Version: v1.1
Effective Date: 05/06/2025
Last Updated: 07/20/2025
Company Name: Zandai Global X LTDA
CNPJ: 60.868.368/0001-06
Address: Av. Paulista 1106, Bela Vista, CEP 01310-914, São Paulo, Brazil
We are the data controller for this policy. For questions or privacy requests, contact our Data Protection Officer (DPO):
Name: Jonnathan Zanella
Email: privacy@zandaiglobalx.com
Phone: +55 22 981330600
Contact Information: Name, email, phone number, WhatsApp number
Business Information: Company name, services offered, revenue, niche
Usage Data: IP address, browser type, interactions with our website or AI bot
Communications: Messages you send via forms, chats, or WhatsApp
No sensitive categories (e.g., health, biometrics) are collected.
| Purpose | Data | GDPR Legal Basis | LGPD Legal Basis |
|---|---|---|---|
| Session management & authentication | Session cookies | Art. 6.1(f): Legitimate interest | Art. 7(IX): Legitimate interest |
| Security monitoring & fraud prevention | IP address, logs | Art. 6.1(f): Legitimate interest | Art. 7(IX): Legitimate interest |
| Service delivery & support | Contact & business info | Art. 6.1(b): Performance of a contract | Art. 7(I): Compliance with legal obligation |
| User experience personalization | Preferences (UI cookies) | Art. 6.1(a): Consent (where applicable) | Art. 7(I): Consent |
| Marketing communications (opt‑in only) | Email, phone | Art. 6.1(a): Consent | Art. 7(I): Consent |
Your data remains on our servers until you request deletion or up to 60 days after you cancel the service, whichever occurs first. You can trigger deletion at any time via your account settings or by contacting privacy@zandaiglobalx.com.
We do not sell your personal data.
We share data with service providers under data processing agreements:
MongoDB Atlas: https://www.mongodb.com/legal/privacy-policy
We may disclose data to authorities when legally required.
International transfers use Standard Contractual Clauses or equivalent safeguards.
You may exercise the following rights by contacting dpo@zandaiglobalx.com:
Access your personal data
Request correction or deletion
Withdraw consent at any time
Object to processing
Request data portability
Lodge a complaint with a data protection authority
Response Time: We respond within 30 days of receipt. For complex requests, we may extend to 60 days, notifying you of the extension.
We implement appropriate technical and organizational measures, including:
Encryption in transit: TLS 1.2+
Encryption at rest: AES‑256
Role-based access control for internal systems
We use essential cookies to manage sessions and preferences.
On first visit, you will see a cookie banner explaining our use.
You can manage or disable non-essential cookies via your browser settings.
Note: Our future landing page will include performance and marketing cookies; these will be covered under an updated unified “Privacy & Cookies” policy.
Our services may link to third‑party sites (e.g., WhatsApp). We are not responsible for their privacy practices. Please review their policies separately.
We may update this policy periodically. Changes will be posted here with a new “Last Updated” date. Significant changes will be communicated via email or banner.
Contact Us:
Email: privacy@zandaiglobalx.com
DPO: dpo@zandaiglobalx.com
Phone: +55 22 981330600