Privacy Policy

Last updated: 2026-06-15 · v1.0Download PDF

Privacy Policy

Last updated / Effective date: June 15, 2026
Version: 1.0

This Privacy Policy describes how DW CORP LTDA ("DW Corp", "we") collects, uses, shares and protects personal data, in accordance with Brazilian Law No. 13.709/2018 — General Data Protection Law ("LGPD") and other applicable rules. By using our website, forms and services, you acknowledge this Policy.

1. Controller and Data Protection Officer (DPO)

  • Controller: DW CORP LTDA — brand "DW Corp — DW Serviços de Alto Valor Agregado"
  • CNPJ (tax ID): 38.501.143/0001-50
  • Address: SHN Quadra 1, Bloco A, Conj. A, Salas 1413 — Asa Norte, Brasília/DF — CEP 70701-000, Brazil
  • Website: https://dwcorp.com.br
  • Data Protection Officer (DPO): reachable at legal@dwcorp.com.br

For any matter related to privacy, data protection or exercising your rights, contact legal@dwcorp.com.br.

2. What data we collect

We collect only the data necessary for the purposes described in this Policy:

  • Form and contact data: name, email, phone, company, job title and the content of the messages you send us.
  • Usage and device data: IP address, device identifiers, browser type, operating system, pages visited, access date/time and data collected via cookies (see Cookies Policy).
  • Data obtained via Meta APIs (when applicable): when you interact with us through Meta Platforms, Inc. platforms (Facebook, Instagram, Messenger, WhatsApp Business) or authorize integrations via social login / Meta APIs, we may receive data such as public profile name, account identifier (app-scoped ID), email address, profile picture, message content and any other data you authorize. The Meta APIs actually used in each project are listed in [APIS META UTILIZADAS].

We do not knowingly collect data from children or adolescents without the specific, prominent consent of their guardians.

3. Legal bases for processing (LGPD, Art. 7)

We process personal data based on one or more of the following legal bases:

  • Consent (Art. 7, I) — e.g. form submissions, non-essential cookies, marketing communications;
  • Performance of a contract or pre-contractual steps at your request (Art. 7, V);
  • Compliance with a legal or regulatory obligation (Art. 7, II) — e.g. tax and accounting obligations;
  • Legitimate interest (Art. 7, IX) — e.g. information security, fraud prevention and service improvement, always subject to a balancing test and respect for your rights.

4. How we use the data

We use data to: respond to requests and provide support; perform and manage software development, consulting and integration contracts and projects; operate, maintain and improve our website and services; comply with legal obligations; and, with your consent, send communications.

We do not sell your personal data. We do not use your data for advertising without your consent. We do not share or combine data obtained via Meta APIs with third-party data for unauthorized purposes.

5. Sharing and sub-processors

We do not sell personal data. We may share it, to the extent necessary, with:

  • Meta Platforms, Inc. — when you use Facebook/Instagram/Messenger/WhatsApp integrations; processing complies with Meta's Platform Terms and policies;
  • Hosting and cloud infrastructure providers (infrastructure sub-processors);
  • Email and communication providers;
  • Analytics providers (e.g. Google), as described in the Cookies Policy;
  • Public authorities, where required by law or court order.

Our sub-processors act under contracts imposing data protection obligations equivalent to those of this Policy. The list of sub-processors is available upon request at legal@dwcorp.com.br: [LISTA DE SUBOPERADORES].

6. Retention and deletion

We retain personal data only for as long as necessary for the purposes for which it was collected, considering:

  • Contractual term: for the duration of the contractual/service relationship;
  • Legal and tax retention: for the periods required by applicable law (e.g. tax, accounting and limitation-period obligations), per [PERÍODO DE RETENÇÃO].

Once the purposes and legal periods are exhausted, data is securely deleted or anonymized.

7. Data subject rights (LGPD, Art. 18)

At any time, you may exercise the following rights:

  1. Confirmation that processing exists;
  2. Access to the data;
  3. Correction of incomplete, inaccurate or outdated data;
  4. Anonymization, blocking or deletion of unnecessary, excessive or non-compliant data;
  5. Data portability to another provider;
  6. Deletion of data processed based on consent;
  7. Information about the public and private entities with which we share data;
  8. Information about the option not to give consent and its consequences;
  9. Withdrawal of consent.

To exercise your rights, send a request to legal@dwcorp.com.br. We will respond as soon as possible, within the periods set out in the LGPD and ANPD regulation. We may request information to confirm your identity before fulfilling the request.

8. Deletion of data obtained via Meta

If you interacted with us through Meta platforms (Facebook, Instagram, Messenger or WhatsApp) and wish to delete the data associated with your profile, we offer a dedicated deletion flow:

  1. Visit the data deletion page: https://dwcorp.com.br/data-deletion;
  2. Provide the requested identifying details (e.g. the account identifier / app-scoped ID or the email used);
  3. You may also request deletion directly at legal@dwcorp.com.br, with the subject "Meta Data Deletion".

Upon receiving the request (including via Meta's data deletion callback), we start the deletion process, remove the data associated with your identifier from our systems (except where legal retention is mandatory), and provide a confirmation code and a status-tracking URL for the request. We will complete the deletion within the shortest technically feasible time.

9. Security

We adopt appropriate technical and organizational measures to protect personal data against unauthorized access, destruction, loss, alteration, or improper disclosure — including access control, encryption in transit, audit logs and incident management. In the event of a security incident that may pose relevant risk or harm, we will notify the data subjects and the ANPD, as required by the LGPD.

10. International transfers

Some sub-processors (e.g. hosting, analytics and Meta itself) may process data outside Brazil. In such cases, we adopt adequate safeguards provided by the LGPD — such as specific contractual clauses, guarantees of an equivalent level of protection, and/or your consent — to ensure the protection of your data.

11. Cookies

We use cookies and similar technologies. Details of categories, purposes, providers and how to manage your preferences are described in our Cookies Policy.

12. Changes to this Policy

We may update this Policy from time to time. The current version and its effective date are always indicated at the top of this document. Material changes will be communicated through appropriate channels.

13. Contact and ANPD

Questions, requests or complaints about privacy: legal@dwcorp.com.br. Support: support@dwcorp.com.br.

You also have the right to file a complaint with the Brazilian National Data Protection Authority (ANPD) — https://www.gov.br/anpd.