Privacy and Cookie Policy
Last updated: October 27, 2026
1. Who we are (controller)
This website is operated by KM Comunicações Ltda., tax ID (CNPJ) 13.068.632/0001-39, headquartered at Rua Fortunato Ramos, 116, Edif. Baltimore T. Center, Sala 105, Santa Lúcia, Vitória/ES, CEP 29056-020 ("KICKGROUP", "we"). We are the controller of personal data processed by this site under Brazil's General Data Protection Law (LGPD, Law 13.709/2018). Privacy contact and data protection officer: contato [at] kickgroup.com.br.
2. Data we collect
- Contact form: name, email, organization (optional), message, page language and a record of your consent. You choose what to write in your message; please avoid sensitive data.
- Technical access data: IP address, date and time, browser and page visited, logged by our hosting provider (Netlify) for security and operation.
- Anti-bot check: when you use the form, Google reCAPTCHA analyzes device and browser signals (such as IP and interactions) to tell people from bots.
- Admin area: authorized staff only; we process the email and login data of those users.
We do not sell personal data and we do not profile visitors or run behavioral advertising.
3. Why we use it and the legal basis
| Purpose | Legal basis (LGPD art. 7) |
|---|---|
| Reply to your message and handle proposals | Consent (I) and pre-contractual procedures (V) |
| Site security and spam and fraud prevention | Legitimate interest (IX) |
| Comply with legal obligations or exercise rights in proceedings | Legal obligation (II) and regular exercise of rights (VI) |
4. Who we share it with
- Netlify, Inc. (hosting and form handling).
- Google LLC (reCAPTCHA, bot protection). Google's Privacy Policy and Terms of Service apply.
- Supabase, Inc. (blog database and staff login; it does not receive contact form data).
- The company's email provider, which receives messages sent through the form.
- Authorities, when legally required.
5. International transfers
Some of these providers may process data outside Brazil (for example, in the United States). In those cases we use providers that offer adequate safeguards under LGPD art. 33, such as standard contractual clauses.
6. How long we keep it
Contact messages are kept for as long as needed to handle your request and then for up to 5 years to prove and defend rights where applicable, after which they are deleted. Technical logs follow the hosting provider's retention periods. If you do not consent or you withdraw consent, we stop processing based on it.
7. Cookies and similar technologies
This site uses strictly necessary cookies and, only with your consent, Google Analytics statistics cookies. No advertising cookies are used. When you arrive you choose to accept all, necessary only, or customize; your choice is kept in your browser (item kick_cookie_consent, for 12 months) and can be changed at any time under “Cookie preferences” in the footer. Fonts and scripts are served by us, without requesting files from Google Fonts.
| Item | Source | Purpose | Category |
|---|---|---|---|
reCAPTCHA (_GRECAPTCHA cookie and requests to Google) | Verify that the form is submitted by a person | Strictly necessary for security | |
| Login session (browser local storage) | This site / Supabase | Keep staff signed in to the admin area; ordinary visitors do not receive it | Strictly necessary |
Google Analytics (_ga and _ga_* cookies) | Measure, in aggregate, the number of visits and the most viewed pages, to improve the site | Statistics (consent only; up to 13 months) | |
Your cookie choice (kick_cookie_consent, local storage) | This site | Remember your preferences so we do not ask on every visit | Strictly necessary |
Necessary items do not require prior consent. Statistics items are only loaded after you accept and stop being used if you withdraw consent. You can also block or delete cookies in your browser settings; without reCAPTCHA the form may not work and you can email us directly.
8. Your rights
Under LGPD art. 18 you may request: confirmation that we process your data; access; correction; anonymization, blocking or deletion; portability; information about sharing; information about the possibility of refusing consent; and withdrawal of consent. To exercise your rights write to contato [at] kickgroup.com.br. We reply within 15 days. You may also file a complaint with Brazil's National Data Protection Authority (gov.br/anpd).
9. Security
We use technical and organizational measures such as encrypted connections (HTTPS), security headers, anti-spam filters, restricted and authenticated access to the admin area, and sanitization of published content. No system is completely immune; in case of an incident with relevant risk we will notify you and the ANPD as required by law.
10. Children
This site is aimed at organizations and professionals and is not intended for people under 18.
11. External links and changes
This site links to social networks and other sites, which have their own policies. We may update this policy; the last update date is shown at the top of this page.