Your data is yours. This page describes exactly what we collect and why.
explōrātiō operates on method and transparency — and that applies to personal data too. No boilerplate clauses. This policy describes, in plain language, what comes in, what it's used for, and how long it stays.
Who controls the data.
explōrātiō Consultoria em Business Intelligence
CNPJ 29.605.686/0001-26
Av. Paulista, 1471 — cj. 1110 · CEP 01311-927 · São Paulo — SP · Brazil
Data Protection Officer (DPO): contato@exploratioconsult.com.br
What we collect — and when.
Two situations generate collection. Neither involves advertising profiling.
Site navigation (aggregate analytics). When you accept analytics in the banner, Google Analytics 4 records anonymized events: pageviews, scroll depth, CTA clicks, language, device, traffic source. IP is anonymized at collection (anonymize_ip: true). No marketing cookies, no profiling, no cross-site tracking. If you decline, no navigation data is recorded.
Direct contact (WhatsApp or email). When you start a conversation via WhatsApp or send an email, we receive your phone number (for WhatsApp), email address, and the message content. We treat it as targeted commercial communication, under the legal bases of legitimate interest / pre-contractual execution.
Data you send us during a project.
When a product is engaged (Data Clean, MMM Combined, Creative Dividend Index, Price/Demand Elasticity, Basket Analysis, Trends Analyzer), you send datasets for analysis. These data:
Are used solely to run your model
Nothing trains internal systems, nothing is reused on other projects, nothing crosses with other clients.
Are deleted at the end of the project
The deliverable stays with you. Original and intermediate datasets are removed from our systems within 30 days after final acceptance — except where retention is contractually or legally required.
Operate under NDA
Confidentiality agreement signed before any data transfer. A DPA (Data Processing Agreement) is formalized when the data involves third-party personal information.
Cookies and similar technologies.
We implement Google's Consent Mode v2: by default, no analytics cookies are stored until you explicitly consent on the banner. If you accept, GA4 sets first-party cookies (_ga, _ga_*) with a lifetime of up to 13 months. If you decline, no persistent cookies are created by our site.
You can revoke consent at any time by clearing the cookies for this domain in your browser. The banner will reappear on your next visit.
Who we share data with.
Google (Analytics 4) — when consent is granted, receives the events described above, with IP anonymized.
Meta (WhatsApp) — if you start a conversation via the "Talk on WhatsApp" button, the communication takes place inside Meta's platform, subject to its own privacy policy.
Nobody else. We do not sell, rent or transfer data to third parties. No remarketing pixels, no paid-media audience feeding, no data enrichment from external sources.
What you can request, and how.
Brazil's General Data Protection Law (Law 13.709/2018) grants you the following rights. All are exercised by email to contato@exploratioconsult.com.br, with reply within 15 business days:
Confirmation and access
To know which of your data we process and receive a copy.
Correction
To update incomplete, inaccurate, or outdated data.
Anonymization, blocking, or deletion
Of unnecessary, excessive, or non-compliant data.
Portability
To receive your data in a structured, interoperable format.
Deletion
Of data processed based on consent, upon revocation.
Objection
To processing carried out under legitimate interest, where LGPD non-compliance is identified.
Review of automated decisions
Not applicable — our deliverables are manually reviewed; no decision is made exclusively by an automated system.
How long we keep what.
Navigation analytics
Up to 14 months in GA4 (maximum configured limit), then irreversible aggregation.
WhatsApp/email communication
Kept for the duration of the commercial relationship and for 5 additional years for tax and legal-defense purposes.
Datasets sent in projects
Deleted within 30 days after final acceptance of the deliverable.
Contractual documentation
Kept for the legal statute of limitations (generally 5 years).
When this page changes.
Material changes (new processing, new tool, new legal basis) are marked with a new effective date at the top of this page. For changes affecting data already collected, we notify active contacts by email before they take effect.