Legal
Privacy notice
Last updated 25 April 2026. This notice explains what personal data Nodo Cyber Defense handles and why.
Nodo Cyber Defense (“Nodo”, “we”, “us”) is the controller of the personal data described here. We process data in line with the Lei Geral de Proteção de Dados (Law 13.709/2018) and, where it applies to visitors in the European Union, the GDPR (Regulation 2016/679) and the ePrivacy Directive.
Who we are
Nodo Cyber Defense, registered under CNPJ 41.628.395/0001-72, with offices at Av. Brigadeiro Faria Lima, 3477, 14º andar, Itaim Bibi, São Paulo — SP, 04538-133, Brazil. For any question about this notice, write to [email protected].
What we collect
- Contact data you send us through the form or by email: your name, company, email address and the message you write.
- Usage data gathered through cookies and similar tools when you allow them: pages viewed, approximate region, device and browser type.
- Engagement data shared during a contracted project, handled under the separate confidentiality terms of that contract.
Why we use it
We use contact data to reply to your enquiry and to prepare a proposal. We use usage data, only with your consent, to understand how the site performs and to improve it. We do not sell personal data, and we do not use it for purposes you would not reasonably expect.
Legal basis
Under the LGPD we rely on your consent for analytics and marketing cookies, on the performance of pre-contractual steps when you ask us for a proposal, and on our legitimate interest in running and securing this site. Where the GDPR applies, the equivalent bases in Article 6 apply.
How long we keep it
Enquiry data is kept for up to twenty-four months unless our relationship continues, in which case it is held for the life of the contract and the period required by law afterwards. Cookie data follows the retention set out in our cookie notice.
Who can see it
Your data is seen only by the Nodo team handling your request and by the service providers who host this site and our email. Those providers act on our instructions under written agreements. We do not transfer data outside Brazil except to providers offering an adequate level of protection.
Your rights
Under the LGPD and the GDPR you may request access to your data, correction, deletion, portability, and information about how it is shared. You may also withdraw consent at any time. To exercise any of these, write to [email protected]; we respond within the timeframes set by law. You may also lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD).
Security
Security is our craft, and we apply it to our own systems. We use encryption in transit, access controls and monitoring to protect the data you entrust to us. No system is without risk, and we will notify you and the ANPD of any incident that requires it.
Changes
We may update this notice as our practices or the law change. The date at the top reflects the most recent revision.