Privacy Policy

1. Who we are

This Privacy Policy applies to the website ifv.org.br, owned by Instituto Brasileiro da Sustentabilidade Decisória (“IFV,” “we”), CNPJ 09.091.353/0001-19, and describes how we handle personal data in compliance with Brazil’s General Data Protection Law (Law No. 13.709/2018 — LGPD).

2. What data we collect

We collect personal data only when you voluntarily fill out the website’s contact form:

• Name
• E-mail
• Phone number (optional)
• Subject and message

We do not require registration, login, or payment on this website, and we do not collect sensitive browsing data beyond strictly necessary cookies (see the Cookie Policy).

3. What we use this data for

Data submitted through the contact form is used exclusively to:

• Respond to your message or contact request;
• Keep a record of contacts received by the institute.

The legal basis for this processing is IFV’s legitimate interest in responding to voluntarily submitted contact requests, and/or the execution of preliminary procedures requested by the data subject (Art. 7, IX and V, of the LGPD).

4. Who we share data with

To operate the contact form, we use the following service providers (data processors, under the LGPD):

• Cloudflare — website hosting and processing of form submissions.
• Supabase — secure storage of received contacts.
• Resend — sending an e-mail notification to our team when a new contact arrives.

We do not sell, rent, or share your data with third parties for marketing purposes.

5. How long we keep the data

(Retention period to be confirmed with the client — initial suggestion: contacts are kept for as long as necessary to handle the request, plus a reasonable additional period for institutional record-keeping purposes, and may be deleted at the data subject’s request at any time.)

6. Your rights as a data subject

Under the LGPD, you may request at any time:

• Confirmation of whether we process your data;
• Access to, correction of, or updates to your data;
• Anonymization, blocking, or deletion of unnecessary data or data processed in violation of the law;
• Data portability;
• Deletion of data processed on the basis of your consent;
• Information about with whom your data has been shared.

To exercise any of these rights, please contact us at ifv@ifv.org.br.

You may also file a complaint with Brazil’s National Data Protection Authority (ANPD — Autoridade Nacional de Proteção de Dados), if you believe your data has not been processed in accordance with the LGPD.

7. Security

We adopt reasonable technical measures to protect the personal data we collect, including encrypted transmission (HTTPS) and access control over the database that stores contacts.

8. Changes to this policy

This Privacy Policy may be updated periodically. The date of the last update is shown at the top of this page.

9. Contact

Questions about this Privacy Policy or about the processing of your data may be sent to ifv@ifv.org.br.