Privacy Policy

1. Who we are

This policy describes how haapit handles the personal data collected through the website www.haapit.com. We are the controller of that data under the Brazilian General Data Protection Law (Lei nº 13.709/2018, the LGPD).

Address: Avenida Ipanema, 165, suite 715, Alphaville / Barueri, SP, Brazil, ZIP 06472-002.
Privacy contact: contato@haapit.com.

2. What data we collect

Data you give us

When you fill in the contact form, we collect your name, work email, company, phone number, the subject you selected and the content of your message.

Data collected automatically

Our servers record technical access information (IP address, date and time, pages visited, browser type and operating system) for security, abuse prevention and fault diagnosis.

3. What we use it for

• To reply to you and carry on the commercial conversation you started.
• To prepare technical and commercial proposals when you ask for them.
• To keep the site secure, available and intact.
• To meet applicable legal and regulatory obligations.

The legal bases are the performance of preliminary steps toward a contract, our legitimate interest in the security of the site, and compliance with legal obligations, as the case may be.

4. Who we share it with

We do not sell or assign your data. We share it only with suppliers that support our operation (hosting, email delivery and analytics tools), always limited to what is necessary and subject to confidentiality obligations. We may also share it where a legal or judicial order requires us to.

5. How long we keep it

We keep contact data for as long as needed to conduct the commercial relationship and, after that, for the period the law requires. Access logs are kept for six months, as required by the Brazilian Internet Civil Framework.

6. Cookies and audience measurement

We use cookies necessary for the site to work, plus Google Analytics 4 to measure audience. Measurement is aggregate, the IP address is anonymized before it is recorded, and we do not use the data for advertising: ad storage, ad user data and ad personalization are all denied by default in the consent configuration we send to Google.

Google Analytics is operated by Google LLC, which involves an international transfer of data. The legal basis is our legitimate interest in understanding how the site is used, and you may object at any time: by blocking cookies in your browser settings, by installing the Google Analytics opt-out add-on, or by writing to contato@haapit.com. The site keeps working normally in any of those cases.

We use no advertising network cookies, no remarketing and no cross-site tracking. The third-party cohort signal is disabled in the site permissions header.

7. Your rights

At any time you may request:

• Confirmation that processing exists, and access to your data.
• Correction of incomplete, inaccurate or outdated data.
• Anonymization, blocking or deletion of unnecessary or excessive data.
• Portability to another supplier, on express request.
• Information about who we share your data with.
• Withdrawal of consent, where consent is the applicable legal basis.

To exercise any of these rights, write to contato@haapit.com. We answer within 15 days.

8. Security

We apply technical and administrative measures to protect your data against unauthorized access, loss or improper alteration, including encryption in transit, access control and continuous monitoring. Information security is our own field of work, and we hold ourselves to the same bar we hold our clients to.

9. Changes

We may update this policy. Material changes will be flagged on this page, with the revised update date at the top.

10. Language

This is a translation provided for convenience. The Portuguese version is the governing text, and it prevails in the event of any divergence between the two.