Privacy Notice
How Verfend handles the personal data it collects through its website and project-brief form, under the LGPD and the GDPR.
1. Who we are (controller)
1.1. Provider legal name, trading as Verfend (Independent Security Operations) ("Verfend", "we", "us"), Recife, Pernambuco, Brazil, is the controller of the personal data described in this notice.
1.2. For any privacy question, or to reach our data-protection contact (encarregado / DPO), write to email. Our website is website.
2. What we collect, and why
2.1. Project brief. When you send a brief through our website, you give us: your name, work e-mail, website URL, the service you are interested in, your country / time zone, and the free-text details you choose to write. We use this only to read, understand and reply to your request, and to prepare a proposal if you ask for one.
2.2. Country and security data. When a page loads, your device's IP address is used on our own server to determine your country only, so we can show prices in the right currency (BRL, USD or EUR) and keep the site secure. We do not build profiles, score you, or track you across other websites.
2.3. Currency preference. The currency you pick is saved in your browser's localStorage so the site remembers it. It stays on your device.
3. Legal bases
3.1. To handle your brief and take steps before a contract: GDPR art. 6(1)(b) (steps taken at your request prior to entering a contract) and LGPD art. 7, item V (preliminary procedures related to a contract, at the request of the data subject).
3.2. For site security and currency display (geo-pricing): GDPR art. 6(1)(f) and LGPD art. 7, item IX — our legitimate interest in running a secure website and showing correct prices, balanced against your rights and freedoms.
3.3. We do not rely on consent for the activities above, and we do not use your data for marketing (see §7).
4. Who processes the data (processors)
4.1. Brevo (Sendinblue), an EU-based e-mail processor, delivers your brief to our mailbox as a single transactional e-mail. It processes the brief only to deliver it to us.
4.2. Hosting provider name hosts our website and the endpoint that receives the form submission.
4.3. MaxMind GeoLite2. The country lookup uses a database stored locally on our own server. No data is sent to MaxMind.
4.4. We do not sell or rent your data. We share it with others only where the law requires us to.
5. International transfers
5.1. Your data may be processed in Brazil (where we are based) and in the EU (our e-mail processor).
5.2. Where data crosses borders, we rely on an appropriate transfer safeguard: Standard Contractual Clauses / ANPD-approved international-transfer mechanism. A copy or summary is available on request.
6. How long we keep it
6.1. Briefs that do not lead to a contract: kept in our mailbox for 12 months, then deleted.
6.2. Clients: kept for the duration of the engagement, plus any period required by law (for example, tax and accounting obligations).
6.3. We delete or anonymise personal data once these periods end.
7. No marketing
We do not send newsletters or marketing messages. We use your e-mail address only to reply to the request you have sent us.
8. Cookies and localStorage
The site uses no analytics or tracking tools and sets no analytics or advertising cookies. The only item stored on your device is a functional currency preference, held in localStorage. You can clear it at any time through your browser settings.
9. Children
Our services are intended for organisations and are not directed at children. We do not knowingly collect the personal data of children.
10. Your rights
10.1. Subject to the LGPD and the GDPR, you may ask to access, correct, delete, port, or object to the processing of your personal data, and to withdraw consent where we rely on it.
10.2. To exercise any right, write to email. We respond within the period the law allows and may need to confirm your identity first.
10.3. You may also complain to a supervisory authority: in Brazil, the ANPD (Autoridade Nacional de Proteção de Dados); in the EU, your national data-protection authority.
11. Changes and date
We may update this notice from time to time; any material change will be dated here. This version was last updated on date.
Verfend · Independent Security Operations · email · website · Document 12 v1.0 · date