Legal

Privacy Policy

Last updated: May 28, 2026

Red Lotus Tecnologia ("we", "us", or "Red Lotus") respects your privacy and is committed to handling your personal data responsibly. This Privacy Policy explains what data we collect, why we collect it, and how we protect it, in accordance with Brazil's General Data Protection Law (LGPD — Law No. 13,709/2018).

1. Data Controller

The data controller for the information collected through this website is:

  • RED LOTUS TECNOLOGIA DA INFORMAÇÃO LTDA – EPP
  • CNPJ: 49.623.066/0001-27
  • Trading as: Red Lotus Tecnologia

For any privacy-related request, please contact us through our contact form and indicate the subject as "Privacy" or "LGPD".

2. What Data We Collect

We collect the minimum data necessary to operate our website and respond to your inquiries:

  • Contact form data: name, email address, optional company name, and the content of the message you send us.
  • Analytics data (with consent): if you accept analytics cookies, we collect anonymized usage data such as pages visited, approximate location (country/region), device type, browser, referring site, and session duration via Google Analytics.
  • Essential preferences: we store your language preference and cookie consent choice in your browser's local storage. This data never leaves your device.
  • Conversion measurement (cookieless): when you submit the contact form, the resulting thank-you page sends an anonymized signal to Google Ads (browser information, approximate location derived from IP) so we can measure the effectiveness of our paid advertising campaigns. No advertising cookies are stored on your device.

3. Legal Basis

We process your data under the following legal bases (LGPD Art. 7):

  • Consent — for analytics cookies and any other non-essential processing.
  • Execution of a contract or pre-contractual procedures — when you contact us about our services.
  • Legitimate interest — for essential website operation, security, and abuse prevention.

4. How We Use Your Data

  • To respond to your inquiries and provide the consulting services you request.
  • To understand how our website is used so we can improve it (only with your consent).
  • To protect our website and visitors from abuse and security threats.

We do not sell your personal data. We do not use it for personalized advertising or to build profiles about you. We do measure the aggregate effectiveness of our own paid advertising campaigns through cookieless conversion modeling (see Section 5).

5. Cookies and Similar Technologies

We use two categories of storage:

  • Essential — required for the site to function (language preference and your consent choice). These are always active.
  • Analytics — Google Analytics cookies (_ga, _ga_*) that help us understand traffic patterns. These are only loaded if you accept them.

We also run paid advertising on Google. The Google Ads tag is loaded on every page and a conversion event fires on the thank-you page after a contact form submission. Advertising consent is denied by default and we do not request it, so no advertising cookies are stored on your device — Google only receives an anonymized signal used for aggregate, modeled conversion measurement, not for personalized advertising.

You can change your analytics choice at any time using the button below.

Manage your cookie preferences for this site.

6. Data Sharing

We share your data only with the service providers strictly necessary to operate the site:

  • Formspree (Formspree Inc., United States) — processes contact form submissions and delivers them to us. Formspree Privacy Policy.
  • Google Analytics (Google LLC, United States) — only if you have consented to analytics cookies. Google Privacy Policy.
  • Google Ads (Google LLC, United States) — receives anonymized conversion signals to measure the effectiveness of our paid advertising campaigns (cookieless mode; no advertising cookies are set on your device). Google Privacy Policy.

International transfers to the United States are carried out under the safeguards required by LGPD Art. 33.

7. Data Retention

Contact form submissions are retained for as long as necessary to respond to your request and for a reasonable period afterwards (up to 24 months), unless we are legally required to keep them longer or you request earlier deletion. Analytics data is retained according to Google Analytics' default settings (currently 14 months). Google Ads conversion measurement data is retained according to Google Ads' default settings.

8. Your Rights

Under LGPD Art. 18, you have the right to:

  • Confirm whether we process your data and access that data.
  • Correct incomplete, inaccurate, or outdated data.
  • Request anonymization, blocking, or deletion of unnecessary or excessive data.
  • Request data portability to another service provider.
  • Delete personal data processed with your consent.
  • Be informed about which third parties we share your data with.
  • Withdraw your consent at any time.
  • File a complaint with the National Data Protection Authority (ANPD).

To exercise any of these rights, please contact us through our contact form. We will respond within 15 days.

9. Security

We use reasonable technical and organizational measures to protect your data, including HTTPS transport encryption and minimizing the data we collect. No method of transmission over the internet is 100% secure, but we work to apply industry best practices.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be reflected in the "Last updated" date at the top of this page. Please review it periodically.

11. Contact

For any question, request, or complaint regarding your personal data, please use our contact form.