This Policy explains how IGNITE MARKETING LTDA collects, uses, shares and protects personal data. It is written to comply with the Brazilian General Data Protection Law (LGPD, Law 13,709/2018) and, for data subjects in the European Economic Area and the United Kingdom, with the General Data Protection Regulation (GDPR, Regulation EU 2016/679).
1. Who is the controller
IGNITE MARKETING LTDA, Brazilian company number (CNPJ) 55.310.184/0001-88, with registered offices at Porto Alegre — RS, Brazil, is the controller of personal data processed through this website and the platforms it operates. Privacy contact: contato@ignitemkt.com.br.
2. Data we collect
2.1 Data you provide
- Contact: name, email, phone and company, submitted through forms.
- Account: access credentials, preferences and settings.
- Billing: name, email, country, tax identification number and address, where required to issue a tax document.
- Communications: the content of messages exchanged by email, WhatsApp or support tickets.
2.2 Data collected automatically
- IP address, browser type and version, operating system and device type.
- Pages visited, time on page, traffic source and interactions with the site.
- Application access logs, retained for 6 months under the Brazilian Internet Civil Framework.
3. Purposes and legal basis
| Purpose | Legal basis (LGPD) | Legal basis (GDPR) |
|---|---|---|
| Perform the contract, deliver services and manage your account | Art. 7, V | Art. 6(1)(b) |
| Respond to sales and technical enquiries | Art. 7, V and IX | Art. 6(1)(b) and (f) |
| Process payments and issue tax documents | Art. 7, II and V | Art. 6(1)(b) and (c) |
| Comply with legal obligations and respond to authorities | Art. 7, II | Art. 6(1)(c) |
| Prevent fraud and abuse, ensure security | Art. 7, IX | Art. 6(1)(f) |
| Improve products through aggregated usage analysis | Art. 7, IX | Art. 6(1)(f) |
| Send marketing news and content | Art. 7, I | Art. 6(1)(a) |
We do not sell, rent or trade personal data with third parties. Under any circumstances.
4. Sharing with payment processors
When you purchase a plan, the data required for billing — name, email, country, amount and order reference — is transmitted to the payment processor handling the transaction, which acts as an independent controller of the financial data.
Your card details are entered directly in the processor's environment and never pass through our servers. We have no access to the full card number or the security code. We receive only the transaction confirmation, the card brand and the last digits, for identification and support purposes.
The processors we use are authorised institutions certified to the PCI DSS standard. Their processing is governed by their respective privacy policies.
5. Who else we share with
We share data only as needed to operate, always under a confidentiality agreement:
- Infrastructure and hosting providers, to keep the systems running.
- Communication and support tools, to handle tickets.
- Accounting and tax authorities, to comply with legal obligations.
- Public authorities, upon a valid court order or legal request.
6. International data transfers
Some infrastructure and payment providers are based outside Brazil. In those cases, transfers comply with Article 33 of the LGPD and Articles 44 to 49 of the GDPR, through standard contractual clauses and adequate safeguards equivalent to those required by the data subject's home legislation.
7. Cookies
We use cookies to keep your session, remember preferences (language and theme) and, with your consent, to understand site usage in aggregate. Details and opt-out instructions are in our Cookie Policy.
8. How long we keep data
- Contact data with no purchase: up to 12 months after the last contact.
- Contractual and tax data: 5 years after the end of the relationship, as legally required.
- Access logs: 6 months, under the Brazilian Internet Civil Framework.
- Marketing data: until consent is withdrawn.
Once the period ends, data is irreversibly deleted or anonymised.
9. How we protect data
- Encryption in transit (TLS/HTTPS) on all connections.
- Role-based access control following the principle of least privilege.
- Passwords stored only as hashes, never in readable form.
- Daily backups with periodic restore testing.
- Monitoring of availability and of unauthorised access attempts.
In the event of a security incident posing significant risk to data subjects, we will notify those affected and the Brazilian Data Protection Authority (ANPD) under Article 48 of the LGPD. For data subjects covered by the GDPR, notification to the supervisory authority occurs within 72 hours, under Article 33 of the Regulation.
10. Your rights (LGPD)
- Confirm that processing exists and access your data.
- Correct incomplete, inaccurate or outdated data.
- Request anonymisation, blocking or deletion of unnecessary or excessive data.
- Request portability to another provider.
- Withdraw consent at any time.
- Object to processing carried out on the basis of legitimate interest.
- Obtain information about who we share your data with.
11. Additional rights under the GDPR
If you are in the European Economic Area, Switzerland or the United Kingdom, you also have the right to:
- Restrict processing in certain circumstances (Art. 18).
- Not be subject to decisions based solely on automated processing producing legal effects (Art. 22).
- Lodge a complaint with the supervisory authority in your country of residence.
To exercise any of these rights, write to contato@ignitemkt.com.br with the subject “Data subject rights”. We respond within 15 days (LGPD) or 30 days (GDPR). We may request documents to verify your identity before fulfilling the request.
12. Children
Our services are intended for people aged 18 or over and we do not knowingly collect data from minors. If we identify improper collection, the data is deleted. Guardians may request deletion through our contact email.
13. When we act as a processor
In custom projects and platform usage, we may process data belonging to the Customer's end users. In those cases the Customer is the controller and we act as processor, handling data exclusively under their documented instructions and for the term of the contract.
14. Data Protection Officer
Officer: privacy team at IGNITE MARKETING LTDA
Email: contato@ignitemkt.com.br
Address: Porto Alegre — RS, Brazil
Phone: +55 51 99513-2311
15. Changes to this policy
This policy may be updated. Material changes are communicated by email or by notice on the site. The last updated date is always visible at the top of this page.