Your data, in plain English

This policy explains which personal data Laeta processes when you use this site or talk to us, what it is for, who it is shared with and what you can demand. It follows the LGPD, Brazil's General Data Protection Law (Law 13.709/2018).

Summary

The essentials on one screen

We collect what you deliberately send us — the form, WhatsApp or email — plus audience measurement of which pages get read.
We use that data to answer you and to run the conversation. Nothing beyond that.
This site uses no cookies. There is no Google Analytics, no social network pixel and no advertising script.
We measure audience with a tool hosted by SL Comm, acting as our processor. Its identifier disappears when you close the tab; only people who submit the form stay identified, by their email.
Your email does not go into any mailing list.
We do not sell and do not hand over your data to anyone.
You can ask for access, correction or deletion at any time, and we comply.

Who controls your data

The controller is LAETA BOUTIQUE ESTRATEGICA MULTICHANNEL E LIVE MARKETING LTDA, registered under Brazilian company tax ID (CNPJ) 15.698.829/0001-87, with offices at Rua Afonso Braz, 343, São Paulo, SP 04511-011, Brazil.

The controller is whoever decides why and how data is processed. Every decision described in this policy is ours, and so is the responsibility for it.

Collection

Which data we collect

There is no registration, no logged area and nothing you have to give us in order to browse. The data only exists when you decide to talk to us.

When you use the form on this site

The fields are: name, email, mobile (optional), company (optional) and the message you write. It is worth knowing how this works under the hood, because it changes who receives what.

With JavaScript on, the form sends nothing to any server of ours. It assembles a message from what you filled in and opens WhatsApp for you to check and send. What you filled in, however, has already been sent to our management system at erp.laeta.ag the moment you pressed send here: your enquiry reaches us even if you decide not to send the message.
With JavaScript off, the form opens your email client with a pre-filled message addressed to laeta@laeta.ag. The sending is still up to you.

What you type into the form is stored in our own management system, which runs at erp.laeta.ag. It is not sold, it does not become a mailing list, and it follows the retention periods described below. The conversations themselves still happen on WhatsApp or by email.

When you talk to us on WhatsApp

We receive your phone number, your profile display name, your profile picture if you have one, and the content of the messages and files you send.

When you write by email

We receive your email address, your name as it appears in the sender field, the content of the message and any attachments.

Technical access data

As on any site, the service hosting these pages logs technical delivery and security data, such as IP address, date and time of access, page address and browser identification. Those logs are generated by the infrastructure, exist for operation and protection against abuse, and are not used by us to profile, segment or identify visitors.

Audience measurement

We use an analytics tool hosted at analytics.slcomm.xyz and operated by SL Comm to understand which pages get read and which buttons get clicked. It records the page visited, clicks on buttons and links, reading depth, and technical data such as browser and approximate location from the IP address. The identifier tying those events to a single visit lives in your browser's session storage and disappears when you close the tab: if you only browsed, we cannot recognise you on a future visit, and in no case do we follow you across other sites. The exception is anyone who submits the form: because the email is recorded alongside, a future submission with the same email is recognised as the same person.

If you use the form, the name, email and company you filled in are also recorded in that tool, so we can connect the enquiry to the visit that produced it. That happens the moment you press send here on the site, before the message goes out through WhatsApp.

What we do not collect

We do not ask for a national ID number, home address, payment details or sensitive data such as health, biometrics, religion or political opinion. If you spontaneously send data of that kind in a message, it will be processed only to answer you and deleted once it is no longer necessary.

Use

What we use it for, on which legal basis and for how long

Each processing activity has a declared purpose and a legal basis under the LGPD. No data is used for a new purpose without you being told first.

Answering your contact

Purpose: reading what you wrote, replying, clearing up questions and booking the diagnosis conversation.
Legal basis: preliminary procedures related to a contract at the data subject's request, article 7, item V, of the LGPD.
Retention: for as long as the conversation lasts and for up to 12 months after the last contact, so the history is there if the subject comes back. After that, we delete it.

Running a proposal or a project

Purpose: putting together a proposal, executing the contracted project and delivering what was agreed.
Legal basis: performance of a contract, article 7, item V.
Retention: during the project and for the applicable statutory periods afterwards, mainly the Brazilian tax and accounting periods for business documents, which run up to five years.

