Privacy

The data controller of this website is BFLD Consultoria Empresarial Ltda., operating under the trade name Balanced Field and also uses the short form BFLD.

Trade name

BFLD Consultoria Empresarial Ltda.

Trade name

Balanced Field

CNPJ

28.671.175/0001-40

Address

Rua Senador Milton Campos, 35, Salas 1409-1412, Vila da Serra, Nova Lima/MG, CEP 34006-050

Privacy channel

contato@balancedfield.com

This policy covers navigation on the institutional website, contact initiated by the visitor, and the technical records necessary to provide and protect the service. Projects, contracts, customer portals, and employment relationships may have their own notices; the specific instrument prevails within its scope.

The website is not intended for the storage of client documents, sensitive personal data, credentials, trade secrets, or protected evidence. Do not send this information through the contact channel.

• Contact: name, organization, position, email, phone and content of the message when provided voluntarily.
• Navigation and security: IP address, date and time, URL, browser agent, technical identifiers, security events, and access records generated by the infrastructure.
• Preferences: language, accessibility, and consents, if such features are activated.
• Relationship: history of communications and necessary actions to respond to the request or prepare a contractual relationship.

The form composes the message in the browser and opens the email application chosen by the visitor. The website neither receives nor stores the content before the visitor themselves confirms sending it to their email provider. We do not use CRM, analytics, measurement cookies, or exclusively automated decisions regarding visitors.

Data can come directly from the data subject, their organization, previous professional interactions, legitimate public sources, or the technical infrastructure that delivers the website. When data are obtained from another source, BFLD must respect purpose, necessity, transparency, and the rights of the data subject.

We do not acquire lists of contacts for indiscriminate use and do not infer sensitive data from institutional navigation.

Reply and qualify contacts.

Preliminary procedures upon request of the data subject and legitimate interest, with reasonable expectation and safeguards.

Execute contracts and obligations

Contract execution, compliance with legal or regulatory obligations, and regular exercise of rights.

Operate and protect the website

Legitimate interest in security, fraud prevention, diagnosis, and continuity, limited to what is necessary.

Institutional communications

Consent when required or legitimate interest after purpose test, need, balancing and safeguards.

Consent will not be used to cover up unnecessary processing. When it is the applicable basis, it may be revoked by a free and facilitated procedure without affecting valid previous processing.

By selecting Prepare message, the browser composes an email addressed to contato@balancedfield.com and requests the opening of the visitor's email application. Sending occurs only when the visitor confirms it. From there, the message is processed by the providers chosen by the sender and BFLD.

The website has no form endpoint, own persistence, CRM, analytics, pixels, or marketing automation. If channels or suppliers change, this policy will be updated and applicable privacy controls will be implemented before the new processing.

The website does not install advertising or measurement cookies. Strictly necessary resources may be used for security, session, language, or operation requested by the visitor. Non-essential cookies will depend on clear information and, where applicable, granular prior consent that is withdrawable and revocable.

The application provider may keep access records under secrecy and in a controlled environment for the applicable legal period. In Brazil, the Marco Civil da Internet provides for the retention of access records to applications for six months for professional application providers with economic purposes.

Data may be shared only to the extent necessary with hosting providers, email, security, support, professional advice and other contracted operators, or with authorities when there is a legal obligation, valid order or need for the regular exercise of rights.

BFLD selects suppliers compatible with the purpose, limits instructions and access, requires confidentiality and security, and maintains records of recipient categories. We do not sell personal data and do not authorize incompatible use by processors.

Technology providers may process data outside Brazil. An international transfer can only occur through a mechanism admitted by the LGPD and ANPD regulations, such as an adequacy decision, contractual standard clauses, approved specific clauses, or other applicable legal grounds.

BFLD maintains control over supplier categories and applicable mechanisms. The data subject may request information regarding recipients and guarantees through the channel indicated in this policy.

• Contacts without hiring: up to 24 months after the last relevant interaction, unless opposed, demonstrable need, or different obligation.
• Communication by consent: until revocation or 24 months of inactivity, whichever occurs first.
• Contracts and rights defense: by the applicable legal, regulatory, contractual, and prescriptive deadlines.
• Access records: six months when Article 15 of the Marco Civil da Internet applies.
• Incidents: records for at least five years, in accordance with ANPD regulations.

If the purpose is closed and there is no basis for conservation, the data will be deleted or anonymized in a reasonably secure manner.

We adopt technical and administrative measures proportional to the risk to prevent unauthorized access, destruction, loss, alteration, communication, or improper processing. This includes limiting access, supplier management, updates, registration, backups when necessary, and incident response.

No system is infallible. Incidents capable of entailing risk or relevant damage shall be evaluated and reported to the ANPD and to the data subjects within regulatory timeframes and conditions. The current regulation establishes, as a rule, three business days from the controller's knowledge.

Under the LGPD, the data subject may request confirmation and access, correction, anonymization, blocking or deletion of unnecessary or irregular data, portability in accordance with regulations, information on sharing, revocation of consent, deletion of data processed with consent, objection and review of applicable hypotheses.

Submit the request to contato@balancedfield.com on the subject LGPD rights. We may request minimum data to verify identity and prevent fraud. Simplified confirmation or access will be provided immediately when possible; the full declaration shall comply with the legal deadline of up to 15 days. The service will be free, except in cases permitted by law.

The website is directed at professionals and organizations and does not intentionally collect data from children or adolescents. If we identify improper processing, we will take steps to interrupt it and delete the data, unless there are legal grounds for retention.

The website does not make automated decisions with legal or significant effects on the visitor. Material changes to this policy will be presented with a new version and date, without reducing rights retroactively.