Privacy Policy

1. Introduction

Ioseph Engenium LTDA, with headquarters at Rua Caramuru, 417, Suite 22, Saúde, São Paulo – SP, ZIP Code 04138-001, Brazil (hereinafter "Ioseph Engenium", "we", "us" or "our"), is responsible for the processing of personal data collected through this website.

This Privacy Policy describes how we collect, use, store, share and protect the personal information you provide when using our website, filling out contact forms or interacting with our services.

By using this website and providing your personal data, you agree to the terms of this Privacy Policy and to the processing of your personal data as described herein.

2. Legal basis for data processing

The processing of personal data by Ioseph Engenium complies with the Brazilian General Data Protection Law (Law No. 13.709/2018 – LGPD) and is based on the following legal grounds:

• Consent (art. 7, I, LGPD): by voluntarily providing your data through forms on our website, you expressly consent to the processing of such data for the purposes described herein.
• Contract execution or preliminary procedures (art. 7, V, LGPD): when necessary for feasibility analysis, preparation of technical and commercial proposals, or execution of contracted services.
• Legitimate interest (art. 7, IX, LGPD): for institutional communications related to the services offered, provided that your rights and reasonable privacy expectations are respected.

3. Personal data collected

We collect the following categories of personal data when you use our website or interact with our services:

3.1. Data voluntarily provided by you

When you fill out the contact form or send us messages by email, we may collect:

• Full name
• Email address
• Company name (if applicable)
• Phone number (if provided)
• Type of request (category of project or service of interest)
• Message (description of context, project or question)

This data is provided voluntarily by you and is necessary for us to respond appropriately to your request.

3.2. Automatically collected data

When accessing our website, some technical data may be collected automatically, such as:

• IP address
• Browser type and version
• Operating system
• Pages visited and browsing time
• Visit origin (reference from other websites or search engines)

This data is collected for statistical analysis, user experience improvement, website security and fraud prevention purposes. It is not used to identify you individually, except when necessary for the protection of rights or compliance with legal obligations.

4. Purposes of data processing

The personal data collected is processed exclusively for the following purposes:

• Service and response to requests: process and respond to messages sent through the contact form or by email.
• Technical and commercial feasibility analysis: assess whether the project or request presented is aligned with the services offered by Ioseph Engenium.
• Proposal preparation: prepare technical and commercial proposals when appropriate.
• Meeting scheduling: coordinate remote or in-person meetings when necessary.
• Contract execution: when applicable, for the execution of contracted services.
• Institutional communications: send relevant information about services, products or technical updates related to your expressed interest (respecting the right to object).
• Continuous improvement: statistical analysis and enhancement of browsing experience and services offered.
• Security and fraud prevention: protection against malicious activities, spam and unauthorized access.
• Compliance with legal and regulatory obligations: when required by law or court order.

We do not use personal data for:

• Sale or sharing with third parties for commercial purposes unrelated to the services described herein.
• Sending promotional communications from third parties without your prior and specific consent.
• Automated decision-making that produces significant effects without human intervention.

5. Sharing of personal data

Ioseph Engenium does not sell, rent or transfer personal data to third parties, except in the following situations:

5.1. Service providers

We may share personal data with service providers acting on our behalf, including:

• Website hosting providers (e.g., Vercel or similar)
• Email sending services (e.g., Brevo/Sendinblue or similar)
• Traffic analysis tools (e.g., Google Analytics or similar, when applicable)

These providers act as data operators and are contractually obligated to process personal data in accordance with our instructions and in compliance with LGPD.

5.2. Legal obligations

We may disclose personal data when necessary to:

• Comply with legal or regulatory obligations.
• Respond to court orders, subpoenas or legal processes.
• Protect the rights, property or safety of Ioseph Engenium, our customers or third parties.

5.3. Business partners (with consent)

In specific situations, we may share data with business partners when strictly necessary for the execution of a project or service requested by you, always with your prior and specific consent.

6. Data storage and security

6.1. Location and storage

The personal data collected is stored on servers located in Brazil or in countries that offer an adequate level of protection in accordance with LGPD.

6.2. Security measures

Ioseph Engenium adopts appropriate technical and organizational measures to protect personal data against unauthorized access, destruction, loss, alteration, disclosure or any form of inappropriate or unlawful processing, including:

• Use of HTTPS encryption for data transmission.
• Restricted access control to personal data.
• Monitoring and auditing of access.
• Regular data backup.

Despite our efforts, no security system is completely infallible. In the event of a security incident that may pose a relevant risk or damage, you will be notified as required by LGPD.

6.3. Data retention

Personal data will be retained only for the period necessary to fulfill the purposes for which it was collected, including:

• Contact and communication data: up to 5 years after the last contact, unless you request deletion before this period.
• Contract-related data: for the duration of the contract and up to 5 years after its termination, for the purpose of complying with legal, accounting and tax obligations.
• Technical browsing data: up to 6 months, except when necessary for security or incident investigation.

After the retention period, data will be anonymized or securely deleted.

7. Data subject rights

In accordance with LGPD, you have the following rights regarding your personal data:

• Confirmation and access: confirm the existence of processing and access the personal data we hold about you.
• Correction: request the correction of incomplete, inaccurate or outdated data.
• Anonymization, blocking or deletion: request the anonymization, blocking or deletion of unnecessary, excessive data or data processed in non-compliance with LGPD.
• Portability: request the portability of data to another service or product provider, upon express request.
• Information about sharing: obtain information about the public and private entities with which we share your data.
• Revocation of consent: revoke consent at any time through express statement.
• Objection: object to processing carried out based on legitimate interest.

7.1. How to exercise your rights

To exercise your rights or clarify doubts about the processing of your personal data, contact us:

• Email: suporte@iosephingenium.com.br
• Address: Rua Caramuru, 417, Suite 22, Saúde, São Paulo – SP, ZIP Code 04138-001, Brazil

We will respond to your request within 15 (fifteen) calendar days, as provided by LGPD.

8. Cookies and similar technologies

Our website may use cookies and similar technologies to:

• Improve browsing experience.
• Analyze traffic and visitor behavior.
• Ensure proper website functioning.

You can configure your browser to refuse cookies or be alerted when a cookie is sent. However, disabling cookies may affect the functioning of certain website features.

For more information on how to manage cookies, consult your browser settings.

9. Links to third-party websites

Our website may contain links to third-party websites. This Privacy Policy applies exclusively to data collected through our website. We are not responsible for the privacy practices of third-party websites. We recommend that you read the privacy policies of any external website you access.

10. Changes to this Privacy Policy

Ioseph Engenium reserves the right to modify this Privacy Policy at any time, especially to adapt to new legal requirements or improve our data protection practices.

Any changes will be posted on this page, with an update to the "Last updated" date at the beginning of the document. We recommend that you review this policy periodically.

Substantial changes that significantly affect your rights will be communicated prominently on the website or by email, when appropriate.

11. Applicable law and jurisdiction

This Privacy Policy is governed by Brazilian law, especially the General Data Protection Law (Law No. 13.709/2018).

Any disputes arising from this Policy shall be resolved by the courts of the District of São Paulo, State of São Paulo, with express waiver of any other, however privileged it may be.

12. Contact

If you have questions, concerns or requests related to this Privacy Policy or the processing of your personal data, contact us:

Ioseph Engenium LTDA
Rua Caramuru, 417, Suite 22
Saúde – São Paulo – SP
ZIP Code: 04138-001
Brazil

Email: suporte@iosephingenium.com.br