Privacy Policy

Last updated: 31 August 2026

This Policy explains what personal data Ferla Response collects, why, and what you can do about it. It covers this website and the personal data we handle in the course of our professional services.

1. Data we collect

• Contact data you send us — your name, e-mail address, company and the content of your message, when you write to us.
• Engagement data — the contact details, contractual and billing information of our clients and their representatives.
• Technical data — standard server logs kept by our hosting provider, including IP address, browser type and time of request.

We do not collect payment card details on this website, and nothing is sold through it.

2. Cookies and tracking

Client projects we build or operate may use tracking technologies. Those are governed by the privacy policy of the site in question, not by this one.

3. Why we use it

• To answer your message and evaluate a possible engagement.
• To deliver, invoice and support the services we were engaged to provide.
• To keep our systems secure and our records complete.
• To comply with accounting, tax and other legal obligations.

4. Legal bases

We rely on the performance of a contract or steps taken before entering one, on our legitimate interest in operating and securing our business, and on compliance with legal obligations. Where consent is required, we ask for it and you can withdraw it at any time.

5. Who we share it with

We share personal data only with service providers who help us operate — hosting, e-mail, accounting and payment processors — each bound to process it only on our instructions. We share it with authorities when the law requires. We do not sell personal data and we do not share it for third-party advertising.

6. Where we process it

We operate from Brazil and the United States and use providers located in those and other countries. When personal data is transferred internationally, we rely on the safeguards required by applicable law.

7. Data we process for clients

In some engagements we process personal data on behalf of a client. In those cases the client decides the purposes and we act on its documented instructions, under the engagement documents and applicable data protection law. Requests from individuals about that data are directed to the client as controller.

8. How long we keep it

Enquiries that do not become engagements are kept for up to two years. Records of engagements are kept for as long as the relationship lasts and afterwards for the period required by contractual, accounting and tax rules. Server logs are kept for a short period as part of normal operation.

9. Security

Access to personal data is restricted to the people who need it. Connections to our sites are encrypted in transit, credentials are stored in a password manager rather than in code, and administrative access requires individual authentication.

10. Your rights

Depending on where you are, you may ask for confirmation that we process your data, for access to it, and for its correction, deletion, portability or anonymisation. You may object to processing based on legitimate interest and withdraw consent where consent applies. Write to official@ferla-response.com and we answer within the period the law allows.

11. Children

Our services are directed at businesses. We do not knowingly collect personal data from children. If you believe a child has sent us data, write to us and we will delete it.

12. Changes to this Policy

We may update this Policy. The date at the top reflects the current version. Material changes are announced on this page.

13. Contact