Skip to content
Utura Tech

Privacy Policy

Updated September 2026

This Privacy Policy describes how Utura Tech, as controller, processes the personal data of visitors and clients of this website, in compliance with Brazil's General Data Protection Law, Law 13,709/2018 (LGPD), the Brazilian Internet Civil Framework (Law 12,965/2014) and the Consumer Protection Code.

1. Who we are

Utura Tech, CNPJ 48.024.720/0001-13, based in Maringá, Paraná. Contact for privacy matters: contato@uturatech.com.br.

2. Definitions (LGPD, art. 5)

  • Personal data: information relating to an identified or identifiable natural person.
  • Sensitive personal data: data on racial or ethnic origin, religious belief, political opinion, union membership, health, sex life, genetic or biometric data. We do not collect sensitive data.
  • Data subject: the natural person to whom the personal data refers.
  • Controller: who decides on the processing of data (Utura Tech).
  • Processor: who processes data on behalf of the controller (e.g. hosting and e-mail providers).
  • Data protection officer (DPO): person appointed to serve data subjects and the ANPD.
  • Processing: any operation with personal data, such as collection, use, storage and deletion.

3. What data we collect and why

a) Contact form: name, company, type of solution, preferred channel (e-mail or WhatsApp), budget range and message. Purpose: reply to your request, prepare proposals and keep commercial contact.

b) Browsing data: IP address, browser type, pages visited, date and time. Purpose: security, fraud prevention and usage statistics. See the Cookie Policy.

c) Client data: registration and billing data needed to perform contracts (name, CPF/CNPJ, address, payment data).

We do not knowingly collect data from people under 18. We do not make automated decisions with legal effects on data subjects.

4. Legal bases (LGPD, art. 7)

  • Consent (art. 7, I): non-essential cookies and marketing communications.
  • Performance of a contract or preliminary procedures (art. 7, V): replying to the form, proposals and provision of services.
  • Compliance with a legal or regulatory obligation (art. 7, II): keeping access logs for 6 months (Internet Civil Framework, art. 15) and tax documents.
  • Legitimate interest (art. 7, IX): site security, fraud prevention and service improvement, always respecting your expectations and rights.
  • Regular exercise of rights (art. 7, VI): defense in judicial, administrative or arbitration proceedings.

5. Data sharing

We do not sell personal data. We may share it only with: (i) processors providing hosting, e-mail, CRM and payment services, under contract and confidentiality obligations; (ii) public authorities, when required by law; (iii) partners needed to perform the contracted service, with your knowledge. Any international transfer (e.g. servers outside Brazil) will rely on LGPD art. 33, with adequate safeguards.

6. Retention period

  • Form messages: up to 24 months after the last contact, unless a contract is signed.
  • Contractual and tax data: for the applicable legal period (generally 5 years after the contract ends).
  • Access logs: 6 months (Internet Civil Framework, art. 15).
  • Cookies: as described in the Cookie Policy.

At the end of the period, data is deleted or anonymized (LGPD, art. 16), except where retention is authorized by law.

7. Your rights (LGPD, art. 18)

At any time and free of charge, you may request:

  • confirmation that processing exists;
  • access to the data;
  • correction of incomplete, inaccurate or outdated data;
  • anonymization, blocking or deletion of unnecessary, excessive or unlawfully processed data;
  • portability of the data to another provider;
  • deletion of data processed on the basis of consent;
  • information on the entities with which we share data;
  • information on the possibility of not giving consent and its consequences;
  • withdrawal of consent;
  • objection to processing carried out in breach of the law;
  • review of automated decisions, where any.

To exercise your rights, write to contato@uturatech.com.br. We reply within 15 days. You may also file a complaint with the National Data Protection Authority (ANPD).

8. Security (LGPD, arts. 46 to 49)

We adopt technical and administrative measures to protect data against unauthorized access, loss, alteration or leakage: encrypted connection (HTTPS), access control, operation logs and suppliers with recognized security standards. In case of a security incident that may cause relevant risk or damage, we will notify the ANPD and the affected data subjects, as per art. 48.

9. Cookies

We use essential cookies and, with consent, statistics and marketing cookies. Details, durations and how to manage your preferences are in the Cookie Policy.

10. Data protection officer (DPO)

The data protection officer's channel is the privacy e-mail below. Contact: contato@uturatech.com.br.

11. Changes

This policy may be updated to reflect legal or operational changes. The current version will always be on this page, with the date of the last update at the top.

12. Governing law and venue

This policy is governed by Brazilian law. The courts of Maringá, Paraná, are elected to settle any dispute, without prejudice to the consumer's home venue.