We don't sell your data
We don't sell, rent or trade it. Your data is used to reply to you — and that's it.
Privacy · LGPD
Privacy policy
What we collect, why we collect it and how you stay in control. Written to be read — no legalese where it isn't needed.
This is an English translation of our Portuguese Política de privacidade, provided for convenience. If the two versions differ, the Portuguese version prevails. Our team replies in Portuguese and English.
First things first
The 30-second summary.
The points that matter most. The detail behind each one, and its legal basis, follows below.
Only what's needed
Name and WhatsApp are required. Company and message are optional. No ID numbers, address or card details.
We see where you came from
Which ad, search or website brought you here. That's how we learn what works.
Hardly any cookies
The site itself sets no cookies for visitors who just browse. Google measurement: currently off.
Stored with care
Encrypted connection, password-protected admin and access limited to the Yuu team.
You're in charge of your data
Ask for access, correction or deletion at any time. We reply within 15 days, free of charge.
Jump to a section
01
Who looks after your data
Yuu Digital is the controller of the personal data processed through this website. In LGPD terms, that means we decide why and how the data is used — and we are accountable for it.
- Controller
- Yuu Digital
- Where we are
- Maringá, PR, Brazil · serving all of Brazil
- Data protection officer (DPO) channel
- Via the WhatsApp number listed here
- +55 (44) 98855-3288
Any privacy request, question or complaint sent through these channels reaches our team directly. No bots, no hidden forms.
02
What data we collect
Only what we need to reply to you and understand where your message came from.
| Category | What it includes | How we get it |
|---|---|---|
| Contact details | Name and WhatsApp numberRequired — without them we can't reply. | You type it into the form |
| About your business | Company and the message you writeOptional. | You type it into the form |
| Visit source | utm_source utm_medium utm_campaign utm_term utm_content gclid fbclid, referring website, first page viewed and the page you submitted from | Read from the page address and kept in your browser during the visit. We only receive them if you submit the form. |
| Technical submission data | IP address, browser and operating system (user agent), date and time | Recorded automatically when you submit |
| Proof of consent | The ticked consent box, with date and time | Recorded when you submit |
| Access logs | IP address, date and time, and the page requested | Generated by the hosting server on every visit, as on any website |
| Audience measurement | Pages viewed, time on page, device type and approximate region, in aggregateCurrently off | Google Analytics cookies, only when measurement is on |
What we never ask for:
- ID or tax numbers
- Home address
- Bank or card details
- Health, religion, political views or other sensitive data
If you just browse, you're anonymous to us. Visit-source data stays in your own browser and disappears when you close the tab. We only know who you are if you submit the form or message us on WhatsApp.
03
Why we use it and on what legal basis
Every use has a legal basis under Article 7 of the LGPD. We never use your data for something you wouldn't expect.
| Purpose | Data used | Legal basis |
|---|---|---|
| Replying to you and preparing a proposal | Contact details, company and message | ConsentArt. 7, I — and pre-contractual steps, Art. 7, V |
| Knowing which channel brought you and measuring campaigns | Visit source | Legitimate interestArt. 7, IX |
| Protecting the form against spam and abuse | IP address, date and time | Legitimate interestArt. 7, IX |
| Measuring website audience | Measurement cookiesCurrently off | Legitimate interestArt. 7, IX — you can block it, see section 04 |
| Keeping website access logs | Access logs | Legal obligationArt. 7, II — Brazilian Internet Civil Framework (Marco Civil), Art. 15 |
| Defending Yuu in legal or administrative proceedings | Only what the case requires | Exercise of legal rightsArt. 7, VI |
We make no automated decisions about you and we don't build a profile of you to sell or pass on. Where a use relies on legitimate interest, you may object to it at any time (Art. 18, § 2).
04
Cookies and storage
We use very little. Visitors who just browse get no cookies from the site itself.
| Name | Purpose | Owner and type | Duration |
|---|---|---|---|
yuu_attributionSession storage, not a cookie | Remembering where you came from until you submit the form | This site · functional | Until you close the tab |
yuu_site_admin | Keeping the admin area logged in — only the Yuu team gets it | This site · strictly necessary | Until you close the browser |
_ga _ga_* | Google Analytics audience measurementCurrently off | Google · analytics | Up to 2 years |
You can delete or block cookies in your browser settings. To opt out of Google Analytics on every website, use the official opt-out browser add-on. The site keeps working normally either way.
