Legal

Privacy policy

This policy explains what data the brbauen.com website collects, why, who it is shared with and how you can exercise your rights, under Brazil's General Data Protection Law (Law 13,709/2018, LGPD).

Who the controller is

BR/BAUEN is the controller of the data processed on this website. For anything related to privacy and personal data, write to hello@brbauen.com.

What we collect

Browsing and campaign data (Google Analytics 4, Google Ads, Meta and Hotjar), only with your consent. If you accept cookies in the notice shown on your first visit, we load these tools through Google Tag Manager to understand how the site is used (pages visited, time on site, where visits come from, device and browser type, approximate location by country and city) and to measure the results of our ads on Google and Meta. Google Analytics 4 does not log full IP addresses. This data is statistical and does not identify you by name.

Hosting logs. The site is hosted by Vercel, which records technical data for each request (IP address, browser, date and time, page requested) to run the service, protect it against abuse and diagnose errors.

What you send us through the forms or by email. The forms on the Contact and Start a conversation pages ask for your name, email, company and, if you wish, phone, city and answers about your brand's moment, sector, size and expectations. We use this data only to understand the request, reply and carry on the business conversation. The Join us form asks for your name, email, phone, city, portfolio and profile links, background, experience and answers about your work; we use this data only to assess the application and get in touch, and keep it for up to 12 months for future openings unless you ask us to delete it. The free-material forms (Content page) ask for your name, email, phone, company, role, sector, company size and, optionally, your challenge; we use this data to email you the material and, if you say you are interested, to get in touch. Delivery is made by a transactional email service (Resend) to our inboxes; the site keeps no copy. The same applies to what you write by email. The forms are only sent with your express authorisation, ticked on the form itself.

Cookies and storage

On your first visit, a notice asks whether you accept measurement cookies. Until you accept, no measurement script loads and no cookie is set. You can change your choice at any time through the cookie icon in the footer, which opens the preferences by category (necessary, always on; measurement and marketing, optional); declining deletes the measurement and marketing cookies.

  • Google Analytics (_ga, _ga_*): audience measurement, only after you accept, valid for up to 2 years.
  • Google Ads (_gcl_*): measurement of our Google campaigns, only after you accept, valid for up to 90 days.
  • Meta (_fbp): measurement of our Meta campaigns, only after you accept, valid for up to 90 days.
  • Hotjar (_hj*): how the site is used (heatmaps and anonymous sessions), only after you accept, valid for up to 1 year.
  • Your cookie choice: kept in the browser's local storage so we don't ask again on every visit.
  • Browsing preference: when you switch languages, the site briefly keeps your scroll position in the browser session so you can pick up where you were. It contains no personal data and is cleared when you close the tab.

You can also block or delete cookies in your browser settings, or turn off Google Analytics with Google's official add-on. The site keeps working normally.

Third-party content

Some project pages show videos from Vimeo and YouTube. They are embedded in privacy mode (Vimeo with tracking turned off and YouTube from the youtube-nocookie.com domain), which sets no tracking cookies until you interact with the video. When you play a video, the privacy policies of Vimeo and YouTube also apply.

Why we process this data

  • Measurement and marketing (Google Analytics, Google Ads, Meta and Hotjar): your consent, which you can withdraw at any time (LGPD art. 7, I, and art. 8, §5).
  • Hosting logs: legitimate interest in keeping the site secure and running, and compliance with Brazil's Internet Civil Framework (Law 12,965/2014).
  • Forms and email contact: your consent (art. 7, I) and the steps prior to a contract or responding to your request (art. 7, V).

We don't sell personal data or use it for targeted advertising.

Who we share it with

Only with the providers that run the site: Google (Analytics, Tag Manager, Ads and Sheets, where the forms are kept), Meta and Hotjar (measurement) and Vercel (hosting). All of them may process data outside Brazil, under the safeguards set out in their contracts and policies, as provided by LGPD art. 33.

How long we keep it

  • Google Analytics data: up to 14 months.
  • Google Ads, Meta and Hotjar data: per each tool's retention periods.
  • Hosting logs: for the provider's retention period and at least the 6 months required by the Internet Civil Framework.
  • Forms and emails: for as long as the conversation or business relationship lasts, and afterwards for the period required by law.

Your rights

Under the LGPD you can ask us to confirm whether we process your data, and for access, correction, anonymisation or deletion, portability, information about who we share it with, and review of consent where consent is the legal basis. Write to hello@brbauen.com; we reply within 15 days. You can also contact Brazil's National Data Protection Authority (ANPD).

Changes

We may update this policy when the site changes. The date below shows the latest revision.

Last updated: 16 October 2026.