Privacy policy

Who we are

This policy explains how Bait ([RAZÃO SOCIAL], CNPJ [CNPJ], headquartered at Rua Viscondessa de Campinas, 387, Nova Campinas, Campinas, SP, CEP 13092-135, Brazil), the data controller, handles the personal information of people who use the agenciabait.com website, in compliance with the Brazilian General Data Protection Law (LGPD, Law 13.709/2018).

What data we collect

Contact form: name, email, company, message and the optional answers about your goal.

Careers form: name, email, area of interest, résumé in PDF, record of your authorization and, when provided, a portfolio or LinkedIn link and a personal introduction.

Digital maturity assessment: name, email, WhatsApp, company, industry, the answers to the 20 questions and the result calculated from them.

Where the visit came from: campaign parameters (UTM), landing page and the site you came from, so we can understand which channels bring us contacts.

Technical data: the IP address is used only at the moment of submission, to prevent abuse and spam, and is not stored together with your answers.

Audience measurement: we use Cloudflare Web Analytics, which counts visits and page views in aggregate, without cookies and without identifying you. The forms use Cloudflare Turnstile, a bot check that replaces image captchas.

Your progress in the Assessment is saved only in your browser (session storage), so you do not lose your answers if you reload the page. It is erased when you close the tab.

What we use it for

To show you the Assessment result, reply to your message and talk about how Bait can help your business, including by email and WhatsApp.

To review the profiles sent through the careers form and get in touch about opportunities at Bait.

To understand, in aggregate, which channels and campaigns bring interested people.

We do not sell your data and we do not use your answers for any purpose other than the ones described here.

Legal basis

The processing of data from the contact form and the Assessment is based on your consent (art. 7, I, of the LGPD), given when you check the acceptance box before submitting.

The use of your IP address to prevent abuse is based on Bait’s legitimate interest in keeping the website secure (art. 7, IX).

Who we share it with

Only with suppliers who help us run the website and our customer service, such as hosting, database and automation and customer relationship tools (Cloudflare, for site delivery, abuse protection and audience measurement; hosting servers in Brazil; Google Workspace, for email). They process the data only on our behalf and in line with this policy.

We may share data when the law or an authority requires it.

How long we keep it

We keep the data while there is a business relationship or an interest in talking, and for up to [PRAZO] after the last contact. After that, the data is deleted or anonymized.

Your rights

At any time, you can: confirm whether we process your data, access it, correct it, ask for it to be deleted, withdraw your consent and ask for information about who it has been shared with (art. 18 of the LGPD).

To exercise these rights, write to [email protected]. The data protection officer is Gabriel.

Security

The data is kept on servers with access restricted to the Bait team, protected by password and an encrypted connection. No system is completely free from failures; if an incident that could put you at risk occurs, we will let you know and notify the competent authority.

Changes to this policy

We may update this policy. The date of the last review appears at the top of the page.