Privacy Policy

1. Data Controller

DumoSec
Contact email: contato@dumosec.com
To exercise your LGPD rights, contact us at the email above with the subject "LGPD: [your request]".

2. Data Collected

We collect only the data necessary to provide our services:

• Identification data: full name.
• Contact data: email address; WhatsApp number (optional).
• Assessment data: answers to the cyber risk assessment questionnaire, calculated score and company profile (size, sector).
• Consent data: consent timestamp, accepted policy version, exact consent text and browser user agent.
• Technical data: IP address (for security and compliance purposes).

3. Purpose of Processing

• Send the requested cyber risk executive report.
• Contact you to present services suited to the identified profile.
• Improve assessment quality based on aggregated and anonymised responses.
• Comply with legal and regulatory obligations.

4. Legal Basis

Data processing is based on the data subject's consent (Art. 7, I of the LGPD), provided explicitly before submitting the form. For communications strictly necessary to perform the requested service, we also rely on legitimate interest (Art. 7, IX).

5. Data Sharing

DumoSec does not sell, rent or share your personal data with third parties for commercial purposes. We may share data with infrastructure providers (email services, cloud database) exclusively to deliver the service, under contractual data protection clauses.

6. Data Retention

Your data will be retained for as long as necessary to provide the service and for up to 24 months for relationship history purposes. After that period, data will be anonymised or deleted, except where legal retention is required.

7. Your Rights (LGPD)

As a data subject, you have the right to:

• Confirm the existence of processing of your data.
• Access the data we hold about you.
• Correct incomplete, inaccurate or outdated data.
• Request the anonymisation, blocking or deletion of your data.
• Withdraw consent at any time.
• File a complaint with the ANPD (Brazilian National Data Protection Authority).

To exercise any of these rights, send an email to contato@dumosec.com with the subject "LGPD: [your request]".

8. Data Security

We adopt technical and organisational measures to protect your data against unauthorised access, loss, destruction or disclosure. Our systems use encryption in transit (TLS) and at rest.

9. Cookies and Tracking

This site uses cookies strictly necessary for the correct operation of the application. We do not use third-party tracking cookies for advertising purposes.

10. Changes to This Policy

We may update this Policy periodically. The current version is always identified by date at the top of this page. Significant changes will be communicated by email to registered data subjects.