Privacy Policy | GB Consultoria Empresarial

This Privacy Policy describes how GB Consultoria Empresarial ("GB", "we") collects, uses, shares and protects the personal data of visitors and clients. It applies to this website and to the services we provide, and it covers both Brazil's General Data Protection Law (Lei nº 13.709/2018 — LGPD) and, where applicable, the EU General Data Protection Regulation (GDPR).

Where your data is processed. GB is a Brazilian company and our infrastructure runs in Brazil. If you contact us from the European Economic Area, the United Kingdom or the United States, your data is transferred to and processed in Brazil. See section 6 for the safeguards that apply to that transfer.

1. Data controller

GB Consultoria Empresarial, the trading name of GB Business Consultoria em TI LTDA, registered under Brazilian company number (CNPJ) 69.147.207/0001-90, based in Porto Alegre/RS, Brazil. Remote and on-site service across the Porto Alegre metropolitan area. Contact: contato@gbbusiness.com.br — +55 51 98915-9611.

2. Data we collect

Data you provide through the contact form: name, email, phone, company, the answers you give in the short qualification questions, and any message you write.
Browsing data collected through cookies and similar technologies (pages visited, traffic source, campaign identifiers), only after you consent.

We do not ask for and do not want special categories of personal data (health, biometrics, political opinions and the like). Please do not include them in the message field.

3. Why we use it, and on what legal basis

To answer your enquiry and to deliver our services — performance of a contract or steps taken at your request before entering into one (GDPR art. 6(1)(b); LGPD art. 7, V).
Commercial communication and proposal follow-up — our legitimate interest in responding to a business enquiry you started, or your consent (GDPR art. 6(1)(f) and 6(1)(a); LGPD art. 7, IX and I).
Marketing measurement and site improvement (Google Ads, Google Analytics) — your consent (GDPR art. 6(1)(a); LGPD art. 7, I).

4. Cookies and consent

We use Google Tag Manager, Google Ads and analytics tools. These are activated only after you consent, through our cookie banner (Google Consent Mode v2). Until you choose, advertising and analytics tags stay blocked. You can change your choice at any time.

5. Sharing

We may share data with providers that support our operation — for example Google, for marketing measurement, and communication providers such as WhatsApp/Meta when you choose to contact us through that channel. Our website and automation infrastructure is hosted on servers we control. We do not sell personal data.

6. International transfers

Because GB operates from Brazil, personal data collected through this site is processed in Brazil. For transfers from the European Economic Area or the United Kingdom, we rely on appropriate safeguards under GDPR Chapter V, including Standard Contractual Clauses where required, and we apply the same security measures described in section 9. You may request information about the safeguards applied to your data using the contact details in this policy.

7. Retention

We keep data only for as long as it is needed for the purposes above, or for as long as the law requires, after which it is deleted or anonymised.

8. Your rights

Depending on where you are, you may have the right to confirmation of processing, access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interest, and withdrawal of consent at any time — withdrawal does not affect processing already carried out. These rights exist under LGPD art. 18 and GDPR arts. 15 to 22.

To exercise any of them, write to contato@gbbusiness.com.br. We answer within the period the applicable law sets. If you are in the EEA or the UK, you also have the right to lodge a complaint with your national data protection supervisory authority. In Brazil, the competent authority is the ANPD.

9. Security

We apply reasonable technical and organisational measures to protect data against unauthorised access, loss or improper alteration.

10. Data protection officer

For data protection matters and to exercise data subject rights, write to contato@gbbusiness.com.br. The same address reaches the person responsible for data protection (DPO).

11. Changes

This Policy may be updated. The "Last updated" date at the top indicates the version in force.

This page is the English version of our privacy policy. The Portuguese version is available at Política de Privacidade. In case of divergence between the two, the Portuguese version prevails for matters governed by Brazilian law.