Your data, in plain English

This policy explains which personal data Laeta processes when you use this site or talk to us, what it is for, who it is shared with and what you can demand. It follows the LGPD, Brazil's General Data Protection Law (Law 13.709/2018).

Summary

The essentials on one screen

We collect what you deliberately send us — the contact form, a newsletter sign-up, WhatsApp or email — plus audience measurement of which pages get read.
We use that data to answer you and to run the conversation and, if you subscribe to the newsletter, to send it to you. Nothing beyond that.
We use one advertising cookie, from Meta, so that our ads reach people with a real interest in the subject. There is no Google Analytics, no heat map and no screen recording.
If you would rather opt out, you can turn off personalised ads in your Meta account settings or block third-party cookies in your browser. The site works exactly the same.
We measure audience with a tool hosted by SL Comm, acting as our processor. Its identifier disappears when you close the tab; only people who submit the contact form stay identified, by their email.
The contact form does not sign you up for anything. You only receive our newsletter if you subscribe and confirm by email, on the newsletter page. To leave, just write to laeta@laeta.ag or use the unsubscribe link included in every email.
We do not sell, rent or hand over data about clients, contacts or subscribers to anyone.
You can ask for access, correction or deletion at any time, and we comply.

Who controls your data

The controller is LAETA BOUTIQUE ESTRATEGICA MULTICHANNEL E LIVE MARKETING LTDA, registered under Brazilian company tax ID (CNPJ) 15.698.829/0001-87, with offices at Rua Afonso Braz, 343 — Sala 208 — São Paulo, SP, 04511-011, Brazil.

The controller is whoever decides why and how data is processed. Every decision described in this policy is ours, and so is the responsibility for it.

Collection

Which data we collect

There is no logged area and nothing you have to give us in order to browse. The data only exists when you decide to talk to us or to subscribe to the newsletter.

When you use the contact form

The fields are: name, email, mobile (optional), company (optional) and the message you write. It is worth knowing how this works under the hood, because it changes who receives what.

With JavaScript on, the form sends nothing to any server of ours. It assembles a message from what you filled in and opens WhatsApp for you to check and send. What you filled in, however, has already been sent to our management system at erp.laeta.ag the moment you pressed send here: your enquiry reaches us even if you decide not to send the message.
With JavaScript off, the form opens your email client with a pre-filled message addressed to laeta@laeta.ag. The sending is still up to you.

What you type into the form is stored in our own management system, which runs at erp.laeta.ag. It is not sold, and it follows the retention periods described below. The conversations themselves still happen on WhatsApp or by email.

Using the contact form does not sign you up for the newsletter. Your email only receives the newsletter if you subscribe on its own page, tick the consent box and confirm through the link we email you.

When you subscribe to the newsletter

You subscribe on the newsletter page, which is separate from the contact form. The consent box starts unticked and, unless you tick it, nothing is sent. After you sign up, we send a confirmation email; the sign-up only takes effect once you click its link. We collect:

your email address and your name, both required;
the consent record: the exact text of the box you ticked, the version of that text, the address of the page where you subscribed, the date and time of the sign-up and the record of your email confirmation.

That data is stored in our management system at erp.laeta.ag and is used only to send Laeta's newsletter. Signing up does not send your name or email to the audience measurement tool or to Meta: the measurement only records that a sign-up happened. We do not sell, rent or hand over subscriber data to anyone.

When you talk to us on WhatsApp

We receive your phone number, your profile display name, your profile picture if you have one, and the content of the messages and files you send.

When you write by email

We receive your email address, your name as it appears in the sender field, the content of the message and any attachments.

Technical access data

As on any site, the service hosting these pages logs technical delivery and security data, such as IP address, date and time of access, page address and browser identification. Those logs are generated by the infrastructure, exist for operation and protection against abuse, and are not used by us to profile, segment or identify visitors.