05
Who we share it with
We don't sell, rent or trade personal data. It only passes through the providers below, so the site can work.
| Who | Why |
|---|---|
| Website hosting | Stores the website, the contacts database and the access logs |
| Domain email | Delivers the internal new-contact alert to our team |
| Analytics and Tag Manager, for audience measurementCurrently off | |
| WhatsApp (Meta) | When you tap a WhatsApp button, the conversation happens in the app and follows WhatsApp's own privacy policy |
| Public authorities | Only when required by law or a court order |
These providers act as processors: they handle the data only for the contracted purpose and following Yuu's instructions.
06
Transfers outside Brazil
Some providers, such as Google and WhatsApp, may process data on servers outside Brazil. When that happens, the transfer follows the safeguards in Article 33 of the LGPD, such as the contractual clauses these providers adopt to protect data to the standard required in Brazil.
07
How long we keep it
As long as each purpose requires — and not a day longer than the law asks.
| Data | Period | Afterwards |
|---|---|---|
| Contacts who didn't become clients | Up to 5 years after the last contact, as a sales record | Deleted or anonymised |
| Contacts who became clients | For the contract term plus legal retention periods, such as tax and civil ones | Deleted or anonymised |
| Anti-spam IP record | About 1 hour | Deleted automatically |
| Access logs | At least 6 months (Marco Civil, Art. 15) | Deleted by the host's routine |
| Visit source in your browser | Until you close the tab | Disappears on its own |
| Data of people who asked for deletion | Up to 15 days to complete the request | Deleted, except what the law requires us to keep |
08
Your rights
The LGPD gives you these rights, free of charge and at any time (Art. 18).
- Confirmation
Find out whether we process any of your data.
ART. 18, I - Access
Get a copy of the data we hold.
ART. 18, II - Correction
Fix incomplete, wrong or outdated data.
ART. 18, III - Anonymisation or blocking
Of anything unnecessary, excessive or processed unlawfully.
ART. 18, IV - Portability
Take your data to another provider.
ART. 18, V - Deletion
Erase the data processed based on your consent.
ART. 18, VI - Who we share with
Know which companies received your data.
ART. 18, VII - What happens if you don't consent
Understand the consequences of not giving consent.
ART. 18, VIII - Withdraw consent
Withdraw your consent whenever you like, as easily as you gave it.
ART. 18, IX
You may also object to any use based on legitimate interest and ask for a review of decisions made solely by automated means (Art. 20) — although Yuu makes no such decisions.
09
How to make a request
01
Ask
Send us a message saying what you need: access, correction, deletion or any other right.
02
We confirm it's you
To protect your data, we confirm through the same number or email you used to contact us.
03
Reply within 15 days
Simple requests are usually handled the same day. The legal maximum is 15 days (Art. 19, II).
Not happy with our reply? You can file a complaint with the ANPD, Brazil's National Data Protection Authority, at gov.br/anpd.
10
How we protect it
- Always-encrypted connection (HTTPS with HSTS)
- Password-protected admin with login attempt limits
- Admin activity log, including failed logins
- Access to contacts limited to the Yuu team
- Form with anti-spam protection and submission limits
- Security policy that blocks unauthorised scripts
No system is 100% secure. If an incident could cause you significant risk or harm, we will notify you and the ANPD, as Article 48 of the LGPD requires.
11
Minors and other websites
This website is meant for businesses and professionals. It is not directed at anyone under 18, and we don't knowingly collect their data. If we find we have, we delete it.
The site also links to third-party pages, such as WhatsApp. Once you leave, each one's own privacy policy applies.
12
Changes to this policy
If anything changes, the date at the top of this page changes too. When a change is significant — such as a new use for your data — we highlight it at the top of the page. The version published here always applies.
Version of November 9, 2026 · Yuu Digital · Maringá, PR, Brazil
Still have questions?