effectiveness, and optimize user experience.
- Fulfilling applicable legal and regulatory obligations.
3. Legal basis for processing
Processing of your personal data is based on the following legal grounds under LGPD art. 7:
- Consent (art. 7, I): for sending marketing communications when you check the opt-in in the form. You may revoke this consent at any time by contacting us.
- Legitimate interest (art. 7, IX): for navigation analytics, campaign measurement, website improvement, and qualified commercial outreach based on your stated profile. We always ensure our interest does not override your fundamental rights and freedoms.
- Legal obligation (art. 7, II): when required to comply with legal requirements.
4. Data sharing
We do not sell your personal data. We may share it with third parties only in the following situations:
- CRM: we use Pipedrive (Pipedrive Inc., USA) to manage commercial contacts and track relationship history. It acts as a data processor under our control, subject to contractual confidentiality and security obligations.
- Lead storage and analytics: we use Google Cloud Platform and BigQuery (Google LLC, USA) to store and analyze lead data and campaign behavior. Data is processed on our behalf with contractual security and confidentiality guarantees.
- Measurement and tag management: we use Google Analytics 4 and Google Tag Manager (Google LLC, USA) to measure campaign performance and manage tracking tags. These vendors may receive navigation identifiers and aggregated behavioral data. We also use advertising platforms (Google Ads, Meta Ads, LinkedIn Ads) for paid campaign delivery and measurement.
- Website hosting: our site is hosted on Vercel (Vercel Inc., USA), which processes access data on our behalf with contractual security guarantees.
- Legal obligation: when required by competent authorities, court order, or applicable law.
5. Data retention
We retain your personal data for as long as necessary to fulfill the purposes described in this notice:
- Contact and professional profile data: for the duration of an active commercial relationship or legitimate interest in contact, and for up to 5 years after closure.
- Navigation and analytics data: per the retention policies of the tools used (e.g., Google Analytics retains data for up to 26 months by default).
- After the retention period, data is securely deleted or anonymized.
6. Your rights as a data subject
Under LGPD art. 18, you have the following rights:
- Confirmation and access: to know whether we process your data and obtain a copy of the information we hold.
- Correction: to request updating or rectification of incomplete, inaccurate, or outdated data.
- Anonymization, blocking, or deletion: to request anonymization, blocking, or deletion of unnecessary, excessive, or non-compliant data.
- Portability: to request transfer of your data to another service provider.
- Deletion of consent-based data: to request deletion of data processed based on your consent.
- Consent revocation: to withdraw marketing consent at any time without affecting prior processing.
- Objection: to object to processing based on legitimate interest where your fundamental rights prevail.
To exercise any of these rights, contact us at the email below. We will respond within 15 business days.
7. Information security
We adopt appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, alteration, or improper disclosure. These include HTTPS/TLS encryption in transit, role-based access controls, and periodic security reviews.
In the event of a security incident affecting your data, we will notify Brazil's National Data Protection Authority (ANPD) and affected data subjects as required by LGPD.
8. Cookies and similar technologies
Our website uses cookies and similar technologies for performance analysis, personalization, and campaign tracking. You may configure your browser to refuse cookies, though this may affect the functionality of some parts of the site.
9. International data transfers
Some of our vendors (e.g., Google, Meta) process data on servers outside Brazil. These transfers are carried out with adequate protection guarantees, such as standard contractual clauses or recognized adequacy of the recipient country, as provided in LGPD art. 33.
10. Controller and Data Protection Officer (DPO)
Data Controller: Sciensa Inovação e Estratégia Digital LTDA
CNPJ: 16.559.315/0001-03
Address: Alameda Campinas, 802 - 12.º andar - Jardim Paulista, São Paulo - SP, Brasil
To exercise your rights, request information about the processing of your data, or submit any privacy-related inquiry, contact our Data Protection Officer:
Email: contato@sciensa.com
We will respond within 15 business days.
11. Updates to this policy
We may update this privacy notice periodically to reflect changes in our practices, technologies, or legal obligations. The most recent version will always be available on this page, with the last updated date indicated at the top.
For material changes significantly affecting your rights, we will notify you by email (when we have your contact) with reasonable advance notice.
© 2026 Sciensa Inovação e Estratégia Digital LTDA. All rights reserved.