Protecting the site and our systems

Purpose: identifying abuse, automated attacks and misuse.
Legal basis: legitimate interest, article 7, item IX, with the care of using as little data as possible.
Retention: for the log retention period of the hosting infrastructure, always short.

Complying with legal obligations

Purpose: meeting a requirement of law, of an authority or of a court decision.
Legal basis: compliance with a legal or regulatory obligation, article 7, item II.
Retention: for the period the law determines.

We do not run email marketing from this site. If we ever do, it will be with a separate, specific consent request that is easy to withdraw.

Sharing

Who we share it with

With very few parties, and always out of operational necessity. We do not sell data, do not hand over databases and do not trade contact lists with partners.

WhatsApp, operated by Meta Platforms. It is the conversation channel you choose to use. Messages travel through its infrastructure and are also subject to the platform's own terms and privacy policy.
Cloudflare, the site's hosting. Delivers the pages and protects our domains, including the management system's. Processes the technical access data described above.
SL Comm, audience measurement. Hosts the analytics tool at analytics.slcomm.xyz. Receives the pages you viewed and the clicks you made on this site and, if you use the form, the name, email and company you filled in. Acts as a processor: it cannot use that data for any other purpose or combine it with another database.
Our corporate email provider. Stores and transports the messages exchanged with laeta@laeta.ag.
Public authorities, where there is a legal obligation, a formal request or a court order.

These suppliers act as processors: they handle data on Laeta's behalf and within what Laeta determines. Outside that list, nobody receives your data.

International transfer

The hosting, messaging and email services above have infrastructure outside Brazil, which means your data may be processed in other countries. The LGPD allows this where adequate contractual safeguards exist, and that is what we require from the suppliers we use.

This site does not use cookies.

That is not a figure of speech. There is no session cookie, no preference cookie and no third-party cookie, and nothing this site keeps in your browser survives you closing the tab. That is also why there is no consent banner here: there is nothing to consent to.

What does exist is session storage: a key remembering that you have already seen the opening animation, and the anonymous identifier used for audience measurement. Both disappear when the tab closes, and neither holds your history from other sites.

This site loads two script files. One is ours, served from our own domain, and handles the menu, the entry animations and the form submission. The other is the audience measurement, served from analytics.slcomm.xyz by SL Comm, acting as our processor. Fonts and images are served from here too.

There is no Google Analytics, no social network pixel, no heat map, no tag manager and no advertising script on this page. We do not record your screen and we do not replay your session.

If that changes, this policy changes first, and you will see the update date at the bottom of the page.

Rights

Your rights as a data subject

The LGPD gives you the right, at any time and free of charge, to:

Confirm whether we process your data and access that data.
Correct incomplete, inaccurate or outdated data.
Request anonymization, blocking or deletion of unnecessary or excessive data, or data processed outside the law.
Request portability of your data to another supplier, under the applicable regulation.
Request deletion of data processed on the basis of your consent.
Know which public and private entities we have shared your data with.
Be informed about the possibility of not consenting and about the consequences of that.
Withdraw consent, where consent is the basis for processing.
Object to processing carried out on the basis of legitimate interest.

How to exercise your rights

Write to laeta@laeta.ag with the subject line "LGPD" and tell us what you want. We reply within 15 days. We may ask for one extra piece of information to confirm it is really you, and that information is used only for that.

Laeta's data protection officer, as provided in article 41 of the LGPD, can be reached at laeta@laeta.ag with LGPD in the subject line.

If you feel we have not resolved the matter, you can file a complaint with the ANPD, Brazil's national data protection authority.

Security

The site is served over an encrypted connection. Access to the company's email inboxes and WhatsApp conversations is restricted to the people on the team who need it to work. No system is infallible, which is why our first security measure is to collect little: data that does not exist cannot leak.

Changes to this policy

When this policy changes, the date below changes with it. If the change materially affects how we process your data, we will flag it prominently on this page.

Updated on August 20, 2026.

Any questions about your data?

Write with the subject line "LGPD". A person answers, and answers properly.

Rather talk now?

Come talk to us laeta@laeta.ag

Shall we set up a chat? We will show you our cases and how we can help you.