Privacy Policy
This policy explains which personal data INNPORT's website collects, why it collects them, who they are shared with, and what you can require of us in return. It applies to innport.com.br and to every page under that address.
The processing described here follows Brazil's General Data Protection Law (LGPD, Law 13.709/2018), the Consumer Protection Code (Law 8.078/1990) and the Internet Civil Framework (Law 12.965/2014).
INNPORT is the controller of these data: it decides what is collected and for what purpose.
1. What we collect, and why
1.1. Data you give us
There are two places on this site where you type personal data, and they are independent of each other: the contact form, which appears on the home page and at the end of every product page, and "Stay in the loop" in the footer, where you ask to receive news.
The contact form asks for:
| Data | Why |
|---|---|
| Name | To know who we are talking to |
| Company or institution, if any | To understand the context: hospital, clinic, university, distributor |
| To reply | |
| Mobile | To call back or reach you on WhatsApp, which is how most conversations in this field actually happen |
| Solution of interest | To route the request to whoever knows that line |
| Message | What you want to know |
Purpose: to answer your commercial enquiry and to carry the conversation forward, if there is one. Nothing beyond that. We do not use these data for advertising, we do not enrich them with other databases, and we do not sell them.
Legal basis: your consent, given by ticking the acceptance box and submitting the form (LGPD Art. 7, I). While a negotiation is under way, the processing is also supported by preliminary contractual procedures (Art. 7, V).
You can also write to us directly by email, phone or WhatsApp. The same purposes apply, and the data are whatever you choose to send.
"Stay in the loop" asks only for your email. Along with it we keep the date and time of your consent, the page you were on and the exact consent text that appeared on your screen.
Purpose: to send INNPORT news and offers. Nothing beyond that: this list is not used to answer quotes, it is not cross-referenced with the contact form list, and it is not passed to anyone.
Legal basis: your consent, specific to this purpose (Art. 7, I). It is separate from the contact form's acceptance, deliberately: whoever asks for a quote does not join this list, and whoever joins this list ticked a box that talks about nothing else. To leave, reply to any email we send, or write to [email protected].
1.2. Data collected automatically
Audience measurement (Google Analytics 4), only if you accept. Before you accept in the cookie banner, no Google script is loaded and no request leaves this site for Google. If you accept, we begin collecting, in pseudonymised form: pages visited, time on each, where the visit came from (search, link, direct), device and browser type, and approximate location derived from the IP address: city level, never a street address. Purpose: to understand which products draw interest and to improve the site. Legal basis: your consent (Art. 7, I).
Bot protection on the form (Cloudflare Turnstile). Wherever there is a form, a Cloudflare verifier assesses whether the submission comes from a person or from an automated program. To do so it processes the IP address and technical characteristics of the browser. Purpose: to keep the contact channel from being rendered useless by automated submissions. Legal basis: legitimate interest in the security and operation of the service (Art. 7, IX). It sets no tracking cookie, does not follow you across sites and is not used for any other purpose, which is why it works regardless of your choice in the cookie banner. We do not store your IP address: it is sent to Cloudflare for the check and discarded.
Server access logs. Like every web server, ours records IP address, date and time, the page requested and the browser used. Purpose: to operate the site, diagnose faults and investigate abuse. Legal basis: compliance with a legal obligation (Art. 15 of the Internet Civil Framework) and legitimate interest in security.
We make no automated decisions about you, and we build no behavioural profile.
2. Cookies and similar technologies
Before you accept, this site sets no measurement cookie at all. This is not a case of loading the tool with tracking switched off: the tool is simply not loaded.
| What | When | Why | How long |
|---|---|---|---|
| Record of your banner choice | Whenever you decide | So we do not ask again on every page | Stays in your browser until you clear it or change your mind |
_ga and _ga_<identifier> (Google Analytics) | Only after acceptance | To tell visits and sessions apart, pseudonymously | Up to 2 years |
Your choice is kept in your browser's local storage, not in a cookie. The difference is practical: a cookie travels with every request to the server, including requests for images; local storage never leaves your device. The browser is what needs the decision, in order to know whether to load measurement. No server of ours needs it.
3. Consent, and how to change your mind
We ask for consent at three separate moments, and they are separate decisions: the cookie banner, about audience measurement; the acceptance box on the form, about sending your contact details; and the "Stay in the loop" box, about receiving news and offers. Accepting one is not accepting the others, and none of them comes pre-ticked.
Refusing costs no more than accepting: the two banner buttons have the same size, the same colour and the same weight. Refusing limits nothing on the site: every page works the same.
