Privacy Policy

How MBA Armazéns handles personal data of visitors to mbaarmazens.com.br and of people who contact our sales team through it. Last updated: October 8, 2026.

1. Who we are

The data controller is MBA Armazéns (Miguel Buffara Armazéns), Av. Cel. Phidias Távora, 500, Pavuna, Rio de Janeiro, RJ, 21535-510, Brazil. Privacy contact: contato@mbaarmazens.com.br.

2. What we collect

• Data you type into the form: name, company, WhatsApp or phone (optional), city of interest, approximate area, type of operation, timeframe and message.
• Technical data about the submission: language and page, browser (user agent), approximate country and city reported by our delivery network, and a daily hash derived from your IP address (the IP itself cannot be recovered from it). We use this to prevent abuse and automated submissions.
• Bot verification: the form uses Cloudflare Turnstile, which evaluates browser signals to tell people from bots and may set a short-lived technical cookie.
• Audience measurement: we use Cloudflare Web Analytics, which counts visits and page views without cookies and without identifying individuals.

The site uses no advertising cookies. There is no account, login or cross-site tracking.

3. Why we use it

• To answer your enquiry and conduct lease negotiations (pre-contractual steps, Brazilian LGPD art. 7, V).
• To organise sales follow-up in our internal system, with a contact history.
• To protect the site against fraud and abuse (legitimate interest, LGPD art. 7, IX).

4. Who we share it with

• Cloudflare, Inc.: hosting, bot verification and the database where leads are stored. Data may be processed on servers outside Brazil under Cloudflare's contractual safeguards.
• WhatsApp (Meta): if you choose to send your message via WhatsApp, the conversation is governed by WhatsApp's privacy terms.
• Google Fonts and OpenFreeMap: when fonts and the map load, your browser sends its IP address to those services to fetch the files.

We do not sell personal data or share it for third-party marketing.

5. How long we keep it

Leads that do not become a contract are kept for up to 24 months after the last contact, then deleted or anonymised. Data linked to a lease follows the applicable legal and contractual retention periods.

6. Your rights

You may request confirmation of processing, access, correction, anonymisation, portability, deletion and information about sharing, and withdraw consent where that is the legal basis (LGPD art. 18). Write to contato@mbaarmazens.com.br. We reply within 15 days.

7. Security

Data travels encrypted (HTTPS) and is stored in a system restricted to MBA staff behind corporate authentication.

8. Changes

This policy may be updated. The date at the top indicates the current version.