Privacy
Privacy Policy
How data is processed on the public website and during an initial contact with the professionals.
Scope
This policy covers browsing the institutional website and the initial contact of people interested in presenting a matter to the professionals. It does not govern client files after an engagement, which follow their own rules and the applicable legal and professional obligations.
Joint controllers
Rafael Coimbra de Medeiros, OAB/AL 21,820, and Vitor Laurindo Sivini Angelo, OAB/AL 19,753, jointly determine the purposes and means of the processing described in this policy.
Privacy-related requests may be sent to angeloemedeiros@gmail.com. This is a privacy contact channel and does not constitute the formal appointment of a data protection officer.
Data processed
The form may receive a name, email address, city/state, general legal area, a summary of the objective, a temporary human-verification answer, and confirmation that this policy has been read. The verification answer is used only to authorize submission and is not forwarded to the lawyers.
The technical infrastructure may also process information necessary for connection, operation, and security, such as IP address, date and time, and browser or device characteristics, when these records are generated by the providers used.
If the visitor accepts advertising measurement and the Google Ads tag is configured, the page address, date and time, technical access characteristics, and identifiers related to a click or conversion may be processed. Name, email, city, legal area, and message content are not sent to the tag.
Purposes and legal bases
Data is used to respond to the inquiry and assess a possible engagement under Article 7(V) of Brazil's LGPD; to comply with legal or regulatory obligations under Article 7(II); for the regular exercise of rights under Article 7(VI); and for security or abuse prevention under Article 7(IX), when that basis is justified by the specific situation.
Optional Google Ads measurement is intended to show whether a visit originating from an advertisement reached the form confirmation page. It is activated only with optional consent, which may be refused or withdrawn without preventing browsing or contact. Ad personalization and Google Analytics remain disabled in this implementation.
Initial-contact data is not used for marketing messages. Any future use for that purpose will require separate and specific consent.
Documents and confidential information
The form does not accept attachments and instructs visitors not to send documents, sensitive personal data, passwords, financial information, or confidential details during the initial contact. Information sent inadvertently will not be used and will be deleted when there is no legal or regulatory obligation, or need to retain it for the exercise of rights.
Providers and sharing
The website uses ChatGPT Sites for hosting and delivery; Formspree to receive and forward the form; Gmail, a Google service, for message delivery and storage; and Registro.br for the domain and DNS. Form content is forwarded exclusively to angeloemedeiros@gmail.com.
When technically configured and authorized by the visitor, the Google tag and Google Ads may process the data strictly necessary for conversion measurement. Form fields and the description of the legal matter are not shared with Google Ads.
The official WhatsApp and Instagram channels, Meta services, are external links. If a person chooses to contact the professionals through either platform, processing will also be subject to the respective provider's rules. Data is not sold.
Who can access the information
Access to messages is restricted to the responsible lawyers, Rafael Coimbra de Medeiros and Vitor Laurindo Sivini Angelo. Technical providers and their subprocessors may carry out processing necessary to provide and secure their services and comply with legal obligations, according to their own terms.
Retention
For contacts that do not result in an engagement, messages kept by the professionals will be deleted six months after the last communication, including archive and trash folders, subject to legal, regulatory, or rights-enforcement needs.
Under the planned form service tier, Formspree keeps submission history for up to 30 days. If an engagement occurs, necessary data will then follow the rules applicable to client files. Technical records follow the retention periods set by the respective providers.
The measurement preference is kept in the browser's local storage until the visitor changes it or deletes the site's data. Identifiers that may be created after consent follow Google's retention periods and controls; the website keeps no additional copy of those identifiers in the form or the received email.
International processing
Hosting, form, email, measurement, and external-channel providers may use infrastructure located outside Brazil. ChatGPT Sites does not guarantee regional data residency. This policy does not state specific countries or contractual mechanisms that have not been confirmed.
Security measures
The website uses HTTPS, required-field validation, a server-signed temporary human-verification question, origin checks, the POST method without exposing content in the URL, size limits, an anti-spam field, no file uploads, and server-side forwarding. Access to messages is limited to the two controllers. No internet-connected system offers absolute security.
Data subject rights
The data subject may request confirmation of processing, access, correction, anonymization, blocking or deletion when applicable, information about sharing, portability under applicable regulation, and review or objection in cases provided by law. Requests must be sent to angeloemedeiros@gmail.com and may require reasonable identity verification.
Updates
Last updated: August 23, 2026. This policy must be reviewed before adopting new forms, providers, analytics tools, advertising, maps, embedded videos, or other technologies that change the processing described here.