1. Who Controls the Data
The controller responsible for the processing operations described in this policy is Gabriel Mendes — Careka Digital, based in Poços de Caldas, Minas Gerais, Brazil.
Requests related to personal data may be sent to contato@carekadigital.com. To protect the data subject, we may request reasonable information to confirm identity before fulfilling requests involving access, correction, or deletion of data.
2. What Data May Be Processed
The website was designed to collect only what is necessary. Depending on the type of interaction, the following data may be processed:
- Data provided voluntarily: name, email address, phone number, company, message content, and any other information submitted by the data subject via email, WhatsApp, or another channel they choose.
- Technical access data: IP address, date and time, accessed URL, browser, operating system, user agent, referrer, and technical security logs that may be processed by the hosting infrastructure.
- Privacy Preferences: the decision about optional categories is stored locally in the browser so the site can honor that choice on future visits.
Careka Digital does not, by default, request sensitive personal data through this website. If a data subject voluntarily submits information of that nature, processing will be limited to what is necessary to address the request and applicable obligations.
3. Purposes and Legal Bases
Data may be used to respond to contacts, prepare proposals, carry out pre-contractual measures requested by the data subject, provide contracted services, maintain website security, prevent abuse, comply with legal obligations, and exercise rights in administrative or judicial proceedings.
Depending on the context, processing may rely on legal bases provided under Brazil’s LGPD, such as performance of a contract or pre-contractual procedures, compliance with legal or regulatory obligations, legitimate interests when applicable and compatible with the data subject’s rights, and consent when that is the appropriate basis.
Optional analytics, personalization, and marketing cookies or technologies remain disabled until authorization is given whenever consent is used as the legal basis for activation.
4. Processors, Third Parties, and Transfers
Data may be processed by providers required for website operations and communication, always limited to the relevant purpose. This may include hosting and infrastructure, email providers, and, when the user chooses those channels, external services such as WhatsApp/Meta or links to third-party platforms.
Some editorial pages use typography resources provided by Google Fonts. When an external resource loads, the provider may receive technical connection data, such as IP address and browser headers, according to its own policies.
Certain providers may process information in other countries. When personal data is transferred internationally, applicable LGPD requirements and contractual, technical, and organizational safeguards appropriate to the service will be observed.
Careka Digital does not sell personal data.
5. Retention and Deletion
Data is retained for as long as necessary to fulfill the purpose that justified processing, meet legal, regulatory, or contractual obligations, preserve evidence, and exercise rights. When there is no longer a basis for retention, the data will be deleted or anonymized, subject to legally permitted retention.
The privacy preference stored in the browser is versioned and automatically expires after the technical period defined by the website or whenever the policy requires a new choice.
6. Data Subject Rights
Under Brazil’s LGPD, and subject to applicable legal conditions, a data subject may request confirmation that processing exists; access; correction of incomplete or outdated data; anonymization, blocking, or deletion of unnecessary or noncompliant data; portability when regulated and applicable; information about sharing; deletion of data processed with consent when appropriate; withdrawal of consent; objection in circumstances provided by law; and review of decisions based solely on automated processing when applicable.
These rights may be exercised by contacting contato@carekadigital.com. Requests will be handled in accordance with applicable law and may require identity verification.
7. Information Security
The website uses HTTPS and security headers in its public infrastructure, along with data-minimization, access-control, and separation-of-responsibility practices. No environment is completely immune to incidents; preventive, detection, and response measures are therefore applied in proportion to risk.
If a security incident involving personal data occurs and there is a legal duty to notify, the appropriate measures will be taken with data subjects and competent authorities.
8. Children and Teens
The website and services presented are not intentionally directed at children. There is no mechanism designed to deliberately collect children’s data through this institutional page. If improper processing is identified, the privacy channel may be used to request review and appropriate action.
9. Updates to This Policy
This policy may be updated to reflect changes to the website, services, providers, or legal requirements. Material changes will be published on this page, with the date updated and, when necessary, a new consent request.
Version 1.0 · effective as of September 14, 2026.