Privacy policy

The controller of the personal data processed on this website is Academia Brasileira de Neurociência e Arquitetura Ltda., trading as NEUROARQ® Academy, registered under CNPJ (Brazilian company ID) No. 42.835.606/0001-97.

Address

Rua Apeninos, 400, Conj. 905, Aclimação, São Paulo/SP, CEP 01533-000

Email

contato@neuro.arq.br

The data protection officer is the communication channel between NEUROARQ®, data subjects and Brazil's National Data Protection Authority (LGPD, Art. 41).

Name

Academia Brasileira de Neurociência e Arquitetura Ltda.

Email

contato@neuro.arq.br

The personal data you provide comes in through the forms, and each form asks only for what its purpose requires. While you browse, the website also records technical data, such as your IP address, for security and protection against bots.

What comes with each submission

• the page where the form was filled in, without the address parameters;
• the campaign parameters of the visit (utm_source, utm_medium, utm_campaign, utm_term, utm_content, gclid, fbclid), when present. They stay in the browser's session storage while you browse and are only sent together with a form;
• the date and time you accepted this policy.

To protect the forms against bots, each submission goes through an automatic check by Cloudflare (Turnstile), which receives technical data from the browser, such as the IP address.

Your newsletter subscription only takes effect after you confirm it through the link sent to your email.

The legal basis for each form appears in the list above. We rely on consent (LGPD, Art. 7, I) when processing depends on your choice, such as receiving the newsletter or a material. You can withdraw it at any time, and withdrawal does not affect what was done before it. When the basis is preliminary procedures for a contract requested by you (Art. 7, V), as in a request for a proposal, accepting the form records that you have read this policy. Outside the forms, bot protection, website security and necessary cookies rely on the legitimate interest of NEUROARQ® (Art. 7, IX), and analytics and marketing cookies depend on your consent. We may also process data to comply with a legal or regulatory obligation (Art. 7, II) and to exercise rights in judicial, administrative or arbitration proceedings (Art. 7, VI).

The providers below process data on behalf of NEUROARQ® (as processors), each only for the stated purpose.

• Resend — Sending the website's emails, such as the newsletter subscription confirmation.
• KingHost e Google — Team mailboxes, which receive the notice of each form submission with the data sent.
• Cloudflare — Bot verification for the forms (Turnstile).
• Vercel e Render — Hosting of the website and of the database where submissions are stored.
• Google — Audience measurement, only with your consent for analytics cookies.

NEUROARQ® does not sell personal data. Apart from the providers above, data is only shared when required by law or by order of a competent authority. Two services linked to the website process data on their own account, as controllers, and have their own privacy policies: Eduzz, where course payments are made, and Spotify, when you load the podcast player.

Some of the providers listed above process or store data outside Brazil, mainly in the United States. This includes hosting, email delivery, bot verification and audience measurement services. These transfers follow Art. 33 of the LGPD and the regulations of the ANPD (Brazil's National Data Protection Authority), with the contractual data protection safeguards offered by these providers.

Data sent through the forms is kept for up to 24 months without any interaction from you. After that period, it is anonymized: name, email, phone, company and answers are deleted, and only an unidentified record remains (the date, the form, the originating page and the originating campaign), used for statistics.

Applications to the certified directory keep the CPF and the completion certificate only until the team decides: on approval both are deleted; on rejection the whole application is deleted, photo and certificate included. An application with no decision is deleted after 90 days. While a card is published, the email and the card data are kept for as long as it stays in the directory, and leave with it.

For the newsletter, the email is kept while the subscription is active. If you unsubscribe, it remains recorded as unsubscribed, so that you don't receive mailings again by mistake, until you request deletion. The log of automatic emails the website sends keeps only the type, date and result of each sending, without the message content. Each form submission and each newsletter subscription, confirmation or cancellation creates an access record with the IP address, date, time and action, with no link to your name or email. It is kept for 6 months, as required by the Brazilian Internet Civil Framework (Law No. 12,965/2014, Art. 15), and then deleted. Because it is a legal obligation, this record is not removed by a deletion request before that period ends. Data the law requires us to keep, or that is needed for defense in legal proceedings, is kept for the corresponding period.

Under the LGPD (Art. 18), you may ask NEUROARQ®, at any time, for:

• confirmation that we process your data;
• access to your data;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law;
• portability of the data to another provider;
• deletion of data processed based on your consent;
• information about who we share your data with;
• information about the possibility of not giving consent and what happens if you don't;
• revocation of consent.

To exercise any of these rights, write to contato@neuro.arq.br.

We reply by the same email, within the deadlines of Art. 19 of the LGPD. Before responding, we may ask for information confirming that the request is yours, so that we don't hand data over to someone else. Requests for correction or deletion are also passed on to the providers that received the data (Art. 18, § 6). On deletion, data sent through the forms is anonymized as described in “How long we keep it”, and the newsletter subscription is deleted, including for those who had already unsubscribed. If any data must be kept due to a legal obligation, we explain which data and why.

Every newsletter email includes a link to unsubscribe in one click, without logging in.

You can also file a complaint with Brazil's National Data Protection Authority (ANPD).

The website uses cookies in three categories. Only the necessary ones work without your choice; the other two depend on your consent, requested on your first visit.

Necessary

Make the website work: they store the language you chose and your decision about cookies. They don't depend on consent.

Analytics

Measure, in aggregate, how the website is used (pages visited, where visits come from), through Google's measurement service. They only load after you accept.

Marketing

Allow content from other services to load inside the pages, such as the Spotify podcast player. These services set their own cookies and process data according to their own policies, which may include personalizing ads. Until you accept, a notice with the option to load the content appears in its place. They only load after you accept.

You can change your choice at any time through the website's cookie preferences. Withdrawing consent does not affect what was done before it. You can also delete or block cookies in your browser settings; if you block the necessary ones, the website stops remembering your choices and asks again.

We protect data with an encrypted connection (HTTPS), access to the admin panel and database restricted to authorized people with authentication, and limits against bots and excessive submissions on the forms. No system is completely immune to failures. If a security incident occurs that may pose a relevant risk or harm to you, NEUROARQ® notifies the affected data subjects and the ANPD, as required by the LGPD (Art. 48).

The NEUROARQ® website and courses are aimed at adults, and the forms were not designed for children and adolescents. We do not knowingly collect data from people under 18. If you are a parent or guardian and notice that a child or adolescent has sent data here, write to the contact email: the data will be deleted.

Each version of this policy has a number and a date, shown at the top of the page. When the version changes, the website asks for your cookie consent again.

If a change alters the purpose of processing carried out with your consent, we notify you beforehand, and you may withdraw your consent if you disagree (LGPD, Art. 9, § 2). The version in force is always the one published on this page.

Questions about this policy or your data: contato@neuro.arq.br.