PRIVACY POLICY.

This Policy applies to all personal data processed by our construction company — including residential clients, developers and commercial operators who engage our masonry services, their property data and contacts, website visitors and anyone whose data we process in connection with our construction activities. Construction contracts necessarily involve property information, addresses and project data — we treat all of this as confidential.

• Client identification and contact data: Full name, CPF or CNPJ, phone, email and address — collected when clients engage our services, request quotes or sign construction contracts.
• Property and project data: Property address, plot number, project description, approved plans and any technical construction information provided to define the scope of work. Treated as confidential project information.
• Construction contract data: Scope of works, agreed stages, NF-e milestones, payment schedule and all terms of the service contract — retained for the full contractual and statutory period.
• NF-e billing data: Name and CPF or CNPJ for NF-e issuance at each contract milestone, in compliance with SEFAZ-GO and ISS/Prefeitura de Aruanã requirements.
• Photographic records: Site photographs taken during construction to document progress, defects and completion — for the client's and our own project records. Taken only of the construction site, not of individuals.
• Contact and enquiry data: Name, phone and message when submitting enquiries via WhatsApp or our website form.
• Technical website data: IP address, browser type, pages visited and access times.

• SEFAZ-GO / Receita Federal: Tax data for NF-e issuance and fiscal compliance in Goiás, including ICMS on materials and ISS on services.
• Prefeitura de Aruanã (ISS): For ISS obligations on construction service activities in Aruanã.
• INSS / eSocial / Ministério do Trabalho: Labour and social security obligations for construction workers — required by law for all construction companies operating in Brazil.
• CREA-GO / CAU (where applicable): Where a project requires registered technical sign-off — minimum necessary project and client data.
• PROCON-GO: When required in a consumer dispute under the CDC — construction defect disputes.
• Legal authorities: When required by a competent judicial or administrative order.

Our construction operations are based in Aruanã, GO. All client and project data is stored in Brazil. Any technology platforms used for communication or project documentation that operate on international servers do so under the guarantees of Art. 33 of the LGPD or recognised adequacy mechanisms.

• NF-e and fiscal records (SEFAZ-GO / ISS): Minimum 5 years under federal and state tax legislation (CTN, Art. 174; SEFAZ-GO).
• Construction contracts and project records: Duration of the project plus 5 years minimum for contractor liability under the CDC (Art. 26 — visible defects) and up to 10 years for latent structural defects under Código Civil Art. 618. Construction records are retained for the full applicable warranty and liability period.
• INSS / eSocial records: As required by Brazilian labour and social security legislation — typically 10 years.
• Site photography: Retained for the full contractual liability period — minimum 5 years from project completion.
• Contact and enquiry data (no contract commenced): Up to 1 year from last contact.
• Website analytics: Aggregated and anonymised after 12 months.

• Client project data and property information stored in access-controlled systems;
• Construction contracts and NF-e records retained in secure physical and digital files at our Aruanã office;
• WhatsApp communications with clients handled with appropriate discretion;
• Website encrypted in transit (HTTPS);
• PCI-DSS certified payment platforms — card data never retained;
• As a Ltda, formal internal data handling protocols maintained;
• Incident response procedures and breach notification per LGPD Art. 48.

• Confirmation and Access (Art. 18, I–II): Confirm whether we hold your data and receive a copy.
• Correction (Art. 18, III): Request correction of inaccurate data.
• Anonymisation / Blocking / Deletion (Art. 18, IV): Request deletion — subject to mandatory fiscal and contractual liability retention obligations.
• Portability (Art. 18, V): Receive your data in a structured format.
• Deletion of consent-based data (Art. 18, VI): Request deletion of consent-based data.
• Information on sharing (Art. 18, VII): Find out which entities your data has been shared with.
• Withdrawal of Consent (Art. 8º, §5º): Withdraw consent at any time.
• Complaint to the ANPD (Art. 18, §1º): Lodge a complaint at www.gov.br/anpd.

We respond within 15 business days.

Our website may use cookies for essential functionality and aggregated performance analysis. We do not use behavioural tracking or advertising cookies. Preferences can be managed through browser settings.

Construction contracts are entered into by adults with legal capacity to contract. We do not intentionally collect personal data from children under 13. All construction service engagements are contracted by adults legally authorised to act on behalf of the property owner.

We do not collect sensitive personal data as defined in LGPD Art. 5º, II. As a construction company, we note the following specific obligations:

This Policy may be updated to reflect changes in our activities, the LGPD, ANPD guidance or applicable tax legislation in Goiás. Material changes will be communicated via our website or directly to active clients by WhatsApp or email.

All privacy requests, questions and complaints should be directed to our Data Protection Officer (Encarregado — LGPD Art. 41):