1. Who the controller is
Origenow, registered under CNPJ 55.325.800/0001-74 and located at R. Flórida, 1703, Suite 62, Cidade Monções, São Paulo/SP, ZIP 04565-909, Brazil, is the controller of the personal data processed on origenow.com.br.
2. What data we collect
- Contact and assessment forms: name, email, company, WhatsApp number, the channels where you sell and the message you write. Only name and email are required.
- Visit source: campaign parameters (such as utm_source, utm_campaign and gclid), the page where you arrived, the site you came from and the page where you submitted the form. This data travels with your request so we know which channel brought you to us.
- Browsing data: IP address, browser and device type, pages visited and interactions with the site, collected by the tools described in section 4.
We do not ask for sensitive data and do not knowingly collect data from children or adolescents.
3. How we use it and on what legal basis
- To respond to your request, prepare the assessment you asked for and handle a possible commercial proposal, based on pre-contractual steps taken at your request (LGPD, art. 7, V).
- To measure the performance of the site and our campaigns, and to show Origenow ads to people who have visited the site, based on our legitimate interest (art. 7, IX).
- To protect the site and forms against spam, fraud and automated submissions, also based on legitimate interest (art. 7, IX).
We do not sell personal data or use it for purposes other than those described here.
4. Cookies and similar technologies
- Google Tag Manager, Google Analytics and Google Ads (Google LLC): measure visits and actions such as form submissions and clicks to chat on WhatsApp, and enable remarketing ads. Traffic identified as bots is not sent to these tools.
- Google Ads enhanced conversions: when you submit a form, the email and phone number you provide are turned into an encrypted code (hash) in your own browser and sent to Google Ads only to confirm that the contact came from an ad. Google does not receive this data in readable form.
- Storage in your browser: the visit source is kept in your own browser for up to 90 days, and the landing page only for the session. This data only leaves your device if you submit a form.
- Form protection: when you start filling out a form, the site issues a temporary code confirming that the submission came from the page. It does not identify you and expires within 2 hours.
You can block or delete cookies in your browser settings and turn off ad personalization in your Google Account settings. The site keeps working without them.
5. Who we share it with
We only share data with providers that help us run the site and serve you, each limited to its role:
- Slack and Zoho: receive form data to notify our sales team.
- Railway: hosts the site and the server's technical logs.
- Google: measurement and advertising, as described in section 4, and the site's typefaces (Google Fonts).
- unpkg: content delivery network that serves the code libraries used to display the pages.
- WhatsApp (Meta): if you click to chat with our assistant, the conversation is also subject to WhatsApp's terms and policy.
We may also share data when required by law, regulation or an order from a competent authority.
6. International transfers
Some of these providers process data outside Brazil, mainly in the United States. These transfers follow the conditions of art. 33 of the LGPD, with providers that adopt contractual safeguards and security measures consistent with the law.
7. How long we keep it
We keep contact data for as long as needed to handle your request and maintain the business relationship. When it is no longer needed, it is deleted or anonymized, unless the law requires us to keep it longer. Measurement data follows the retention periods set in Google's tools.
8. How we protect it
We use encrypted connections (HTTPS), safeguards against automated submissions and restricted access to data by the team that handles requests. If a security incident may create relevant risk or harm, we will notify the affected data subjects and Brazil's National Data Protection Authority (ANPD), as the law requires.
9. Your rights
Under the LGPD, you may request at any time:
- confirmation that we process your data and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
- portability of your data to another provider;
- information about who we share your data with;
- objection to processing based on legitimate interest.
You may also file a complaint with the ANPD.
10. Contact
To exercise your rights or ask questions about this policy, write to our data protection officer's channel. We respond within 15 days.
contato@origenow.com.br
11. Changes to this policy
We may update this policy to reflect changes to the site, our providers or the law. The version in force is always the one published on this page, with the date of the last update.