Privacy and Cookie Policy

1. Controller and scope

Fortis Aegis Advisory is responsible for decisions regarding the processing of personal data carried out through this website. This policy applies to institutional pages, service pages, downloadable materials and the contact form hosted at fortisaegis.com.br.

External links, such as GitHub and third-party networks, have their own privacy practices. We recommend reviewing those providers' policies when leaving our domain.

2. Data we may collect

Data you provide

When you use the contact form, we may receive your name, company, email address, telephone number, service of interest and message. We do not request passwords, technical credentials or sensitive data through the form.

Technical and browsing data

The server may record IP address, date and time, browser, operating system, page visited, referral page and security events. After your consent, analytics and marketing tools may also record online identifiers, interactions, conversions and campaign-related information.

3. Why we use data

• Respond to requests and take steps related to a potential engagement.
• Prepare proposals, explain services and maintain communications requested by you.
• Protect the website and prevent abuse, fraud, spam and security incidents.
• Measure audience, performance and usability when analytics consent is provided.
• Measure campaigns, attribute conversions and personalize advertising when marketing consent is provided.
• Comply with legal or regulatory obligations and exercise rights in administrative or judicial proceedings.

Consent-based analytics and marketing technologies remain disabled until the visitor makes a positive choice. Consent can be changed or withdrawn at any time.

4. Cookies and similar technologies

We use cookies and local storage to operate essential functions and remember preferences. When authorized, Google Analytics, Google Ads and Meta Pixel may be used for analytics and marketing.

Necessary cookies cannot be disabled in the panel because they support requested functions, security and the record of your choice. Analytics and marketing categories are optional.

5. Sharing and international transfers

Data may be processed by providers required for operation, such as HostGator/Titan hosting and email services, as well as Google and Meta when the respective categories are authorized. We may also share information when required by law or necessary to protect the rights of Fortis Aegis or third parties.

Some providers may process data outside Brazil. In such cases, we seek services with contractual, technical and organizational safeguards compatible with applicable law.

We do not sell contact lists or personal data.

6. Retention and security

We retain data for as long as needed to respond to a request, develop the business relationship, comply with legal obligations and exercise rights. Data is no longer retained once its purpose is fulfilled, unless there is a lawful reason for continued storage.

We adopt reasonable access controls, credential protection, HTTPS encryption, updates and measures to prevent unauthorized access, alteration, disclosure or destruction. No digital environment, however, is completely risk-free.

7. Your rights

Under the Brazilian General Data Protection Law (LGPD), data subjects may request, where applicable:

• Confirmation of processing and access to personal data.
• Correction of incomplete, inaccurate or outdated data.
• Anonymization, blocking or deletion of unnecessary or unlawfully processed data.
• Information about sharing and the consequences of refusing consent.
• Withdrawal of consent and deletion of data processed on that basis, subject to legal exceptions.
• Objection to processing and review of automated decisions, where applicable.

We may request additional information to confirm the requester's identity and protect data against unauthorized access.