Privacy policy
Last updated: October 29, 2026. Final publication planned for November 4, 2026.
This policy explains how personal data is processed through the Primea Advisory website, contact form and meeting scheduling service.
Who is responsible for your data
The data controller is IERG Assessoria Ltda., operating under the Primea Advisory brand, Brazilian company registration number (CNPJ) 25.370.618/0001-74, located at DF 425, km 1.5, Condomínio Fraternidade, conjunto 8, casa 9, Brasília/DF, postal code 73.092-912, Brazil. For privacy matters, use the form on the Contact page and write “Privacy” at the beginning of your message.
What data we use and why
We use your name, organization, email address and the information in your message to respond, understand your needs and continue the business conversation. When you schedule a meeting, we use the information needed to arrange and hold it. Avoid including sensitive personal data or unnecessary confidential information.
We process contact and scheduling data on the basis of our legitimate interest in responding to requests, arranging meetings and continuing professional discussions related to the needs presented, taking account of the necessity of processing and the rights of data subjects. Where applicable, we also process data to comply with legal or regulatory obligations and exercise rights in judicial, administrative or arbitration proceedings. Submitting the form does not automatically subscribe you to promotional communications.
Service providers and data sharing
We use Wix to host and operate the website and contact form, Google Workspace to receive and manage messages, Google Calendar for meeting scheduling and, with your permission, Google Analytics 4 for website statistics. These services may involve storing or processing data outside Brazil. When you follow an external scheduling link, Google’s privacy information will also apply.
How long we retain data
Contact and scheduling records that do not lead to an engagement are retained for up to 90 days after the last interaction related to the request. At the end of this period, data is deleted or anonymized unless there is a specific legal basis for retaining it.
If an engagement is established, records needed to provide the services follow the retention criteria applicable to the contractual relationship and the relevant legal obligations.
Cookies and browsing data
We use technical resources needed to deliver pages, protect the service and allow the contact form to function.
With your permission, we use Google Analytics 4 to analyze visits, traffic sources, page language and interactions such as confirmed contact form submissions and scheduling clicks. We do not send names, email addresses or message contents to Analytics. Advertising features remain disabled.
Google Analytics loads only after you grant permission. You can accept, reject or change your choice using “Privacy preferences” in the footer. Your preference is stored in this browser for up to 180 days. Analytics cookies are also configured to last up to 180 days.
Your rights and how to exercise them
You may request confirmation of processing, access to and correction of your data, information about sharing and, where legally applicable, anonymization, blocking, deletion and portability. You may also withdraw consent, where used, and object to processing under the conditions provided by Brazil’s General Data Protection Law (LGPD). Where applicable, you may request review of decisions based solely on automated processing and information about the criteria used.
To exercise your rights or ask a question, use the form on the Contact page and write “Privacy” at the beginning of your message. Requests are free of charge and may require identity verification proportionate to the request. You may also petition Brazil’s data protection authority, ANPD.
Protecting your data
We use encrypted connections to transmit data through the website. Administrative access to requests is restricted to people authorized to handle them and manage records. Administrative access must use individual accounts and two-step authentication. Permissions must be reviewed periodically and updated when responsibilities or team membership change.
Policy updates
This policy may be updated to reflect changes to the website or data processing. The current version will remain available on this page, with its last update date.