Privacy Policy

01 Who is responsible for your data

The controller of personal data processed on this website is PlanBrazil.

Legal name: Planbrazil Consultoria Internacional e Assessoria Imobiliária LTDA · Tax ID (CNPJ): 65.886.027/0001-79 · Contact: info@planbrazil.com.br.

For any matter relating to personal data, including exercising your rights, write to info@planbrazil.com.br.

02 What data we collect

We collect only what is necessary to respond to your enquiry and provide our services. We do not sell personal data and do not use it for third-party advertising.

• Data you send through the contact form: name, email, phone/WhatsApp, country of origin, topic of interest and the message you write.
• Property check data: if you use our orientation tool, we process the answers you select — available capital range, objective, time horizon and intended presence — together with your name, email and country of residence, in order to send you the result and understand your context. The ranges are indicative and we ask for no proof.
• Publication notice sign-up: name and email, when you ask to be told that a publication has been released.
• Technical security data: when you submit the form, Cloudflare Turnstile processes browser information and your IP address to verify the submission is not automated.
• Site access data: our hosting provider (Cloudflare) logs technical data such as IP address, date and time, pages visited and browser type, for security and stability purposes.
• Aggregated audience metrics, when enabled, via Cloudflare Web Analytics — a tool that uses no cookies and creates no individual identifiers.

03 Why we use the data and on what legal basis

• To respond to your enquiry and manage the pre-contractual and contractual relationship — legal basis: performance of a contract or pre-contractual steps (GDPR art. 6(1)(b)) and your consent in the form (GDPR art. 6(1)(a)).
• To protect the site against spam, abuse and malicious access — legal basis: legitimate interest (GDPR art. 6(1)(f)).
• To understand, in aggregate, how the site is used so we can improve it — legal basis: legitimate interest, using a tool that does not identify individuals.
• To send informative messages about our topics and publications, where you have ticked that option — legal basis: consent (GDPR art. 6(1)(a)). You may withdraw it at any time, with one click in any message.
• To comply with applicable legal and regulatory obligations — legal basis: legal obligation (GDPR art. 6(1)(c)).

04 Who we share it with

We do not sell, rent or trade your data. Sharing occurs only where necessary:

• Cloudflare, Inc. — website hosting, abuse protection (Turnstile) and aggregated metrics. International transfers rely on the European Commission’s standard contractual clauses.
• Our corporate email provider, so your message reaches our team.
• Accredited partners (lawyers, accountants, service agents) — only where necessary for the service you engaged or requested, and only with the data strictly required.
• Public authorities, where there is a legal obligation or court order.

05 Cookies and similar technologies

This website uses no advertising, social media or cross-site tracking cookies.

• Language preference cookie (pb_lang): stores the language you chose so the site opens in it next time. A functional cookie, valid for 12 months, which does not identify you.
• Cloudflare Turnstile: may set a temporary, strictly necessary identifier to validate form submission and prevent abuse.
• Cloudflare Web Analytics: measures site usage without cookies and without building individual profiles.

06 How long we keep it

• Contact messages that do not lead to a business relationship: up to 24 months, so we can pick up the history if you contact us again.
• Client data: for the duration of the service and thereafter for the applicable legal retention and limitation periods.
• Technical security logs: for the periods set by our infrastructure, generally short and limited to the security purpose.
• You may request deletion before these periods, except where the law requires us to retain the information.

07 Your rights

The GDPR and LGPD grant you rights over your data. At any time you may:

• Confirm whether we process your data and obtain access to it.
• Have incomplete, inaccurate or outdated data corrected.
• Request anonymisation, blocking or deletion of unnecessary or unlawfully processed data.
• Request portability of your data to another provider.
• Withdraw consent, without affecting the lawfulness of processing carried out beforehand.
• Object to processing based on legitimate interest and lodge a complaint with the data protection authority in your country. In Brazil, the competent authority is the ANPD.

08 Security

We apply technical and organisational measures to protect your data: encrypted connection (HTTPS/TLS) across the site, security headers, protection against malicious traffic, rate limiting on form submissions and restricted internal access.

No system is entirely immune to incidents. Should a relevant security incident occur, we will notify you and the competent authorities within the periods required by law.

09 Children

This website is intended for adults. We do not knowingly collect data from anyone under 18. If such data is identified, it will be deleted.

10 Changes to this policy

We may update this policy to reflect changes in our services or in the law. The date of the last update is always shown at the top. Material changes will be highlighted on the site.

11 Referrals, partners and General-Managers

PlanBrazil works with regional General-Managers – local representatives in countries such as Germany, Austria and Switzerland – and with partners who refer clients. When you fill in a form with a referral code, we record who referred you.

The code field is optional. If you do not want your request linked to the person who referred you, leave it blank or let us know – you will be served in exactly the same way.

• The General-Manager for your region receives your name, contact details, country and the subject of your interest, in order to serve you locally. Legal basis: carrying out steps you yourself requested (LGPD art. 7(V); GDPR art. 6(1)(b)).
• The partner who referred you only sees your name and the stage your case is at, so that their commission can be calculated. They do not receive your contact details or the content of your message. Legal basis: our legitimate interest in rewarding the referral, limited to this minimum (LGPD art. 7(IX); GDPR art. 6(1)(f)).
• General-Managers and partners may be located outside Brazil. In that case there is an international data transfer, based on contractual clauses that bind them to use the data only for this purpose, keep it confidential and protected, and delete it when the partnership ends (LGPD art. 33).
• Every General-Manager and partner accepts these obligations before gaining access to any data, and sees only the clients of their own region or their own referrals.
• Your rights regarding this data are those described in this policy – including the right to object to sharing with the partner who referred you.

12 Google Analytics and measurement cookies

Alongside Cloudflare Web Analytics, which uses no cookies, this website may use Google Analytics 4 to understand in aggregate how the pages are used.

Google Analytics loads only after you accept, in the notice shown on your first visit. Until then no Google script is loaded and no Google cookie is set. Declining does not limit your use of the site.

• Cookies set on acceptance: _ga and _ga_<ID>, which assign an identifier to the browser to distinguish visits. Typical lifetime up to 24 months.
• Data processed: pages visited, source of the visit, language, device type and IP address, from which Google infers approximate location.
• Legal basis: your consent (GDPR art. 6(1)(a); LGPD art. 7, I). We do not rely on legitimate interest for this purpose.
• Processor: Google Ireland Limited. International transfers may occur, relying on the European Commission’s standard contractual clauses.
• We do not use Google Analytics for advertising, remarketing or selling data, and we do not combine this data with what you send through the contact form.
• You may change your decision at any time using the button at the end of this page. After declining, no further Google cookies are set; existing ones can be deleted in your browser settings.