Audience measurement

We use an analytics tool hosted at analytics.slcomm.xyz and operated by SL Comm to understand which pages get read and which buttons get clicked. It records the page visited, clicks on buttons and links, reading depth, and technical data such as browser and approximate location from the IP address. The identifier tying those events to a single visit lives in your browser's session storage and disappears when you close the tab: if you only browsed, we cannot recognise you on a future visit, and in no case do we follow you across other sites. The exception is anyone who submits the contact form: because the email is recorded alongside, a future submission with the same email is recognised as the same person.

If you use the contact form, the name, email and company you filled in are also recorded in that tool, so we can connect the enquiry to the visit that produced it. That happens the moment you press send here on the site, before the message goes out through WhatsApp.

Advertising

This site has a Meta pixel. It records that a browser visited a given page and, if you use the contact form, that an enquiry was sent — without the content of the message. Newsletter sign-ups are not reported to Meta. That is what lets our ads reach people with a real interest in the subject, and lets us tell which campaigns work.

The pixel stores a cookie called _fbp in your browser and tells Meta the page address, the IP address and browser information. From there, processing also follows Meta's own policies. The cookies section explains how to opt out.

What we do not collect

We do not ask for a national ID number, home address, payment details or sensitive data such as health, biometrics, religion or political opinion. If you spontaneously send data of that kind in a message, it will be processed only to answer you and deleted once it is no longer necessary.

Use

What we use it for, on which legal basis and for how long

Each processing activity has a declared purpose and a legal basis under the LGPD. No data is used for a new purpose without you being told first.

Answering your contact

Purpose: reading what you wrote, replying, clearing up questions and booking the diagnosis conversation.
Legal basis: preliminary procedures related to a contract at the data subject's request, article 7, item V, of the LGPD.
Retention: for as long as the conversation lasts and for up to 12 months after the last contact, so the history is there if the subject comes back. After that, we delete it.

Running a proposal or a project

Purpose: putting together a proposal, executing the contracted project and delivering what was agreed.
Legal basis: performance of a contract, article 7, item V.
Retention: during the project and for the applicable statutory periods afterwards, mainly the Brazilian tax and accounting periods for business documents, which run up to five years.

Promoting our services

Purpose: making sure Laeta's ads reach people with a real interest in the subject, and measuring whether campaigns work.
Legal basis: legitimate interest, article 7, item IX, of the LGPD, with the opt-out described in the cookies section.
Retention: for Meta's own retention periods for audiences and conversion events.

Protecting the site and our systems

Purpose: identifying abuse, automated attacks and misuse.
Legal basis: legitimate interest, article 7, item IX, with the care of using as little data as possible.
Retention: for the log retention period of the hosting infrastructure, always short.

Complying with legal obligations

Purpose: meeting a requirement of law, of an authority or of a court decision.
Legal basis: compliance with a legal or regulatory obligation, article 7, item II.
Retention: for the period the law determines.

Sending the newsletter and Laeta communications

Purpose: sending Laeta's own content and invitations by email, at most 4 emails a month. We do not send third-party offers.
Legal basis: consent, article 7, item I, of the LGPD.
Retention: until you unsubscribe. The consent record is kept as proof that the sign-up was authorised.

The newsletter only reaches people who subscribed on the newsletter page, ticked the consent box and confirmed by email. People who contact us through the contact form, WhatsApp or email are not subscribed. You can leave at any time, through the unsubscribe link included in every email or by writing to laeta@laeta.ag.

Sharing

Who we share it with

With very few parties, and always out of operational necessity. We do not sell, rent or hand over data about clients, contacts or subscribers, and we do not trade contact lists with partners.

WhatsApp, operated by Meta Platforms. It is the conversation channel you choose to use. Messages travel through its infrastructure and are also subject to the platform's own terms and privacy policy.
Cloudflare, the site's hosting. Delivers the pages and protects our domains, including the management system's. Processes the technical access data described above.
Meta Platforms, advertising. Receives from this site's pixel the address of the page visited, the IP address, browser information and the record that an enquiry was sent through the form — without the content of the message. It uses that data to deliver and measure our ads.
SL Comm, audience measurement. Hosts the analytics tool at analytics.slcomm.xyz. Receives the pages you viewed and the clicks you made on this site and, if you use the form, the name, email and company you filled in. Acts as a processor: it cannot use that data for any other purpose or combine it with another database.
Amazon Web Services, newsletter delivery. The Amazon SES service delivers the newsletter emails. It receives subscribers' email addresses and names and the content of each mailing, and records technical delivery data, such as whether a message was delivered or bounced.
Our corporate email provider. Stores and transports the messages exchanged with laeta@laeta.ag.
Public authorities, where there is a legal obligation, a formal request or a court order.

