Privacy and Cookie Notice

1. Who controls your data

The controller of data processed through this website is V2 CAPITAL CONSULTORIA LTDA, Brazilian corporate tax ID 05.194.482/0001-81, trading as Ventana Capital.

2. Data we process

When using the form, you provide your name, email address, subject and message. Company and telephone are optional. The system also records the language and the date and time of submission.

For security and operation, the hosting provider may generate technical logs such as IP address, browser, device, page accessed and time. The form's anti-spam mechanism temporarily uses the IP address to create a cryptographic identifier and record attempt times; the plain IP address is not included in the email sent to Ventana Capital.

3. Why we use this data

• To reply and assess a potential professional relationship, including preliminary steps requested by you.
• To protect the website and form from abuse, fraud and automated submissions, based on the legitimate interest in security.
• To comply with legal obligations or establish, exercise or defend rights where applicable.

The website does not use form data for newsletters or marketing, does not build advertising profiles and does not make automated decisions.

4. Who may receive the data

Access is restricted to authorised Ventana Capital personnel and service providers necessary to operate the service, including our hosting provider and Google Workspace for email delivery and storage.

We do not sell personal data. Providers may process data in other countries according to their infrastructure, subject to applicable contractual and legal safeguards.

5. How long we retain data

• Form messages: up to 12 months, unless a professional relationship, legal obligation or exercise of rights requires a different period.
• Anti-spam control: only as long as necessary and generally for no more than 24 hours.
• Browser notice acknowledgement: up to 180 days.
• Technical hosting logs: for the period strictly required for security and operation, according to the provider's configuration.

6. Your rights under Brazil's LGPD

Subject to applicable law, you may request confirmation of processing, access, correction, anonymisation, blocking or deletion of excessive data, portability where applicable, information on sharing and objection. Where processing relies on consent, you may also withdraw it.

To exercise a right, email info@ventanacapital.com.br or use the form with the subject “Privacy request”. We may ask for the minimum information necessary to confirm your identity and protect your data.

7. Security and confidentiality

We use technical and administrative measures proportionate to the nature of the website, including secure connections, form validation, attempt limits and restricted access to messages. No system is completely immune to incidents, but we work to prevent unauthorised access and reduce risk.

8. Cookies and local storage

This website does not use advertising or analytics cookies. It only uses browser local storage to remember that the privacy notice has been displayed. The record contains the notice version and acknowledgement date and expires within 180 days.

Server security logs and the form attempt control are not cookies. You can clear local storage in your browser settings; the notice will then be displayed again.

9. Updates to this notice

We may update this notice to reflect changes to the website, providers or law. The latest version and date will always appear at the top of this page.