Legal
Privacy Policy
Last updated: September 2026.
This Privacy Policy describes how BAASIK SERVICOS E TECNOLOGIA LTDA ("Baasic", "we") collects, uses, stores, and protects the personal data of visitors and business contacts of this website, in compliance with Brazilian Federal Law No. 13,709/2018 (General Data Protection Law — LGPD).
This English version is provided for convenience. In case of divergence, the Portuguese version prevails.
1. Data controller
Legal name: BAASIK SERVICOS E TECNOLOGIA LTDA
Company ID (CNPJ): 50.961.360/0001-28
Website: baasic.com.br
Contact e-mail: privacidade@baasic.com.br
2. Data Protection Officer (DPO)
The contact channel with our Data Protection Officer is the e-mail privacidade@baasic.com.br. We respond to requests within 15 business days.
3. What data we collect
3.1 Data you provide
When you fill out contact forms, request a demonstration, or download materials, we collect: full name, corporate e-mail, company, job title, and message.
3.2 Browsing data
We automatically collect technical access data through cookies and analytics tools (Google Analytics 4 and Google Tag Manager): anonymized IP address, browser type, operating system, pages visited, visit duration, and traffic source. This data is used in aggregate form for statistical purposes and to improve the website.
On the contact and case evaluation pages, HubSpot and Google reCAPTCHA may also receive technical data such as IP address, browser type, referring page, and interaction signals strictly to provide the form, prevent abuse, and record the request in the CRM.
3.3 Data we do not collect
We do not collect sensitive data (racial origin, health, biometrics, sexual orientation, religious or political beliefs), data from minors under 18, nor banking or financial data through this website.
4. Purposes and legal bases
| Purpose | Legal basis (LGPD, art. 7) |
|---|---|
| Responding to contacts and business inquiries | Legitimate interest (item IX) |
| Scheduling and conducting product demonstrations | Contract execution or pre-contractual proceedings (item V) |
| Sending requested materials (guides, content) | Consent (item I) |
| Sending marketing communications | Consent (item I) |
| Complying with legal and regulatory obligations | Compliance with legal obligation (item II) |
| Improving website performance and experience | Legitimate interest (item IX) |
5. Cookies
This website uses cookies for technical operation and performance analysis. You can manage your cookie preferences at any time in your browser settings.
Essential cookies: necessary for the website to function. They cannot be disabled. They include HubSpot form and Google reCAPTCHA resources used for security and spam prevention.
Analytics cookies: used by Google Analytics 4 to measure website usage in an aggregated and anonymized way. They can be refused without impacting navigation.
We do not use behavioral advertising or cross-site tracking cookies.
6. Data sharing
We do not sell or transfer your personal data to third parties for commercial purposes. Data may be shared in the following situations:
Technology providers: HubSpot, Inc. (forms and CRM), Google LLC (Analytics, Tag Manager, and reCAPTCHA), and hosting services — all operating as data processors under contract and with adequacy to the LGPD or equivalent protection mechanisms.
Legal obligation: when required by law, court order, or competent regulatory authority.
7. International data transfer
Some of the tools we use, including HubSpot and Google services, process data on servers located outside Brazil. In these cases, we adopt the applicable safeguards provided for by the LGPD, including contractual clauses and adequacy assessment of the destination country.
8. Data retention
| Data type | Retention period |
|---|---|
| Contact form data | 5 years after the last contact |
| Lead and business opportunity data | As long as an active business relationship exists, or until a deletion request is made |
| Analytics data (aggregated) | 14 months, per GA4's default configuration |
| Data required by law | For the applicable legal period |
After the retention period expires, data is deleted or anonymized.
9. Your rights as a data subject
Under the LGPD (art. 18), you have the right to:
- Confirmation of the existence of processing of your data
- Access to the data we process about you
- Correction of incomplete, inaccurate, or outdated data
- Anonymization, blocking, or deletion of unnecessary data or data processed in violation of the law
- Portability of your data to another provider
- Deletion of data processed based on consent
- Information about sharing with third parties
- Withdrawal of consent at any time, without prejudice to processing carried out previously
To exercise any right, send a request to privacidade@baasic.com.br. We will respond within 15 business days.
10. Data security
We adopt appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or improper disclosure, including access control, encryption in transit (HTTPS), and periodic review of security practices.
11. Changes to this policy
This policy may be updated periodically. The date of the last revision is indicated at the top of the document. In the event of material changes, we will announce them through the website.
12. Contact and data subject service channel
For questions, requests, or exercising your rights:
E-mail: privacidade@baasic.com.br
Response time: up to 15 business days