// privacy
Privacy Policy
Last updated: July 2026.
This policy explains, in plain language, how Picolo Data handles the personal data of visitors to this website and users of our contact form. Privacy is a design principle here: the site was built to collect as little as possible.
1. Who controls your data
Picolo Data, Brazilian company ID (CNPJ) 66.375.264/0001-38, based in São Paulo, Brazil, is the data controller under Brazil's General Data Protection Law (Lei nº 13.709/2018 — LGPD), the Brazilian law equivalent in spirit to the GDPR.
2. What we collect and why
We only collect the data you type into the contact form yourself:
- Name — so we know how to address you;
- Email — to reply to your inquiry;
- Phone/WhatsApp (optional) — in case you prefer a call back;
- Company (optional) — to understand the context of your request;
- Message — the content of your inquiry.
There is a single purpose: replying to your inquiry. We do not use this data for newsletters, cold outreach or any other purpose without asking you again.
The form does not store anything in a database or in files on the server: your data is sent by email straight to our inbox.
3. Legal basis
Processing is based on your consent (LGPD, article 7, item I), given when you tick the authorization checkbox before submitting the form. A record of that consent (the authorized statement plus the date and time of submission) travels with the message we receive, as an audit trail.
4. How long we keep your data
We keep received messages for up to 12 months after our last exchange, or until you ask us to delete them — whichever comes first. After that, the email is deleted from our inbox.
5. Sharing
We do not share your data with third parties. Your data only travels through our hosting provider's email infrastructure, which is necessary to deliver the message.
6. Cookies
By default, this website uses no tracking cookies — no Google Analytics, no social media pixels, no advertising technology of any kind.
The only cookie present is the PHP session cookie (PHPSESSID), created when you submit the contact form. It is operationally necessary: its sole job is to rate-limit submissions and protect the form against abuse (anti-spam). It does not identify you, does not track your browsing and expires when you close your browser.
7. Cookies and ad measurement (future use, with your consent)
When we run advertising campaigns (Google Ads/GA4 and Meta Ads), we use — only with your prior, explicit consent — cookies and measurement technologies from those platforms to evaluate campaign performance (for example, knowing that an inquiry came from an ad).
During such periods, a consent notice is displayed on the site, with Accept and Decline given equal prominence. The legal basis is consent (LGPD, article 7, I). Declining does not limit any site functionality. You can withdraw your choice at any time by clearing this site's browsing data in your browser (the preference is stored only on your device) or through the channel in section 9.
While no campaign is active, none of these technologies is loaded — and the notice is not shown.
8. Your rights (LGPD, article 18)
You may, at any time, request:
- Access to the data we hold about you;
- Correction of incomplete or outdated data;
- Deletion of your data;
- Withdrawal of consent, without affecting processing already carried out;
- Information about how your data has been processed.
We respond to these requests within 15 days.
9. Data protection officer (DPO)
To exercise your rights or ask questions about this policy, write to our data protection officer: contato@picolodata.com.br.
If you believe your rights have not been respected, you may also file a complaint with the ANPD — Brazil's National Data Protection Authority (gov.br/anpd).
10. Changes to this policy
If this policy changes — for instance, when ad campaigns are activated — the new version will be published on this page with a revised update date.