Effective date: 01/01/2020
Last updated: 01/01/2025

We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you interact with us, including through our website and services.

1) Who we are (Data Controller)

Varendi Translation Ltda., established on September 29, 1989 in Sao Paulo, SP, Brazil. Our address is Avenida Morumbi, 8411 – Sao Paulo, SP, Brazil – CEP 04703-004.

2) What we collect

• Identifiers & contact data: name, email, phone, company, role, billing details, addresses.
• Technical basics: device/browser type, IP address, pages viewed sufficient to operate the site.
• Project data (may be confidential/sensitive): files you send for quotes or services. Handled under confidentiality and access controls.

3) Why we use data (legal bases)

• Provide quotes and services; project management and support (contract; legitimate interests).
• Billing, payments, tax/audit compliance (legal obligation; contract).
• Security and service maintenance (legitimate interests).
• Marketing communications (consent where required; otherwise legitimate interests—opt-out anytime).

For client documents we typically act as a processor on your instructions under a data-processing agreement (DPA). Clients are responsible for any required consents or other legal bases.

4) Cookies & tracking

We use cookies required to run the website (e.g., session, load balancing). We may use analytics, advertising, or other non-essential cookies.

5) Sharing your data

We do not sell personal information and do not share it for cross-context behavioral advertising. We disclose data only to:

• Service providers/sub-processors (hosting, email, payments, Computer-Assisted Translation/Translation Management Systems, and other tools) under contract and confidentiality;
• Legal authorities where required by law;
• Business transfers (e.g., merger or acquisition), with protections continuing.

6) International transfers

Your data may be processed outside your country. For EU/UK data we use Standard Contractual Clauses (and the UK Addendum) plus supplementary safeguards, as needed.

7) Retention

We keep data only as long as needed and to meet legal obligations. Typical periods:

• Quotes & inquiries: 2 years;
• Project records: project term + 5 years;
• Invoices/tax: 7 years.
  When no longer needed, we delete or anonymize data.

8) Your rights

Depending on your location, you may have rights to access, correct, delete, restrict/oppose, portability, and withdraw consent.

• EU/UK/LGPD: standard rights – you can contact us through any channel on this website if you have questions or concerns.
• U.S. states (e.g., CA, CO, VA): you may also have rights to opt out of certain processing and to appeal a decision. To appeal, contact us through any channel on this website. We will verify your identity before fulfilling a request. Authorized agents may act where the law allows.

9) Security

We use industry-standard safeguards (encryption in transit, access controls, least-privilege, logging). No online system is 100% secure—please protect your credentials and notify us of suspected misuse.

10) Data breach notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant data protection authorities within the timeframes required by applicable law and will provide information about the nature of the breach and steps you can take to protect yourself.

11) Children’s privacy

Our site and services are not directed to children under 13. We do not knowingly collect their data. If you believe a child provided data, contact us for deletion.

12) Automated decision-making

We may use automated and/or human decision-making or profiling that produces legal or similarly significant effects.

13) Updates

If we ever use solely automated decision-making or profiling that has legal or similarly significant effects, you may request human review of the decision, express your point of view, and contest the outcome where required by law.

14) Contact

Questions or requests: Contact us via the channels on our website (form, text, WhatsApp).

15) Acknowledgement

By using our services, you acknowledge that you have read and understood this Privacy Policy.