PRIVACY AND DATA PROTECTION
Privacy policy
This policy explains which personal data is processed when you use the planocerto.eng.br website, for what purposes, and how to exercise your rights under the Brazilian General Data Protection Law (LGPD) and, where applicable, the EU and UK GDPR.
Last updated on September 27, 2026.
1. Data controller
The controller of the personal data processed on this website is Plano Certo Engenharia, based in Joinville, Santa Catarina, Brazil. For any privacy matter, including contacting our data protection officer, email [email protected] or call +55 47 99966-0811.
2. Data we process
- Browsing data (Google Analytics 4): pages visited, traffic source, device and browser type, language, approximate region and interactions on the website, such as clicks on contact links, shares, article reading, filters and blog searches. Google Analytics 4 does not log or store IP addresses.
- Data you send us: the website form does not send anything to our servers; it only prepares a WhatsApp message that you review and send. When you contact us by WhatsApp, email or phone, we process the data you choose to share, such as name, city, phone number, email, description of your request, photos and documents.
- Technical access logs: our hosting and delivery provider (Cloudflare) processes data such as IP address, date and time and browser to deliver pages, protect the website against abuse and keep access logs.
We do not ask for sensitive data on the website and we do not sell personal data.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Measuring website use with analytics cookies to improve content and services | Consent (LGPD art. 7, I; GDPR art. 6(1)(a)), which you can give or refuse in the cookie notice |
| Aggregated cookieless measurement while no consent is given (Google consent mode) | Legitimate interests (LGPD art. 7, IX; GDPR art. 6(1)(f)), without persistent identifiers |
| Answering enquiries, assessing requests and preparing proposals | Pre-contractual steps at your request (LGPD art. 7, V; GDPR art. 6(1)(b)) |
| Providing contracted services and meeting tax and professional obligations | Performance of a contract and legal obligations (LGPD art. 7, II and V; GDPR art. 6(1)(b) and (c)) |
| Website security and retention of access logs | Legal obligation under Brazilian law and legitimate interests |
4. Cookies and similar technologies
On your first visit, a notice asks whether you accept analytics cookies. Until you accept, Google Analytics runs in consent mode: it does not store cookies in your browser and only receives signals without identifiers, used for aggregated statistics. You can change your choice at any time with the Cookie settings button in the footer of every page.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics | Distinguishes visitors for statistics (only with consent) | 2 years |
_ga_<ID> | Google Analytics | Keeps session state for statistics (only with consent) | 2 years |
pc-consent (local storage) | Plano Certo | Stores your choice in the cookie notice | Until you clear your browser data |
__cf_bm and similar | Cloudflare | Protection against automated traffic, when enabled | Up to 30 minutes |
You can also block or delete cookies in your browser settings.
5. Who we share data with
- Google: Google Analytics (usage statistics) and Google Fonts (delivery of the website fonts, which receives your browser's IP address when fonts load).
- Cloudflare: website hosting, delivery and security.
- WhatsApp (Meta): when you choose to contact us on WhatsApp.
- Email provider: when you email us.
- Authorities: when required by law, court order or to defend our rights.
The applications shown on the website, such as NioEng, CalcMuro, TalkMapper, ConGeres and NionMaron, run on their own domains and have their own privacy policies.
6. International transfers
Google and Cloudflare may process data on servers outside Brazil, including in the United States. These transfers rely on the safeguards provided for in article 33 of the LGPD and, where the GDPR applies, on the mechanisms it recognizes, such as standard contractual clauses adopted by these providers.
7. How long we keep data
- Google Analytics event data: for the retention period set in the account, up to 14 months; aggregated reports may be kept longer.
- Messages and contact data: for as long as needed to handle your request and, if a contract follows, for the periods required by law and professional rules.
- Access logs: for the 6-month period required by the Brazilian Internet Civil Framework, or longer if requested by an authority.
8. Your rights
You may request confirmation that we process your data, access, correction, anonymization, blocking or deletion, portability, information about data sharing, and withdrawal of consent at any time. You may also object to processing based on legitimate interests. If you are in the European Economic Area or the United Kingdom, you have equivalent rights under the GDPR, including the right to restrict processing.
To exercise your rights, email [email protected]. We may ask for information to confirm your identity and we reply within 15 days. You may also lodge a complaint with the Brazilian National Data Protection Authority (ANPD) or with the supervisory authority where you live or work.
9. Security
The website uses encrypted connections (HTTPS) on every page. Access to messages and documents we receive is restricted to the team members who need them to handle your request.
10. Children
The website is intended for businesses and professionals and is not directed at children. We do not knowingly collect data from anyone under 18.
11. Changes to this policy
We may update this policy when we change the website tools or the way we process data. The date of the last update is shown at the top of the page.