Privacy Policy

1. Who we are

MD SOLUTIONS LTDA, CNPJ (Brazilian company tax ID) 49.717.667/0001-07, registered at Av. São Miguel dos Caribes, 4470 — Neópolis, Natal/RN, postcode 59.088-500, Brazil.

For anything related to personal data, the contact channel is manoeldias@mdsolutions.net.br.

2. What data we collect

From the contact form: name, company name, industry, team size, a description of the problem, WhatsApp number and email address.

From scheduling: the data you provide when booking the meeting, including name, email and your answers to the qualifying questions.

From browsing: IP address, browser type, pages visited, campaign parameters (utm_source, utm_medium, utm_campaign) and the referring page.

We do not collect sensitive data, and this site never asks for identity documents, banking details or health information.

3. Why we collect it and on what legal basis

Name, contact details and company information: to respond to your enquiry and qualify the conversation. Legal basis: your consent, given by ticking the box on the form.

Scheduling data: to hold the meeting. Legal basis: consent.

IP address, browser and pages visited: to measure use of the site. Legal basis: consent, collected through the cookie banner. Without your acceptance, these tools do not load.

Campaign parameters and referring page: to know which route brought you here. Legal basis: legitimate interest in understanding how well our own communication works — low-impact processing that does not identify you on its own.

4. Who we share it with

We use providers that process data on our behalf, each for a specific purpose: Vercel (website hosting), Supabase (contacts database), Resend (email delivery), Cal.com (scheduling), Cloudflare (protecting the form against automated submissions) and Google Analytics (usage measurement, only with your acceptance).

No data is sold, rented or transferred for third-party advertising purposes.

5. International data transfers

Some of these providers process and store data outside Brazil and outside the European Union, mainly in the United States and in Europe.

For data subjects in the European Union: the transfer relies on the standard contractual clauses adopted by those providers, under Article 46 of the GDPR. For data subjects in Brazil, the transfer relies on your consent and on the contractual safeguards agreed with each provider, under Article 33 of the LGPD.

6. How long we keep it

Business contact data is kept for 24 months from the last interaction. After that period with no contact, the data is deleted or anonymized.

If you ask for deletion before then, we act within the timeframe stated in the next section.

7. Your rights

You may request, at any time: confirmation that we process your data, access to that data, correction of incomplete or outdated data, anonymization or erasure, portability, information about who we share it with, and withdrawal of consent.

Data subjects in the European Union additionally have the right to restriction of processing, the right to object, and the right to lodge a complaint with the supervisory authority in their country.

To exercise any of these, write to manoeldias@mdsolutions.net.br. We respond within 15 days — the shorter of the two regimes, applied to everyone.

Withdrawing consent does not make unlawful the processing carried out before the withdrawal.

8. Security

The entire site runs over HTTPS. Access to the database is restricted and happens only from the server, never from the browser. Access keys are kept out of the source code and out of the repository.

No system is immune to incidents. Should a breach occur that may create a relevant risk, we notify the affected data subjects and the competent authority within the deadlines set by the applicable law.

9. Cookies

Necessary cookies keep the site working, storing your language choice and your decision about this very banner. They do not depend on consent because the site does not work without them.

Analytics cookies measure how pages are used. They are only stored after you accept, and you can decline without losing any functionality.

We do not use marketing or behavioural advertising cookies.

You can change your choice at any time through the link in the footer, and delete cookies already stored through your browser settings.

10. Data protection officer

The data protection officer (DPO) is Manoel Dias, partner at MD Solutions, who can be reached at manoeldias@mdsolutions.net.br.

11. Changes to this policy

We may update this policy. When we do, the last-updated date at the top of the page changes. Material changes are announced through a notice on the site.