Privacy Policy

Last updated: October 2026

In one sentence: ARIOS collects the data you type into the contact form yourself, uses it to study your company and reply, does not sell or pass that data to anyone, and deletes everything if you ask.

1Who we are

ARIOS, CNPJ 43.635.233/0001-73, with its registered office at Av. Brigadeiro Faria Lima, 1811, suite 1119, Jardim Paulistano, São Paulo/SP, Brazil, postcode 01452-001, is responsible for processing the personal data collected on this site.

2What data we collect

Only what is needed to study your company and reply to your enquiry:

From the form: first name, the company's CNPJ, email and/or phone, and the questionnaire answers — challenge, sector, stage of the company, channels already in place, investment range, timing and who decides.
From the public CNPJ record: legal name, economic activity, company size and municipality, looked up in the Brazilian federal tax authority's database. These are public corporate records, not your personal data.
From browsing: basic information about how the site is used — pages visited, device, where the visit came from — collected by the measurement tools described in item 6.

We do not collect sensitive personal data — racial origin, religious belief, political opinion, health, biometrics, among others — nor data on children and adolescents. If you write something of that kind in a free-text field, we will delete it.

3What we use it for

To study your company and prepare a reply to your enquiry.
Get in touch through the channel you gave us, and draw up a commercial proposal if there is interest.
Understand how the site is used, in aggregate numbers, to improve it.
Meet legal obligations.

We do not use your data to send unsolicited advertising, we do not use it for automated decisions producing legal effects on you, and we do not sell, rent or transfer it to anyone.

4Legal basis

Processing rests on the Brazilian General Data Protection Law (Law 13.709/2018): on your consent, given when you tick the agreement box on the form; on pre-contractual interest, to handle your request before any contract; on legitimate interest, to understand use of the site from aggregate data; and on compliance with legal obligations, where the law requires records to be kept.

5Who we share it with

With no one, for commercial purposes. The data passes only through the services that make the form and the site work — sending the alert, the record spreadsheet, the CNPJ lookup, hosting, and audience and ad measurement — and each one sees only what it needs. Some of those services keep servers outside Brazil; the international transfer takes place on the basis of your consent and the contractual safeguards offered by each supplier.

6Cookies and measurement

The site uses three kinds of cookie. Essential cookies only store your choice about the other two. Audience measurement cookies (Google Analytics) tell us, in aggregate, how the site is used and where visits come from. Advertising cookies (Google Ads) tell us whether a visit came from one of our ads and turned into an enquiry, and Google may use them to show our ads to people who have already visited the site. The last two are loaded by Google Tag Manager.

None of this is loaded without your authorisation. On your first visit a notice appears with two options of equal weight, accept and refuse, and a cog to authorise only measurement or only advertising; until you choose, nothing is loaded. Without authorisation for measurement, Google Analytics stays switched off; without authorisation for advertising, Google Ads neither stores nor reads cookies in your browser. Refusing limits nothing on the site. Your choice is kept in your own browser and lasts twelve months.

Third-party ads on the blog. Blog pages show Google AdSense ads, chosen by Google, not by us. They count as advertising: they only appear if you authorise it, and without that authorisation the blog loads no ads at all. With it, Google and its partners use cookies to show ads based on your visits to this and other sites, to limit how often you see the same ad and to measure results. Visitors in the European Economic Area, the United Kingdom or Switzerland also see a consent message from Google itself. You can turn off personalisation in Google's ad settings and read how Google uses cookies in advertising.

Changed your mind? — the options open up and you decide again. You can also disable it in your browser settings or, for Google Analytics, through the opt-out add-on offered by Google itself.

The form also keeps a draft in your own browser, only while the tab is open, so you do not lose your answers if you reload the page by accident. It is not sent anywhere until you finish, and it disappears when you finish, close the tab or clear your browser data.

7How long we keep it

Form data stays with us for as long as the relationship lasts — and, if it becomes a contract, for the period tax law requires after it. You can ask for removal at any time. Browsing data is aggregated and retained according to the settings of the measurement tools.

8Your rights

The LGPD guarantees you, at any time and at no cost:

to know whether we process your data and obtain a copy of it;
to correct incomplete, inaccurate or out-of-date data;
to request anonymisation, blocking or deletion of the data;
to request portability to another supplier;
to withdraw consent — which stops processing from that point on;
to object to processing and to know who we share it with.

To exercise any of them, write to contato@arios.marketing. We reply within 15 days. If the answer does not satisfy you, you may contact the ANPD.

How an erasure actually works. What you sent us sits in more than one place — the alert we receive, the follow-up spreadsheet and our sales system. When your request arrives, we remove your record from all of them and confirm it in writing.

There is one residue we would rather declare than omit: our system's daily backups. We do not alter them, because a tampered backup stops serving the purpose it exists for — restoring the system after a failure. They are replaced on a rolling basis and your record disappears from them within 30 days. During that window the data is used for nothing: it exists only inside stored safety copies.

If you are already a client of ours, some of your data is retained by legal obligation — contracts, invoices and bookkeeping have deadlines set by law and not by us. In that case we tell you exactly what stays, for how long, and under which obligation.

9Security

The site runs over an encrypted connection (HTTPS). Access to the data is restricted to those who need it to serve you, and the credentials for the services live only on the server, outside the published code. No system is infallible: should an incident with relevant risk occur, we will notify you and the ANPD, as the law requires.

10Links to other sites

This site may contain links to third-party services. We are not responsible for the privacy practices of those platforms — each has its own policy, and it is worth reading.

11Changes

We may update this policy at any time. The date of the latest version is shown at the top. Material changes will be communicated to anyone who already has an enquiry on record with us.

12Contact

For questions about how your data is handled: contato@arios.marketing — or .