Privacy
Privacy policy
Last updated: October 2026
This is a courtesy translation. In the event of any discrepancy, the Portuguese version governs.
This policy explains how personal data provided on gustavogovernanca.com.br is handled, in particular on the waitlist for the author’s book on compliance for small and mid-sized companies. It follows Brazil’s General Data Protection Law (Lei Geral de Proteção de Dados Pessoais, Law No. 13,709/2018, or LGPD).
1. Who is responsible for the data
The data controller is Gustavo Barbosa Vargas, an individual, who is responsible for this website. For any matter related to this policy, please write to contato@gustavogovernanca.com.br.
2. What data is collected
When you join the waitlist, we collect your name and email address, which are required, and your professional role, which is optional.
At the time of sign-up, the email service automatically records the date, time, IP address, and originating form. These records serve as proof that consent was given.
The website does not use tracking cookies or advertising tools, and its fonts are served from the website itself.
3. How the data is used
Your name and email address are used for a single purpose: to send one email on the book’s launch day with the purchase links. No other messages are sent.
Your professional role, if provided, is used only to understand, in aggregate, the profile of those interested in the book.
The data is not sold, rented, or transferred to third parties for any other purpose.
4. Legal basis
Processing is based on the data subject’s consent (LGPD, Article 7, item I), given expressly through the authorization checkbox on the form. Consent may be withdrawn at any time, free of charge, through the channels described in Section 7.
5. How long the data is kept
The data is kept until the launch notice is sent. After that, the list is closed and the data is deleted within 30 days. If the data subject requests deletion earlier, the data is deleted when the request is fulfilled.
6. Who the data is shared with
To operate, the website relies on two service providers, which process the data on the controller’s behalf and solely to perform the contracted service:
- MailerLite, which stores the waitlist and sends the launch notice. MailerLite states that it keeps the data in a data center located in the European Union, a region subject to the EU General Data Protection Regulation.
- Cloudflare, which hosts the website and therefore receives the technical access data needed to deliver its pages, such as the IP address.
Because these providers operate outside Brazil, the data is transferred internationally, under Article 33 of the LGPD.
7. Data subject rights
The data subject may, at any time, request confirmation that their data is being processed, access to it, correction of incomplete or outdated data, deletion, information about whom it has been shared with, and withdrawal of consent, among the other rights under Article 18 of the LGPD.
Requests can be made by email to contato@gustavogovernanca.com.br. Deletion can also be requested through the unsubscribe link in the footer of the notice email. Requests are answered within 15 days, as provided in Article 19 of the LGPD.
The data subject may also file a complaint with Brazil’s National Data Protection Authority (Autoridade Nacional de Proteção de Dados, ANPD).
8. Data protection officer
As a small-scale processing agent, the controller has not appointed a data protection officer, as permitted by Article 11 of ANPD Board Resolution No. 2/2022. The communication channel for data subjects is contato@gustavogovernanca.com.br.
9. Security
Access to the waitlist is restricted to the controller, and the accounts of the services used are protected by two-step verification.
10. Changes to this policy
Any change will be published on this page with a new effective date. If a change alters the purpose for which the data is used, new consent will be requested beforehand.