01 About this translation
This English version is provided for convenience. In case of any discrepancy, the Portuguese version prevails.
02 In short
We use personal data to provide legal services, comply with legal obligations and defend rights. We do not sell data. We share only what is necessary, only with those who need it for the service to be provided, and always under confidentiality.
03 Who the controller is
| Controller | HIGOR PAZ SOCIEDADE INDIVIDUAL DE ADVOCACIA, CNPJ 46.837.661/0001-77, Rua José Gonçalves Pereira, 129, Loja 02, Vila Pinto, Varginha/MG |
|---|---|
| Data Protection Officer (Encarregado/DPO) | Higor Gabriel Paz · OAB/MG 185.223 |
| Contact | contato@higorpazadvogados.com.br · (35) 98816-0549 |
04 Data we process and why
| Who | Data | Purpose | Legal basis (LGPD, the Brazilian General Data Protection Law, Law No. 13,709/2018) |
|---|---|---|---|
| Clients and their representatives | Identification, contact details, position, case data, payment data | Providing the contracted service, invoicing, communicating | Contract (art. 7, V); legal obligation (art. 7, II) |
| Parties, witnesses and third parties in cases | The data contained in documents and court proceedings | Defending the client’s rights | Regular exercise of rights (art. 7, VI; art. 11, II, d) |
| Partners and suppliers | Identification, OAB (Brazilian Bar Association) registration, bank details | Contracting, paying fee shares, assessing integrity | Contract; legal obligation; legitimate interest (art. 7, IX) |
| Inquirers and contacts | Name, company, contact details, message | Responding to requests and sending requested content | Preliminary procedures (art. 7, V); consent (art. 7, I) |
| Job applicants | Résumé and information from the selection process | Recruitment | Preliminary procedures; legitimate interest |
Sensitive data, such as health data, is processed only when indispensable to the case, for the regular exercise of rights, with access restricted to the case team.
05 On the website
- Contact form: name, email, WhatsApp, company (optional) and your message, so we can respond to your request. Your phone number and message are stored encrypted and are seen only by the attorney in charge.
- Bússola Executiva (newsletter): only your email address, confirmed through that same email. You can unsubscribe whenever you like, using the link in each issue.
- Downloadable guides: name, email, company and job title (optional), so we can send the requested material. Consent to receive the newsletter is separate and optional.
- Tools (such as the Diagnóstico de Risco Jurídico, our Legal Risk Assessment): your answers are calculated in your browser and are not sent.
- Strategic Session (Sessão Estratégica) booking: done on the firm’s Google Calendar booking page. Your name, email and whatever you write there are kept in the firm’s calendar (Google Workspace).
- The forms use anti-bot verification (Cloudflare Turnstile).
- Visit analytics: only with your consent in the cookie notice, the website uses Google Analytics to learn, in aggregate, which pages are visited. Without consent, there is no measurement. See the Cookie Policy.
06 Who we share data with
- Partner attorneys and correspondent attorneys working on the case, always with the client’s authorization and under professional secrecy.
- Courts, notary and registry offices (cartórios), INPI (Brazilian National Institute of Industrial Property) and other public bodies, when the service requires it.
- Technology providers that operate on our behalf: email, calendar and cloud storage (Google Workspace), billing (Asaas), electronic signature (Zapsign), website hosting and email delivery, visit analytics (Google Analytics, only with consent) and internally approved artificial intelligence tools.
- The firm’s accountant, for tax obligations.
- Authorities, when there is a legal obligation or a court order.
Some of these providers store data outside Brazil. In these cases, we require contractual protection safeguards compatible with the LGPD (art. 33).
07 How long we keep data
| Type of data | Period |
|---|---|
| Case documents and records | At least 5 years after the case is closed, for rendering accounts and defending rights |
| Tax and payment data | For the period required by tax legislation |
| Contacts and guide requests received through the website, with no engagement | 12 months, or until a deletion request |
| Bússola Executiva subscription | Until you unsubscribe |
| Résumés | Up to 1 year after the selection process |
08 Your rights
Professional secrecy and the regular exercise of rights may prevent the deletion of, or access to, data from ongoing or closed cases. When this happens, we explain why.
You may request: confirmation that we process your data, access, correction, anonymization, blocking or deletion of unnecessary data, portability, information about sharing, and withdrawal of consent (art. 18 of the LGPD). Send your request to the Data Protection Officer through the Data Subject Channel. We verify the identity of the requester and respond within 15 days.
09 Security and incidents
We use corporate accounts with two-factor authentication, access restricted by case, storage in a corporate environment, and backups. If an incident occurs that may create a relevant risk, we notify the National Data Protection Authority (ANPD) and the affected data subjects within the deadlines set by the regulations.
10 Updates
This policy may be updated. The current version is available on the website and may be requested from the Data Protection Officer at any time. It is reviewed annually, or sooner if the law, technology or the way we work changes.