Privacy Policy

We collect different categories of data depending on the context of the interaction:

• Via the website contact form: name, email, phone number and message. Legal basis: consent and contract performance (LGPD Art. 7, I and V)
• Via analytics cookies (only with consent): pages visited, browsing time, device and browser type, traffic source. Data is always anonymized (Art. 7, I)
• Via security logs (collected automatically): IP address and browser user agent. Collected to protect against unauthorized access, intrusion attempts and system abuse. Legal basis: legitimate interest (Art. 7, IX). Data is retained for 30 days and is not used for marketing or user-tracking purposes.
• Project data (clients): full name, tax ID (CPF/CNPJ), contact details and briefing materials provided during the hiring process. Legal basis: contract performance (Art. 7, V)
• We do not collect sensitive data (LGPD Art. 11) or data from children and teenagers. Our services are intended exclusively for individuals over 18 years of age.

Your data is processed for specific purposes, always supported by a legal basis under the LGPD:

• Responding to requests and quotes submitted through the contact form. Basis: consent (Art. 7, I)
• Providing the design and development services hired. Basis: contract performance (Art. 7, V)
• Protecting system integrity against intrusion attempts, brute force and abuse: security logs (IP and User-Agent) are used exclusively to detect and block malicious access. Basis: legitimate interest (Art. 7, IX)
• Sending newsletters and informational content. Basis: explicit and specific consent (Art. 7, I); you can unsubscribe at any time
• Analyzing browsing behavior to improve the website. Basis: consent (Art. 7, I); only after acceptance of analytics cookies
• Complying with legal and regulatory obligations. Basis: compliance with a legal obligation (Art. 7, II)

ALB Seven does not sell or trade your personal information. Sharing only occurs in the following situations: • Infrastructure and hosting providers: servers contracted to keep the website and database running, bound by confidentiality agreements. • Google LLC (USA): when you accept analytics cookies, anonymized browsing data is processed by Google Analytics 4 and Google Tag Manager, with IP anonymization enabled. This data is processed under the EU Standard Contractual Clauses adopted by Google. You can refuse this sharing at any time. • Public authorities: when required by law, court order or applicable regulation. • Third-party service providers: only under confidentiality agreements and with strictly necessary access. We do not carry out any other international data transfers beyond the one mentioned above.

Technical and organizational measures adopted: • SSL/TLS encryption on all data transmissions • Passwords stored with secure hashing (bcrypt); never in plain text • Continuous monitoring of access and intrusion attempts • Regular backups in a secure environment Data retention periods: • Contact form data: 2 years or until the request is fully resolved • Active client (project) data: for the duration of the contract plus 5 years (civil statute of limitations) • Analytics logs: 14 months (Google Analytics 4 default) • Security logs (IP, User-Agent, unauthorized access attempts, blocks): 30 days, automatically deleted after that period for data minimization purposes • Known device records (pseudonymized hash, no plain-text IP): 90 days, automatically deleted In the event of a security incident with potential impact on data subjects, we will notify the ANPD and affected individuals within the legal timeframe.

Types of cookies used: • Site preferences (always active, exempt from consent, LGPD Art. 11, II, a): store your cookie choice in the browser via localStorage. They are not sent to third-party servers and do not collect identifiable personal data. • Analytics cookies (only with your explicit consent): Google Analytics 4 (_ga, _gid) and Google Tag Manager collect browsing data in an anonymized form. The IP address is masked before any storage (anonymize_ip enabled). No identifiable data is associated with the metrics. How to manage: The first time you visit the site, we display a consent banner. You can accept or decline analytics cookies at any time, including through the management widget on this page (below). Declining immediately removes any analytics cookies already set. You can also manage cookies directly in your browser.

In accordance with Law No. 13,709/2018, you have the following rights, which can be exercised at any time upon request:

• Confirmation of whether your personal data is being processed
• Access to the data we hold about you
• Correction of incomplete, inaccurate or outdated data
• Anonymization, blocking or deletion of unnecessary data or data processed in non-compliance with the LGPD
• Portability of data to another service or product provider
• Deletion of data processed based on consent, except where legally required otherwise
• Information about which public and private entities your data has been shared with
• Information about the possibility of not giving consent and the consequences of refusal
• Withdrawal of consent at any time, free of charge and through an easy process
• Filing a complaint with the National Data Protection Authority (ANPD) in case of non-compliance with this policy

To exercise your rights or clarify questions about this policy, please contact our data protection team: 📧 Email: contact.albseven@gmail.com 📞 Phone: +55 (31) 98869-3159 📍 Address: Belo Horizonte, MG, Brazil We will respond to LGPD-related requests within a maximum of 15 business days from receipt. Requests requiring a more in-depth review may have an extended timeframe, with prior notice to the data subject. If you are not satisfied with our response, you may contact the ANPD (www.gov.br/anpd).

This Privacy Policy may be updated to reflect changes in our practices, the services offered or applicable legislation. Significant changes will be communicated at least 15 days in advance through a prominent notice on the site or by email, when applicable. Continued use of the site after the changes take effect implies awareness of the new conditions, without prejudice to the right to withdraw consent. Last updated: May 2026 Version: 1.2