Transparency and data protection

Privacy and Cookie Policy

Last updated: November 5, 2026.

1. Purpose and scope

This policy explains how Escola de CAIO processes the personal data of visitors and people who contact us through the website escoladecaio.com.br. It applies to browsing, to the initial conversation form and to the measurement and advertising technologies that may be enabled according to your choice.

2. Data controller

The controller is ESCOLA DE CAIO LTDA, CNPJ 57.348.910/0001-87, located at Av. Brig. Faria Lima, 1811, sala 1119, São Paulo/SP.

Privacy requests can be made through the contact page, starting the open-text field with “LGPD Request” (the LGPD is Brazil's General Data Protection Law, Law No. 13,709/2018), or by mail to the address above. Escola de CAIO may request only the information strictly necessary to confirm the requester's identity.

3. What data we process

Source	Data	Purpose
Conversation form	Name, email, phone, job title, company, website, company size, revenue range, context, desired results, urgency and role in the decision.	Understand the request, carry out sales screening, prepare the contact and conduct preliminary procedures toward a possible contract.
Community waitlist	Participant type (individual or company), name, email, WhatsApp and consent; for companies, the company name and ranges of employees and participants.	Register interest in the community and get in touch by email and WhatsApp about next steps.
Browsing and campaigns	Pages visited, on-site events, traffic source, UTMs, click identifiers, approximate IP address, browser, device and date/time.	Operate and protect the site, understand its performance and, when authorized, measure campaigns.
Privacy preferences	Choices about analytics and advertising cookies.	Record and respect your decision for up to 180 days, allowing changes at any time.

We do not request sensitive personal data or confidential information about people, clients or processes. Please avoid including it in the form's open-text fields.

4. Legal bases and uses

Processing is carried out according to its purpose and context, in particular on the following legal bases:

preliminary procedures related to a possible contract, when you request contact;
consent, for analytics cookies, advertising, campaign identifiers and contact, where applicable;
legitimate interest, following an assessment of necessity and impact, for security, abuse prevention and essential service improvement;
compliance with legal or regulatory obligations and the regular exercise of rights.

Declining optional cookies does not prevent browsing or submitting the form. Consent to be contacted through the form is independent of your choice regarding Analytics and advertising.

5. Who the data may be shared with

Escola de CAIO uses, or may use, service providers strictly related to the stated purposes:

Cloudflare, for hosting, delivery, security and abuse protection;
Google Workspace, to record contacts in spreadsheets and send communications related to the requested service;
Brevo, to record contacts, requests and community waitlist sign-ups;
Google Tag Manager and Google Analytics 4, to manage tags and produce metrics, only in accordance with the applicable preference;
Meta Platforms, through the Meta Pixel and the Conversions API, for campaign measurement, only with advertising consent;
communication, automation and support providers that are necessary for the requested service.

These providers process data in accordance with their contractual roles and policies. Escola de CAIO does not sell personal data. Information may also be shared when required by law or by a competent authority, or to protect rights in administrative or judicial proceedings.

6. Cookies and similar technologies

Cookies are small files stored in the browser. The site keeps optional cookies disabled by default and offers equivalent controls to accept, reject or configure categories. Google Tag Manager acts as a manager: it is only loaded when at least one authorized optional category needs to run.

Category	Examples	Purpose and duration
Necessary	`consent_lgpd`, `consent_analytics`, `consent_marketing` and Cloudflare security features.	Record choices, protect and operate the site. Preferences last up to 180 days; technical cookies may last only for the session or for the period set by the service.
Analytics	`_ga` and `_ga_*`, associated with Google Analytics 4.	Distinguish visits and generate usage statistics. The GA4 default can be up to 2 years, subject to the property configuration and browser limits.
Advertising	`_fbp`, `_fbc` and click identifiers, when used by the Meta Pixel and campaigns.	Associate visits with campaigns and measure conversions. The `_fbp` cookie may remain for up to 90 days; other identifiers vary by provider and campaign.

You can change or withdraw your choice using the link Cookie preferences, available in the footer. Withdrawal blocks new optional uses and attempts to remove known identifiers from the domain; data lawfully processed before withdrawal may be retained where there is a legal basis.

7. International transfers

Some providers may process data outside Brazil. In such cases, Escola de CAIO seeks to use providers with contractual and technical measures compatible with the LGPD and with the regulations of Brazil's National Data Protection Authority (ANPD) on international transfers, and limits sharing to what is necessary for each purpose.

8. Retention and deletion

Data is kept for as long as necessary to fulfill the request, develop the business relationship, comply with legal obligations, protect rights and prevent abuse. Once the purposes and applicable periods have ended, the data will be deleted or anonymized, unless retention is authorized or required by law.

9. Data subject rights

Within the limits of the LGPD, you may request:

confirmation that processing takes place and access to the data;
correction of incomplete, inaccurate or outdated data;
anonymization, blocking or deletion of unnecessary data or data processed in non-compliance with the law;
portability, information about data sharing and review of automated decisions, where applicable;
information about the possibility of withholding consent and the consequences of doing so;
withdrawal of consent and deletion of data processed on that basis, subject to legal exceptions;
objection to irregular processing, and the right to petition Brazil's National Data Protection Authority (ANPD).

10. Security

We adopt technical and administrative measures proportionate to the context, including HTTPS connections, access control, form protection, management of secrets outside public code and the use of specialized providers. No system is completely immune to incidents; relevant situations will be handled in accordance with the law.

11. Children and adolescents

The site is intended for professionals and companies and was not designed to intentionally collect data from children. If we identify improper collection, we will take steps to delete the data and protect those involved.

12. Updates to this policy

This policy may be updated to reflect changes to the site, our providers or the law. The date at the top will indicate the current version. Relevant changes that require new consent will be presented before the corresponding processing continues.