These suppliers act as processors: they handle data on Laeta's behalf and within what Laeta determines. Outside that list, nobody receives your data.

International transfer

The hosting, messaging, email, newsletter delivery and advertising services above have infrastructure outside Brazil, which means your data may be processed in other countries. The LGPD allows this where adequate contractual safeguards exist, and that is what we require from the suppliers we use.

What this site keeps in your browser

Two things, each with a specific job.

An advertising cookie, from Meta. It exists so that Laeta's ads on Instagram and Facebook reach people with a real interest in the subject, rather than showing to everyone, and so we can tell whether a campaign worked.

In practice, the pixel tells Meta that a browser visited a given page on this site and, if you use the form, that an enquiry was sent — never the content of your message. The cookie is called _fbp and it is what lets Meta recognise the same browser from one visit to the next.

If you would rather opt out, there are three routes and none of them changes anything here: turn off personalised ads in your Meta account settings, block third-party cookies in your browser, or open the site in a private window.

The second thing is session storage: a key remembering that you have already seen the opening animation, and the identifier used for audience measurement. Both disappear when you close the tab, and neither holds your history from other sites.

This site loads three scripts. One is ours, served from our own domain, and handles the menu, the entry animations and the form submissions. The second is the audience measurement, served from analytics.slcomm.xyz by SL Comm, acting as our processor. The third is the Meta pixel. Fonts and images are served from here too.

There is no Google Analytics, no heat map and no tag manager. We do not record your screen, we do not replay your session, and we do not sell or hand over your data to anyone.

If that changes, this policy changes first, and you will see the update date at the bottom of the page.

Rights

Your rights as a data subject

The LGPD gives you the right, at any time and free of charge, to:

Confirm whether we process your data and access that data.
Correct incomplete, inaccurate or outdated data.
Request anonymization, blocking or deletion of unnecessary or excessive data, or data processed outside the law.
Request portability of your data to another supplier, under the applicable regulation.
Request deletion of data processed on the basis of your consent.
Know which public and private entities we have shared your data with.
Be informed about the possibility of not consenting and about the consequences of that.
Withdraw consent, where consent is the basis for processing.
Object to processing carried out on the basis of legitimate interest.

How to exercise your rights

Write to laeta@laeta.ag with the subject line "LGPD" and tell us what you want. We reply within 15 days. We may ask for one extra piece of information to confirm it is really you, and that information is used only for that.

Laeta's data protection officer, as provided in article 41 of the LGPD, can be reached at laeta@laeta.ag with LGPD in the subject line.

If you feel we have not resolved the matter, you can file a complaint with the ANPD, Brazil's national data protection authority.

How to leave the newsletter

Every newsletter email includes an unsubscribe link. If you prefer, write to laeta@laeta.ag with the subject line "Newsletter". Once you unsubscribe, you receive no further newsletter mailings. Leaving does not affect any conversation or project you have with Laeta.

Security

The site is served over an encrypted connection. Access to the company's email inboxes and WhatsApp conversations is restricted to the people on the team who need it to work. No system is infallible, which is why our first security measure is to collect little: data that does not exist cannot leak.

Changes to this policy

When this policy changes, the date below changes with it. If the change materially affects how we process your data, we will flag it prominently on this page.

Updated on October 6, 2026.

Any questions about your data?

Write with the subject line "LGPD". A person answers, and answers properly.

Rather talk now?

Come talk to us laeta@laeta.ag

Shall we set up a chat? We will show you our cases and how we can help you.