Legal

Privacy Policy

Last updated: August 11, 2026

Red Lotus Tecnologia ("we", "us", or "Red Lotus") respects your privacy and is committed to handling your personal data responsibly. This Privacy Policy explains what data we collect, why we collect it, and how we protect it, in accordance with Brazil's General Data Protection Law (LGPD — Law No. 13,709/2018).

1. Data Controller

The data controller for the information collected through this website is:

  • RED LOTUS TECNOLOGIA DA INFORMAÇÃO LTDA – EPP
  • CNPJ: 49.623.066/0001-27
  • Trading as: Red Lotus Tecnologia

For any privacy-related request, please contact us through our contact form and indicate the subject as "Privacy" or "LGPD".

2. What Data We Collect

We collect the minimum data necessary to operate our website and respond to your inquiries:

  • Contact form data: name, email address, optional company name, and the content of the message you send us.
  • Analytics data (with consent): if you accept analytics cookies, we collect anonymized usage data such as pages visited, approximate location (country/region), device type, browser, referring site, and session duration via Google Analytics.
  • Essential preferences: we store your language preference and cookie consent choice in your browser's local storage. This data never leaves your device.
  • Conversion measurement (cookieless): when you submit the contact form, the resulting thank-you page sends an anonymized signal to Google Ads (browser information, approximate location derived from IP) so we can measure the effectiveness of our paid advertising campaigns. No advertising cookies are stored on your device.
  • Advertising measurement (with consent): if you accept analytics cookies, the OpenAI pixel also loads and reports the pages you view on this site to OpenAI, along with technical data such as browser, device, and IP-derived location, so we can measure how the campaigns we run on OpenAI's platforms perform. If you decline, the pixel is never loaded.
  • Chat conversations (with consent): our Portuguese-language pages offer a Freshworks chat widget. If you accept cookies, it loads and stores an identifier in your browser so a conversation survives a page change. We receive whatever you type into it, plus any name or email you choose to give us there. If you decline, the widget is never loaded and no chat appears.

3. Legal Basis

We process your data under the following legal bases (LGPD Art. 7):

  • Consent — for analytics cookies and any other non-essential processing.
  • Execution of a contract or pre-contractual procedures — when you contact us about our services.
  • Legitimate interest — for essential website operation, security, and abuse prevention.

4. How We Use Your Data

  • To respond to your inquiries and provide the consulting services you request.
  • To understand how our website is used so we can improve it (only with your consent).
  • To protect our website and visitors from abuse and security threats.

We do not sell your personal data, and we do not build advertising profiles about you. We do measure how our own paid campaigns perform: on Google through cookieless conversion modeling, and on OpenAI through the pixel described in Section 5.

5. Cookies and Similar Technologies

We use four categories of storage:

  • Essential — required for the site to function (language preference and your consent choice). These are always active.
  • Analytics — Google Analytics cookies (_ga, _ga_*) that help us understand traffic patterns. These are only loaded if you accept them.
  • Advertising measurement — the OpenAI pixel, which may store an identifier in your browser so a visit can be attributed to one of our ads. It follows the same choice as analytics: accept and it loads, decline and it is never fetched.
  • Chat — the Freshworks widget on our Portuguese pages, which stores an identifier so a conversation survives a page change. It follows the same choice as analytics: accept and the widget loads, decline and it is never fetched.

We also run paid advertising on Google. The Google Ads tag is loaded on every page and a conversion event fires on the thank-you page after a contact form submission. Advertising consent is denied by default and we do not request it, so no advertising cookies are stored on your device — Google only receives an anonymized signal used for aggregate, modeled conversion measurement, not for personalized advertising.

You can change your analytics choice at any time using the button below.

Manage your cookie preferences for this site.

6. Data Sharing

We share your data only with the service providers strictly necessary to operate the site:

  • Formspree (Formspree Inc., United States) — processes contact form submissions and delivers them to us. Formspree Privacy Policy.
  • Google Analytics (Google LLC, United States) — only if you have consented to analytics cookies. Google Privacy Policy.
  • Google Ads (Google LLC, United States) — receives anonymized conversion signals to measure the effectiveness of our paid advertising campaigns (cookieless mode; no advertising cookies are set on your device). Google Privacy Policy.
  • OpenAI (OpenAI OpCo, LLC, United States) — receives the pixel measurement described in Section 5, and only if you accepted analytics cookies. OpenAI Privacy Policy.
  • Freshworks (Freshworks Inc., United States) — runs the chat widget on our Portuguese pages and stores the conversations you start there, and only if you accepted cookies. Freshworks Privacy Policy.

International transfers to the United States are carried out under the safeguards required by LGPD Art. 33.

7. Data Retention

Contact form submissions are retained for as long as necessary to respond to your request and for a reasonable period afterwards (up to 24 months), unless we are legally required to keep them longer or you request earlier deletion. Analytics data is retained according to Google Analytics' default settings (currently 14 months). Google Ads conversion measurement data is retained according to Google Ads' default settings, and OpenAI pixel data according to OpenAI's. Chat conversations are kept in Freshworks for as long as necessary to answer you and for a reasonable period afterwards (up to 24 months).

8. Your Rights

Under LGPD Art. 18, you have the right to:

  • Confirm whether we process your data and access that data.
  • Correct incomplete, inaccurate, or outdated data.
  • Request anonymization, blocking, or deletion of unnecessary or excessive data.
  • Request data portability to another service provider.
  • Delete personal data processed with your consent.
  • Be informed about which third parties we share your data with.
  • Withdraw your consent at any time.
  • File a complaint with the National Data Protection Authority (ANPD).

To exercise any of these rights, please contact us through our contact form. We will respond within 15 days.

9. Security

We use reasonable technical and organizational measures to protect your data, including HTTPS transport encryption and minimizing the data we collect. No method of transmission over the internet is 100% secure, but we work to apply industry best practices.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be reflected in the "Last updated" date at the top of this page. Please review it periodically.

11. Contact

For any question, request, or complaint regarding your personal data, please use our contact form.