To revisit your cookie decision at any time, use the "Cookie preferences" link in the footer of any page. Withdrawal takes effect from the moment you make it, and does not undo what was lawfully collected before then (Art. 8, §5 and §6).
To withdraw consent for data sent through the form, write to [email protected]. See section 8.
To leave the news list, reply to any email we send asking to be removed, or write to the same address. Leaving takes effect from the moment you ask, and needs no justification.
4. Who your data are shared with
We do not sell, rent or trade your personal data. They are shared only with the service providers the site needs in order to work, acting as processors, meaning they handle the data on INNPORT's behalf and instructions, and only for the purposes in this policy:
| Who | What they receive | Why |
|---|---|---|
| Resend | Name, company, email, mobile, solution of interest and message; and the email of whoever subscribes to news | To deliver the form's email to INNPORT's commercial inbox, and to notify it of each new subscription |
| Cloudflare | IP address and technical browser signals | To verify the form submission is not automated; to deliver the site |
| Pseudonymised browsing data | Audience measurement, only if you accept |
Beyond that, your data may be shared where required by law, by a competent authority's request, or by court order. Then only what is strictly required.
5. International transfer
The three providers above are companies based in the United States, and the processing they perform takes place on servers outside Brazil. This constitutes an international transfer of data (LGPD Art. 33), supported by:
- your specific and highlighted consent, in the case of audience measurement, which you may refuse with no disadvantage; and
- the necessity of carrying out what you asked for: there is no way to deliver your enquiry to INNPORT without an email delivery service, nor to protect the form without the verifier.
All three operate under contractual data protection clauses and are the standard tools of the market for these functions. If you would rather have no data processed outside Brazil, write or call directly: the channels in section 11 pass through none of them.
6. How long we keep them
| Data | Period |
|---|---|
| Contact requests (form) | Up to 5 years from our last contact, the period in Art. 27 of the Consumer Protection Code. After that, deleted or anonymised |
| News subscription | For as long as you want to receive. When you ask to leave, the email comes off the list; all that stays is the record that the removal happened, so nobody adds it back by mistake |
| Audience measurement | Up to 14 months, the retention period configured in the tool |
| Server access logs | 6 months, the period in Art. 15 of the Internet Civil Framework |
| Your cookie choice | Until you clear your browser or change your mind |
Once these periods elapse the data are deleted or anonymised, save for the cases in LGPD Art. 16: compliance with a legal or regulatory obligation, and the exercise of rights in judicial or administrative proceedings.
7. Your rights
LGPD Art. 18 guarantees you, free of charge and at any time:
- Confirmation that we process your data, and access to them;
- Correction of incomplete, inaccurate or outdated data;
- Anonymisation, blocking or deletion of data that are unnecessary, excessive or processed unlawfully;
- Portability to another provider, upon express request;
- Deletion of data processed on the basis of your consent;
- Information about who we share your data with;
- Information about the option not to consent, and about what follows if you do not;
- Withdrawal of consent, at any time;
- Objection to processing based on legitimate interest, where the law has not been complied with.
8. How to exercise your rights
Write to [email protected] saying what you want. We answer within 15 days.
To protect you, we may ask for proof of identity before handing over or deleting data. It would make no sense to hand your data to someone who merely claims to be you. If we ask, we will explain why.
You may also file a complaint with Brazil's National Data Protection Authority (ANPD).
9. How we protect your data
The site is served exclusively over an encrypted connection (HTTPS). Access to contact requests is restricted to the people at INNPORT who need to answer them. The providers in section 4 maintain their own security controls, and are chosen partly for that reason.
No system is free of risk, and it would be dishonest to promise otherwise. In the event of a security incident that may cause relevant risk or harm, we will notify you and the ANPD, as required by LGPD Art. 48.
10. Changes to this policy
This version is dated 28 September 2026, and what changed from the 9 September 2026 one is the news list in the footer, which did not exist before. Before both there was the August 2021 version, which described a different website.
We may change it when the site changes or when the law changes. The date above always indicates the version in force. If a change introduces a new purpose that requires your consent, we will ask for consent again, because the record of your current choice stops being valid for a list of purposes different from the one you accepted.
11. Data Protection Officer and contact
For anything in this policy (questions, exercising your rights, or complaints), contact INNPORT's Data Protection Officer:
- Email: [email protected]
- Phone: +55 11 2609-7300
- Address: Rua Bela Cintra 904, Conj. 102, Consolação, São Paulo, SP, Brazil