Privacy Policy

RefletorMaster respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you visit our website or contact us, in compliance with Brazil's General Data Protection Law (Lei Geral de Proteção de Dados — LGPD, Law 13.709/2018).

RefletorMaster is the controller of personal data collected through this website. For questions related to this policy or to exercise your rights, contact us through the channels listed in the 'Contact' section below.

We collect only the data strictly necessary to respond to your requests and understand site usage: • Full name • Email address • Phone number (optional) • Company name (optional) • Content of the message sent through the contact form • Automatic technical data (anonymized IP address, browser, pages visited, device, approximate country/region location) collected by Google Analytics 4 for aggregated statistical purposes, and used also for security and abuse prevention

We use your personal data exclusively to: • Respond to inquiries, quote requests, and commercial requests • Maintain a history of communications with you • Comply with legal and regulatory obligations • Prevent fraud and abuse on the contact form

The processing of your data is grounded in: • Consent — when you submit the contact form by checking the acceptance box • Performance of a contract or preliminary procedures — to respond to quote requests • Compliance with a legal obligation — when required by applicable law • Legitimate interest — for site security and fraud prevention

We do not sell, rent, or trade your personal data. Your data may be shared only with: • Public authorities, when required by law or court order • Technical infrastructure providers (hosting) under contractual confidentiality obligations No data is transferred outside Brazil without adequate safeguards as required by LGPD.

We retain your data only for the time necessary to fulfill the stated purposes, generally up to 24 months after the last contact, or for the period required by legal obligation. After this period, the data is securely deleted or anonymized.

You have the following rights regarding your personal data: • Confirmation of the existence of processing • Access to data • Correction of incomplete, inaccurate, or outdated data • Anonymization, blocking, or deletion of unnecessary data • Data portability • Deletion of data processed based on consent • Information about data sharing • Withdrawal of consent To exercise any of these rights, contact us through the channels listed below.

We adopt technical and administrative measures to protect your data, including encrypted HTTPS connections, restricted database access control, strict HTTP security headers, and protection against common attacks (XSS, CSRF, SQL injection).

This site uses: • Strictly necessary cookies for basic functionality (language preference, admin session) • Google Analytics 4 (GA4) — Google's traffic analytics service, which uses cookies to collect aggregated data about site usage (pages visited, time on page, device, approximate location). GA4 anonymizes IP addresses by default and does not allow direct personal identification. Data is processed by Google under Google's privacy policy: https://policies.google.com/privacy You can opt out of Google Analytics tracking by installing the Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout

We may update this Privacy Policy periodically. Significant changes will be flagged on this page with a new update date. We recommend revisiting this page regularly.

For questions, requests, or to exercise your rights under LGPD, contact us through the form at /contato or via the channels listed in the site footer. We will respond within a maximum of 15 business days.