Privacy policy
Updated on
This is a translation. The Portuguese version prevails in case of any discrepancy.
This policy explains which personal data LinkFlow collects on this website and in business contacts, why we collect it, who we share it with and how you can exercise your rights under Brazil’s General Data Protection Law (LGPD, Law 13,709/2018).
1. Who we are and what this policy covers
LinkFlow Sistemas, headquartered at Rua Benjamin Constant, 2657, CEP 89035-100, Blumenau, Santa Catarina, Brazil, is the controller of the personal data processed on this website. This means we decide how and why that data is used.
This policy applies to the linkflow.com.br website, including the blog, to the forms and emails we exchange with you and to our business relationship with customers, partners and prospects. The data that customer companies store in the LinkFlow platform follows its own rules, explained in section 10.
2. The data we collect
We collect the data you give us: name, email, phone, company and job title, when you fill in a form, write to us or talk to our team; the subject and content of your message; and, when your company becomes a customer, contract data such as the names and emails of the people in charge and billing details.
While you browse, we collect access logs (IP address, date and time of the visit, page accessed and browser used), kept as required by Brazil’s Internet Civil Framework (Marco Civil da Internet, Law 12,965/2014). If you accept analytics cookies, we also collect usage data: pages viewed, time on site, how you arrived, device type and approximate location, by city or country. If you accept marketing cookies or receive our emails, we record the pages you visit after identifying yourself, email opens and link clicks.
We do not ask for sensitive data, such as health, religion or political opinions, nor for data about children. Please do not include it in your messages.
3. What we use the data for
Each use relies on a legal basis set out in article 7 of the LGPD:
- Replying to contacts and scheduling demos: pre-contractual steps at your request, and legitimate interest.
- Negotiating, contracting and serving customers: performance of a contract and compliance with a legal obligation.
- Sending LinkFlow content, invitations and news: consent or legitimate interest, with an unsubscribe link in every email.
- Measuring audience and improving the website, with Google Analytics: consent.
- Measuring the results of our ads and showing LinkFlow ads to people who visited the website, with Google Ads, Meta and LinkedIn: consent.
- Relating your browsing to your interests, with RD Station Marketing: consent.
- Keeping the website secure and storing access logs: compliance with a legal obligation and legitimate interest.
- Defending rights in judicial, administrative or arbitration proceedings: regular exercise of rights.
We do not use your data for automated decisions that affect your interests, and we do not sell it to anyone.
5. Who we share data with
We only share data with those who help us run the website and our relationship with you, always limited to what is necessary: Google, which provides Google Analytics and Google Ads; Meta and LinkedIn, which measure our ads; RD Station, where our contacts and marketing automation are kept, including the messages sent through the form; the hosting and infrastructure providers where the website and the blog are hosted; and the email and support services we use to receive form messages, talk to you and log support tickets. We may also provide data to public authorities when required by law or court order.
These providers may only use the data to deliver the contracted service. We do not sell or rent personal data.
6. Data outside Brazil
Some providers, such as Google, Meta, LinkedIn and our email delivery service, may process data on servers outside Brazil. In these cases, the transfer follows the cases set out in article 33 of the LGPD and the rules of Brazil’s National Data Protection Authority (ANPD), such as contractual clauses that ensure a level of protection equivalent to Brazil’s.
7. How long we keep data
We keep contacts and sales conversations while there is mutual business interest, or until you ask us to delete them. Customer data is kept for the term of the contract and, afterwards, for the periods required by tax, accounting and civil laws. You stay on our mailing list until you unsubscribe or withdraw your consent. Access logs are kept for six months, as required by the Internet Civil Framework; Google Analytics data for up to 14 months; and cookies for the periods listed in section 4, or until you delete them.
At the end of these periods, the data is deleted or anonymised.
8. How we protect data
We adopt technical and organisational measures to protect data against unauthorised access, loss or alteration, such as HTTPS connections, access restricted to the people who need the data for their work and providers committed to security. No system is fully immune to failures; if an incident may bring you relevant risk or harm, we will notify you and the ANPD, as the law requires. The platform’s security measures are described in Security & infrastructure.
9. Your rights
The LGPD (art. 18) gives you, at any time and free of charge, the right to:
- confirm whether we process your data and access it;
- correct incomplete, inaccurate or outdated data;
- request anonymisation, blocking or deletion of unnecessary or excessive data, or of data processed in breach of the law;
- request portability of your data to another provider;
- request deletion of data processed with your consent;
- know who we share your data with;
- know that you may refuse consent and what happens if you do;
- withdraw your consent;
- object to processing based on another legal basis if it breaches the law.
To exercise your rights, write to contato@linkflow.com.br with the subject “Privacy”. We may ask for information to confirm your identity. We reply within the time limits set by the LGPD. If our answer does not resolve your request, you may contact Brazil’s National Data Protection Authority (ANPD).
10. Data inside the platform
When a company hires LinkFlow, it decides which data it stores in the platform: users, partners, files, comments and approvals. In this case, the customer company is the controller and LinkFlow acts as processor, handling the data according to its instructions and the contract between the parties.
If you use the platform as an employee, agency or supplier of a customer, please send requests about that data to the company that granted you access. We will help that company handle them.
11. Children and other websites
The website and the platform are aimed at companies and professionals. We do not knowingly collect data from people under 18.
The website links to other addresses, such as those of the Grupo Blumenau companies and the support portal. Each of them has its own privacy policy.
12. Changes to this policy
We may update this policy when we change tools or purposes, or when the law requires it. The date at the top of the page shows the version in force. If a change is significant, we will let you know on the website or by email.
13. Contact
Questions, requests and complaints about personal data can be sent to contato@linkflow.com.br, with the subject “Privacy”. You can also call us on (47) 3209-0220 or find us at Rua Benjamin Constant, 2657, CEP 89035-100, Blumenau, Santa Catarina, Brazil.