Privacy Policy
Last updated: March 2026
1. Data Controller
Whale Digital, a legal entity incorporated under Brazilian law, CNPJ 41.896.274/0001-98, headquartered at João Pessoa, Paraíba, Brasil("Whale Digital", "we", "our"), is the controller of personal data collected through this website.
Privacy contact / DPO: privacy@whaledigital.com.br
2. Scope
This Privacy Policy applies to whaledigital.com.br and all information collected when you access it.
3. Data Collected and Purposes
3.1 Automatically collected data
| Data | Purpose | Legal basis (LGPD) |
|---|---|---|
| IP address | Security and access analytics | Art. 7, IX — legitimate interest |
| Cookie identifiers | Usage analytics, targeted advertising | Art. 7, I — consent |
| Browsing data (pages, time, clicks) | UX improvement and metrics | Art. 7, IX — legitimate interest |
| Approximate location (from IP) | Geographic audience analysis | Art. 7, IX — legitimate interest |
3.2 Voluntarily provided data
| Data | Purpose | Legal basis (LGPD) |
|---|---|---|
| Name and email (contact form) | Responding to commercial enquiries | Art. 7, V — pre-contract performance |
| AI chat content | Support and service improvement | Art. 7, I — consent |
4. Third-Party Services and International Data Transfers
4.1 Google Analytics & Google Ads (Google LLC, USA)
- Collects: browsing behavior, conversions, demographics, ad interactions
- Purpose: site performance analytics and advertising campaign management
- International transfer: processed in the USA. Google participates in the EU-U.S. Data Privacy Framework and uses Standard Contractual Clauses. Under LGPD, transfer is covered by Art. 33, V.
- Privacy policy: https://policies.google.com/privacy
- Analytics opt-out: https://tools.google.com/dlpage/gaoptout
4.2 Hotjar (Hotjar Ltd., Malta / USA)
- Collects: session recordings, heatmaps, user behavior data
- Purpose: usability analysis and UX improvement
- International transfer: may be processed in the USA. Hotjar uses EU Standard Contractual Clauses.
- Privacy policy: https://www.hotjar.com/legal/policies/privacy/
- Opt-out: https://www.hotjar.com/legal/compliance/opt-out
4.3 AI Chat
- Collects: content of messages entered in the chat
- Purpose: visitor support and commercial assistance
- Note: do not enter sensitive data (health information, financial data, passwords) in the chat.
5. Cookies
| Type | Description | Consent required |
|---|---|---|
| Essential | Core site functionality (security, session) | No |
| Analytics | Google Analytics, Hotjar | Yes |
| Advertising | Google Ads, remarketing | Yes |
6. Retention Periods
| Data | Retention period |
|---|---|
| Site access logs | 6 months (Brazilian Internet Act, Art. 15) |
| Contact form data | 5 years or until consent withdrawal |
| Analytics/advertising cookies | Per tool settings (typically 13 months) |
| AI chat conversations | 12 months or until deletion request |
7. Data Subject Rights (LGPD Art. 18)
Under Brazil's General Data Protection Law (Lei nº 13.709/2018), you have the right to: confirmation of processing, access to your data, correction, anonymization/blocking/deletion of unnecessary data, portability, deletion of consent-based data, information on third-party sharing, consent withdrawal, and to object to legitimate-interest-based processing.
To exercise your rights: privacy@whaledigital.com.br
Response time: 15 business days.
8. Security
We implement appropriate technical and organizational measures, including TLS encryption in transit and access controls. In case of a relevant security incident, we will notify ANPD and affected data subjects pursuant to LGPD Art. 48.
9. Changes
We may update this policy periodically. The "last updated" date at the top reflects the current version.
10. Contact
Whale Digital
CNPJ: 41.896.274/0001-98
Address: João Pessoa, Paraíba, Brasil
DPO email: privacy@whaledigital.com.br
ANPD: https://www.gov.br/anpd