Privacy
Privacy policy
Last updated on October 17, 2026.
This policy explains which personal data the privatecosmeticos.com.br website collects, what we use it for, who we share it with and how you can exercise your rights under Brazil's General Data Protection Law (LGPD, Law 13,709/2018).
1. Data controller
Private Cosméticos Indústria e Comércio Ltda, CNPJ 06.221.095/0001-50, Av. Dr. José Pagano Brundo, 48 · Vila Pagano, Valinhos/SP · CEP 13274-465, Brazil.
Data protection officer (DPO): reachable at contact@privatecosmeticos.com.br, subject "Privacy".
2. Data we collect
Data you give us in the website forms (project quiz, meeting booking, packaging project and photo search questionnaire):
- identification and contact: name, email, WhatsApp or phone and, when you provide them, company, company registration number (CNPJ), role and Instagram profile;
- information about your project: answers to our questions (for example sales channel, number of products, volume, timeline and investment range), text you write, selected packaging and preferred meeting times;
- visit source (campaign parameters such as utm_source) and device type, sent together with the form.
Browsing data, collected automatically by analytics tools: pages visited, clicks, scrolling, time on page, device and browser type, approximate location and visit source. Microsoft Clarity records sessions and builds heatmaps; form fields are masked and do not appear in recordings.
Technical security data: IP address, used to limit the number of photo searches and prevent automated abuse.
3. Photo search
When you upload a photo of a package, the image is used only to find similar models in our collection. Our website does not store the photo: it stays in server memory during the search and is discarded at the end.
To run the comparison, the image is sent to two artificial intelligence providers acting as processors: Voyage AI (visual comparison) and Anthropic (identification of the package type and shape). Processing by these providers follows each provider's terms and privacy policy.
Please upload photos of packaging only. Do not upload photos of people, documents or any personal information.
The website keeps a cookie in your browser that counts the searches made on that day (see section 8).
4. Why we use the data and on what legal basis
- To reply to you, understand your project, email you the briefing summary and prepare a proposal: preliminary steps to a contract at your request (LGPD art. 7, V), and your consent when you tick the authorisation box (art. 7, I).
- To organise and prioritise our sales follow-up, including an internal rating of the answers: legitimate interest (art. 7, IX).
- To understand how the website is used, fix problems and improve pages and content (Google Analytics and Microsoft Clarity): your consent, given in the cookie notice (art. 7, I).
- To measure the results of our advertising campaigns (Google Ads): your consent, given in the cookie notice.
- To protect the website against abuse, bots and fraud: legitimate interest.
- To meet legal and regulatory obligations and exercise rights in proceedings: art. 7, II and VI.
We do not sell personal data and we do not send newsletters without your authorisation.
5. Who we share data with
We only share data with service providers that run the website and our customer service, each limited to its role:
- Vercel: website hosting;
- Google: the spreadsheet where contacts are logged for the sales team, Google Analytics and Google Ads;
- Microsoft: Clarity, for browsing analytics;
- Resend: sending confirmation emails and the project summary;
- Voyage AI and Anthropic: processing the photo search;
- Behold: displaying our Instagram posts on the home page;
- Meta (WhatsApp): when you choose to talk to us on WhatsApp, the conversation follows that app's rules.
We may also share data when required by law or by order of a competent authority.
6. International transfer
Some of these providers keep servers outside Brazil, mainly in the United States. In these cases the transfer relies on the safeguards provided in LGPD art. 33, such as contractual clauses and each provider's security and privacy commitments.
7. How long we keep data
- Contact and project data: while there is a commercial interest or relationship with you and, after that, for as long as needed to meet legal obligations or exercise rights. You can ask for deletion at any time (section 9).
- Browsing data: for the period set in each analytics tool.
- Search photo: not stored by the website (section 3).
9. Your rights
Under the LGPD (art. 18) you can, at any time:
- confirm whether we process your data and access it;
- correct incomplete, inaccurate or outdated data;
- request anonymisation, blocking or deletion of unnecessary data or data processed in breach of the law;
- request portability of your data to another provider;
- request deletion of data processed with your consent;
- know who we share your data with;
- withdraw your consent and object to processing based on legitimate interest.
To exercise any right, write to contact@privatecosmeticos.com.br with the subject "Privacy". We reply within 15 days. You may also file a complaint with Brazil's National Data Protection Authority (ANPD) at gov.br/anpd.
10. Security
The website uses an encrypted connection (HTTPS), access to contact data is restricted to the team handling your project, and sensitive project information is covered by a non-disclosure agreement (NDA). No system is fully immune to incidents; if one occurs that may pose a relevant risk, we will notify you and the ANPD as required by law.
11. Children and teenagers
The website is aimed at companies, entrepreneurs and professionals. We do not knowingly collect data from anyone under 18.
12. Changes to this policy
We may update this policy when the website or the law changes. The date of the latest update is shown at the top of the page.