Privacy Policy

Section 01

Introduction

MMC Tecnologia Ltda ("MMC Tecnologia", "we", "our", or "us") is a technology services company headquartered in Brazil, registered under CNPJ 59.795.798/0001-07. We build and operate digital infrastructure, software solutions, and managed IT services for corporate clients across multiple sectors.

This Privacy Policy explains what personal data we collect when you visit our website at mmctech.site, how we use it, with whom we share it, how long we keep it, and what rights you have over it. It applies to all visitors, prospective clients, and anyone who contacts us through the channels listed on this site.

By continuing to browse our website, you acknowledge that you have read and understood this policy. If you disagree with any part of it, please discontinue use of our site and direct any questions to contato@mmctech.site.

We act as the data controller for personal information collected through this website. Where we engage third-party service providers to process data on our behalf, those providers act as data processors under written agreements that require them to maintain standards equivalent to those set out here.

Section 02

Information We Collect

We collect two broad categories of information: data you actively provide to us, and data collected automatically when you interact with our website.

Information you provide directly

When you choose to reach out to MMC Tecnologia — for example, by emailing us at contato@mmctech.site or telephoning our office — you provide us with personal information such as:

• Your full name and professional title or role
• The company or organization you represent
• Your email address and telephone number
• The content of your message, including any project details, requirements, or other information you choose to share
• Any documents or files you voluntarily attach to communications

We collect only what is necessary to respond to your enquiry or fulfill the purpose for which you contacted us. You are never obligated to provide more detail than you feel comfortable sharing.

Information collected automatically

Like virtually every website on the internet, our site collects certain technical and behavioral data automatically whenever a browser requests a page. This includes:

• Log data: your IP address, browser type and version, operating system, referring URL, pages visited, time and date of each visit, and the duration of your session
• Device information: hardware model, screen resolution, and general device category (desktop, tablet, mobile)
• Geolocation data: approximate geographic location derived from your IP address (country and city — we do not access GPS-level location)
• Analytics data: which pages attract the most interest, how visitors navigate between sections, and which content performs best — collected in aggregate and, where possible, in anonymized form
• Advertising interaction data: whether you arrived at our site via a paid advertisement, which campaign or keyword triggered the visit, and general conversion events (such as navigating to the contact page)

Information from third-party sources

We may receive limited information about you from third-party advertising platforms (such as Google Ads) in the form of aggregated performance reports — for example, the number of clicks from a particular audience segment. This data is statistical in nature and does not identify you personally.

Section 03

How We Use Your Information

Every use of your personal data by MMC Tecnologia is grounded in a lawful basis under the LGPD and, where applicable, the GDPR. We rely on the following legal bases:

• Consent — for non-essential cookies and marketing analytics, collected when you accept cookie settings
• Legitimate interests — for server logging, fraud prevention, website security, and improving our service quality, where those interests are not overridden by your privacy rights
• Contract performance — to respond to and fulfill enquiries that lead to a commercial relationship
• Legal obligation — to comply with applicable Brazilian and international law, including tax and record-keeping requirements

Specific purposes

• Responding to your direct enquiries in a timely and relevant manner
• Maintaining accurate records of business communications as required by Brazilian corporate law
• Analysing website traffic patterns to improve content, navigation, and technical performance
• Measuring the effectiveness of our digital advertising campaigns and optimizing budget allocation
• Detecting, investigating, and preventing fraudulent or unauthorized access to our systems
• Complying with court orders, regulatory investigations, or other mandatory legal processes
• Sending you relevant service updates or information about MMC Tecnologia offerings, but only where you have opted in or where we have a pre-existing business relationship and you have not opted out

We do not use your personal data to make automated decisions that have a legal or similarly significant effect on you without a human review step, and we do not build individual profiling systems that would affect your access to services.

Section 04

Cookies & Tracking Technologies

Our website uses cookies — small text files stored on your device by your browser — along with similar technologies such as pixel tags and local storage. Some of these are essential for the site to function; others help us understand how the site is used and assess the performance of our marketing.

Strictly necessary cookies

These cookies are required for core website functionality, including security protections and session management. Because they are essential, they do not require your consent and cannot be disabled through our cookie preferences tool.

