Privacy Policy | Ascend Consulting

1. Who we are

A Ascend Consulting ("Ascend", "we") is responsible for the processing of personal data collected through this site (ascendconsulting.com.br). For privacy questions, reach out by email at consultoria@ascendconsulting.com.br.

2. What data we collect

We collect only what is necessary to run the site and respond to you:

• Navigation data: pages visited, reading time, device, browser, screen resolution, approximate country/region (via IP, without storing the full IP).
• Contact data: when you send us a message through the site's form or by email, we process the information you voluntarily provide (name, email, phone, company, question or context). The form message passes through the site's server, on Vercel, which forwards it by email to the consulting inbox. It is not recorded in a database and the site keeps no copy of it.
• Technical and analytics cookies: see section 5.

3. What we use it for

• Running the site and ensuring performance and security.
• Responding to messages, scheduling meetings and following up on the business contact you started.
• Understanding, in aggregate (without identifying you), how the site is used, in order to improve it.

We do not sell your data, we do not send marketing emails without your consent, and we do not build advertising profiles based on your browsing.

4. Legal basis (LGPD)

• Legitimate interest (Art. 7, IX): for aggregate statistical analysis of site usage.
• Consent (Art. 7, I): for non essential cookies (analytics), accepted via banner.
• Execution of preliminary procedures (Art. 7, V): when you contact us to hire a service.

5. Cookies and third party services

We use the following third party services, each with its own policy:

• Google Analytics 4 (Google LLC): anonymized usage metrics. Anonymized IP, no cross site tracking.
• Vercel Analytics (Vercel Inc.): performance metrics (Core Web Vitals). No persistent cookies.
• Vercel: hosting and CDN. Basic operational logs.
• Sentry: captures technical site errors. No personal data by default.

Analytics cookies are only activated after you click "Accept" on the bottom banner. Strictly technical cookies (essential for the site to function) do not require consent.

6. Your rights

Under Art. 18 of the LGPD, you can at any time:

• Confirm that we process your data and request a copy.
• Correct inaccurate or outdated data.
• Request anonymization, blocking or deletion of unnecessary data.
• Request data portability.
• Withdraw previously given consent.

To exercise any of these rights, write to consultoria@ascendconsulting.com.br. We respond within 15 days.

7. How long we keep it

• Navigation data (analytics): up to 14 months (Google Analytics default).
• Business contact messages: while the relationship is active, and for up to 5 years after the last contact for legal/contractual purposes.

8. Security

The site is served over HTTPS with a valid certificate and active security headers (HSTS, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy). Even so, no system is 100% immune. In the event of an incident affecting personal data, we will notify the data subjects and Brazil's data protection authority (ANPD) within the legal deadline.

9. Changes to this policy

We may update this text. The date at the top is the latest revision. Relevant changes will be highlighted with a banner on the site.

10. Data protection officer (DPO)

For formal questions related to the LGPD: André Lima, founder of Ascend Consulting. Contact: consultoria@ascendconsulting.com.br.