Privacy notice

Gaulett and privacy contact

Gaulett Ltda. (in formation)

Gaulett is the brand presented on this website. The company's registration has not yet been completed.

For privacy questions and requests, write to privacidade@gaulett.com.

Data and purposes

The form asks for your name, email address and message; the company field is optional. By email, we receive your address and the information you include, such as your name, company, message content and attachments. We use this data to understand your enquiry, respond and continue the conversation.

Form submissions also include language information and, when present, the service topic associated with the enquiry, to provide context for our response.

Handling professional enquiries and assessing business opportunities relies on the legitimate interest in establishing and maintaining professional relationships, with due regard for the rights and expectations of the individuals involved.

When you request steps relating to a contract to which you are a party, the necessary data is processed to take those preliminary steps or perform that contract. Privacy requests are processed to meet obligations under data protection legislation.

Share only the information needed for your enquiry.

Browsing and protection against abuse

We do not use audience analytics or advertising tracking tools. The infrastructure processes technical data, such as IP addresses, browser information and request records, to make the website available and protect message submission.

When you request to send a message, the form activates reCAPTCHA Enterprise to assess technical risk signals and prevent abusive submissions. When it runs, the service sets the necessary _GRECAPTCHA cookie. Google acts as a processor of customer data for this service, as described in its data processing documentation.

Operating the website and preventing abuse relies on the legitimate interest in maintaining its availability, security and usable contact channels.

Services used and processing

• Enquiries: messages are kept in Gmail through Google Workspace. The form sends the data through a processing service on Google Cloud Run to that email inbox.
• Website and protection: Firebase Hosting hosts the website; reCAPTCHA Enterprise helps prevent abuse. Firestore stores counters and pseudonymized identifiers derived from the email address and submission identifier to limit repeated requests and prevent duplicates, without storing message content.
• Technical records: Cloud Logging records request metadata. Message content is not recorded in application logs.

These services are provided by Google and may involve processing in other countries. See the Google data processing terms and the Firebase privacy documentation. Direct email contact also involves your chosen email provider.

Data retention

For business enquiries that do not lead to a contract, we keep messages, data submitted through the form and attachments received by email in Gmail for up to 12 months after the last relevant interaction about the enquiry, proposal or negotiation. Retention is reviewed periodically, with earlier deletion when the content is no longer needed. Automated messages and unanswered contact attempts do not restart this period.

Documents needed to perform contracts, meet legal obligations or exercise legal rights are retained for periods corresponding to those purposes.

Protection records linked to an email address or submission are configured to expire within 48 hours. Deletion is asynchronous and, according to the provider, normally occurs within 24 hours after expiration. Request metadata in Cloud Logging follows the default 30-day retention period. These periods do not cover all of Google's internal records. According to Firebase, Hosting retains IP data for a few months.

After Gaulett deletes data, technical recovery and deletion periods may apply within Google's systems, separate from Gaulett's period of use.

Your rights and requests

You may request confirmation of processing, access, correction and information about the sharing of your data. Where provided for under Brazil's General Data Protection Law, or LGPD, you may also request anonymization, restriction of processing, deletion and portability; object to processing that breaches the law; and request a review of decisions made solely through automated processing that affect your interests.

Where processing relies on consent, you may withdraw it and obtain information about the option not to consent and its consequences.

Email your request to privacidade@gaulett.com, explaining what you would like to request. Information needed to confirm your identity and locate your data may be requested.

You may also consult the ANPD guidance on data subject rights, in Portuguese.

Security

The website uses HTTPS to encrypt communication between your browser and the hosting infrastructure. When contacting Gaulett, avoid sending passwords or personal information unrelated to your enquiry.

Updates to this notice

Changes to the activities described here will be reflected in this notice. The date at the top of the page identifies its latest update.