Analytics cookies

We use Google Analytics 4 to collect aggregated, anonymized data about how visitors interact with our site — which pages are most visited, how long sessions last, and what content drives enquiries. GA4 is configured with IP anonymization enabled, meaning full IP addresses are never stored. The data is processed on Google's servers in accordance with Google's data processing terms. You may opt out of GA4 tracking by accepting only necessary cookies in our cookie consent tool, or by installing the Google Analytics Opt-Out Browser Add-on.

Advertising & marketing cookies

When you arrive at our site through a Google Ads campaign, Google places a conversion-tracking cookie that helps us understand whether a visit ultimately led to a contact enquiry. This cookie is tied to a specific campaign click and expires after 90 days. No personally identifiable data is shared with us through this mechanism — we receive only aggregate counts. If you have a Google account, you can manage your ad personalization preferences at adssettings.google.com.

Managing your cookie preferences

On your first visit, you will see a cookie consent notice that allows you to accept all cookies, accept only strictly necessary cookies, or customize your choices by category. You may change your preferences at any time by clearing your browser cookies and revisiting our site. Major browsers also provide built-in tools to view, delete, or block cookies — please consult your browser's help documentation for guidance specific to your software.

Section 05

Sharing With Third Parties

MMC Tecnologia does not sell, rent, or trade your personal information to any third party. We share data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

Service providers (data processors)

We engage a small number of technology partners who process data strictly on our behalf and under our written instructions. These include:

• Google LLC — for website analytics (Google Analytics 4) and advertising measurement (Google Ads conversion tracking). Google processes data in accordance with its Google Ads Data Processing Terms and Privacy Policy. Google is certified under the EU–US Data Privacy Framework.
• Web hosting and cloud infrastructure providers — who store server logs and static site files. These providers are contractually bound to apply appropriate technical and organizational security measures and may not use the data for their own purposes.
• Email infrastructure providers — who transmit messages sent to and from our business email addresses. These providers handle message content in transit only and do not retain it for their own commercial purposes.

Legal and regulatory disclosures

We may disclose your information to government authorities, courts, or law enforcement agencies when we are legally required to do so — for example, in response to a valid judicial order, regulatory investigation, or statutory audit requirement under Brazilian law. We will notify you of such requests where legally permitted to do so.

Business transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of the assets of MMC Tecnologia, your personal data may be transferred to the acquiring or successor entity. We will provide advance notice of any such transfer through this Privacy Policy and ensure the recipient is bound by privacy obligations no less protective than those set out here.

International transfers

Some of our third-party service providers — notably Google — are headquartered outside Brazil and process data in jurisdictions such as the United States and the European Union. Where data is transferred internationally, we rely on Standard Contractual Clauses, adequacy decisions, or other approved LGPD transfer mechanisms to ensure your information receives an equivalent level of protection.

Section 06

Data Retention

We retain personal data only for as long as necessary to fulfill the purpose for which it was collected, satisfy our legal obligations, or resolve disputes. Our standard retention periods are as follows:

• Business enquiry communications: email and telephone records relating to commercial enquiries are retained for up to 5 years from the date of last contact, in line with Brazilian civil and commercial law requirements
• Active client records: data relating to contracted engagements is retained for the duration of the contract plus 5 years, consistent with Brazilian tax and accounting regulations (Lei 9.430/1996)
• Server logs: raw access logs containing IP addresses and request data are retained for 90 days for security and fraud-prevention purposes, after which they are automatically purged
• Analytics data: Google Analytics 4 data is retained for 14 months by default, in accordance with GA4's configurable retention settings, and is subject to automatic expiry thereafter
• Advertising cookies: conversion cookies placed by Google Ads expire after 90 days from the originating click
• Consent records: records of your cookie consent or withdrawal are retained for 3 years to demonstrate compliance

When retention periods expire, personal data is either permanently deleted from our systems or irreversibly anonymized so that it can no longer be associated with any individual. Where data is held by third-party processors, we instruct those processors to apply equivalent deletion schedules.

Section 07

Data Security

Protecting the personal data entrusted to us is a core operational responsibility at MMC Tecnologia. We apply technical and organizational security measures appropriate to the nature and sensitivity of the data we hold.

Technical measures

• All data transmitted between your browser and our website is encrypted using TLS 1.2 or higher (HTTPS)
• Access to business systems containing personal data is protected by strong authentication and role-based access controls, limiting visibility to personnel who have a legitimate need
• Our hosting infrastructure is hosted on enterprise-grade cloud platforms with physical security, redundant power, and 24/7 monitoring
• Business email communications are handled through systems with end-to-end encryption support and spam/phishing filtering
• Software and system patches are applied on a scheduled basis to address known vulnerabilities

Organizational measures

• Staff with access to personal data receive training on data protection responsibilities and acceptable use
• Third-party service providers are vetted for security compliance before engagement and are bound by data processing agreements
• We conduct periodic internal reviews of our data processing activities and security controls

Breach notification

In the event of a personal data breach that poses a risk to the rights and freedoms of individuals, we will notify the Brazilian National Data Protection Authority (ANPD) within the timeframe required by the LGPD, and will inform affected individuals without undue delay where the breach is likely to result in high risk to them.

No system can guarantee absolute security. If you believe your interaction with us has been compromised in any way, please contact us immediately at contato@mmctech.site.

Section 08

Your Rights

Depending on your location and applicable law, you have a range of rights with respect to personal data that MMC Tecnologia holds about you. Under Brazil's LGPD (Article 18) and, where applicable, the GDPR, these rights include:

How to exercise your rights

To exercise any of the rights listed above, please send a written request to contato@mmctech.site with the subject line "Privacy Rights Request". Include your full name and, where relevant, the context of your interaction with us (for example, an approximate date of contact) so we can locate your records efficiently.

We will acknowledge your request within 5 business days and aim to resolve it fully within 15 business days. If the complexity or volume of requests requires additional time, we will notify you and keep you informed of progress. We will not charge a fee for reasonable requests, but may charge a reasonable administrative fee for requests that are manifestly unfounded or excessive.

We may need to verify your identity before disclosing or acting on your personal data to protect you against unauthorized requests. We will ask for information sufficient to confirm your identity without requesting more than necessary.

Section 09

Children's Privacy

Our website and services are directed exclusively at professionals and organizations operating in a business-to-business context. We do not knowingly collect, process, or retain personal data relating to individuals under the age of 18.

If you are a parent or guardian and believe that a child under 18 has provided us with personal information without appropriate parental consent, please contact us immediately at contato@mmctech.site. Upon verification, we will promptly delete the relevant data from our records in accordance with LGPD Article 14, which establishes specific protections for the personal data of children and adolescents.

Our advertising campaigns are targeted at working-age professionals using interest-based and contextual targeting signals. We do not knowingly direct any advertising to minors.

Section 10

Changes to This Policy

Privacy law and our own data practices evolve over time. We reserve the right to update this Privacy Policy to reflect changes in applicable legislation, guidance from regulators such as the ANPD, or changes in the services we offer and the technologies we use.

When we make material changes — meaning changes that affect how we collect or use your data in ways that are meaningfully different from what is described in the current version — we will update the "Last updated" date at the top of this page and, where we have a direct communication channel with you, provide proactive notice by email.

For non-material changes (such as corrections of typographic errors, clarifications of existing language, or reorganization of sections without substantive changes to meaning), we will update the document without separate notification.

We encourage you to review this page periodically to stay informed about how we protect your information. Your continued use of our website following the publication of an updated policy constitutes your acknowledgment of the revised terms.

Prior versions of this Privacy Policy may be obtained upon written request to contato@mmctech.site.

Section 11

Contact Us & Our Data Protection Officer

If you have any questions, concerns, or complaints about this Privacy Policy or the way MMC Tecnologia handles your personal data, please reach out to us using the contact details below. We take all privacy enquiries seriously and will do our utmost to address your concerns promptly and thoroughly.

For formal privacy rights requests — including requests for access, correction, deletion, or portability — please use the subject line "Privacy Rights Request" so your message is routed to the appropriate team member without delay.

We aim to respond to all privacy-related correspondence within 5 business days. For urgent matters relating to a suspected data breach or unauthorized access to your personal information, please mark your message "URGENT — Security" and we will prioritize your case accordingly.