Privacy Policy
Last updated: July 22, 2026 · Compliant with LGPD (Law No. 13,709/2018), Brazil's General Data Protection Law
1. Who we are
Ciclicko Digital ("Ciclicko," "we") is a digital marketing agency responsible for the website ciclicko.com.br and the services offered through it. We take your privacy seriously, and this policy clearly explains what personal data we process, for what purposes, and what your rights are.
For purposes of the LGPD (Brazil's General Data Protection Law, Law No. 13,709/2018), Ciclicko acts as the Controller of the personal data collected on this website. The company's details are:
- Legal name: Ciclicko Digital Ltda.
- CNPJ (Brazilian company registration number): 51.856.628/0001-24
- Municipal Registration: 1.492.130-8
- Address: Rua Coronel José Eusébio, 95, casa 13, Higienópolis, São Paulo/SP, CEP 01239-030
- Email: contato@ciclicko.com.br
2. Data we collect
2.1. Data you provide to us
When you fill out a form, use the chat/WhatsApp button, request a proposal, or hire a service, we may collect:
- Contact and identification data: name, email, and WhatsApp/phone number.
- Message content: information you send when talking to us (topic of interest, your business details, briefing).
- Payment data: when you hire our services, payment is processed by external providers (e.g., Stripe). Ciclicko does not store your full card details.
2.2. Data collected automatically
While you browse the website, some data is collected automatically by us and by third-party technologies:
- Browsing and device data: IP address, browser and device type, operating system, pages visited, time spent on the site, and referral source.
- Ad and analytics identifiers: cookies and identifiers such as gclid (Google Ads), used to measure campaign and conversion performance.
3. How and why we use your data
We use your personal data for the following purposes:
- Support and contact: to respond to your requests via WhatsApp, email, or chat, and to follow up on your inquiries.
- Service delivery: to carry out the contracted service (content creation, Google Ads management, conversions/CRM, Google Business Profile).
- Marketing and communication: to send proposals, updates, and offers related to our services, when you authorize it.
- Measurement and improvement: to understand how the website is used, measure campaigns, and improve your experience.
- Security and legal obligations: to prevent fraud and comply with legal and regulatory obligations.
4. Legal bases (LGPD)
All data processing relies on a legal basis provided for under the LGPD:
| Purpose | Legal basis (LGPD) |
|---|---|
| Support and performance of the contracted service | Contract performance (Art. 7, V) |
| Sending marketing communications | Consent (Art. 7, I) |
| Measurement, analytics, and website improvement | Legitimate interest (Art. 7, IX) / Consent for cookies |
| Compliance with legal/tax obligations | Legal obligation (Art. 7, II) |
When processing is based on consent, you may withdraw it at any time, without affecting the legality of processing carried out before the withdrawal.
5. Cookies and tracking technologies
We use cookies and similar technologies to make the website work, remember your preferences, and measure audience and campaign performance. Tools operating on the website include:
- Google Analytics 4 and Google Tag Manager, for browsing and behavior statistics.
- Google Ads (including Enhanced Conversions), to measure campaign conversions.
- Google Site Kit, for integrating and reporting on Google tools.
We use Google Consent Mode, which adjusts data collection based on the user's choice, especially in regions that require prior consent. You can manage or block cookies in your browser settings. Some parts of the website may not work fully if you disable essential cookies.
6. Who we share your data with
Ciclicko does not sell your personal data. We only share data with partners and providers necessary to operate our services, who act as Processors under our instructions:
- Google (Analytics, Ads, Tag Manager, Site Kit, Workspace/Sheets), for analytics, campaigns, and lead storage.
- Make (Integromat), for automating and integrating incoming leads.
- Meta / WhatsApp, when you choose to talk to us via WhatsApp.
- Payment providers (e.g., Stripe), for processing subscriptions and payments.
- Website hosting and infrastructure provider.
We may also share data when required by legal obligation, court order, or a competent authority.
7. International data transfer
Some of our providers (such as Google and Make) are located outside Brazil, mainly in the United States. By using the website, your data may be transferred to and processed in these countries. In these cases, we seek to ensure that providers adopt appropriate safeguards and protection levels compatible with the LGPD.
8. How long we keep your data
We keep your personal data only for as long as necessary to fulfill the purposes of this policy, including:
- For the duration of the business relationship and the provision of services;
- For as long as necessary to comply with legal, tax, or contractual obligations;
- For as long as your consent remains valid, in the case of marketing communications.
Once these purposes have been fulfilled, your data is deleted or anonymized, except in cases where retention is authorized by law.
9. Your rights
Under Article 18 of the LGPD, you can request at any time:
- Confirmation that we process your data, and access to it;
- Correction of incomplete, inaccurate, or outdated data;
- Anonymization, blocking, or deletion of unnecessary data or data processed in violation of the law;
- Portability of your data to another provider;
- Deletion of data processed based on your consent;
- Information about who we share your data with;
- Withdrawal of consent and objection to data processing.
To exercise any of these rights, contact us through the channels listed in section 13. We may ask for information to confirm your identity before processing your request.
10. Information security
We take reasonable technical and organizational measures to protect your data against unauthorized access, loss, alteration, or improper disclosure. That said, no system is 100% foolproof; if a significant security incident occurs, we will take the steps required by the LGPD, including notifying authorities and data subjects when applicable.
11. Children and teenagers
The Ciclicko website and services are intended for people over 18 and for businesses. We do not knowingly collect data from minors. If you believe a minor has provided us with data, please contact us so we can remove it.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The current version is always available on this page, with the last update date shown at the top. We recommend checking back from time to time.
13. Contact and Data Protection Officer (DPO)
For questions about this policy, to exercise your rights, or for any matter related to personal data, contact our Data Protection Officer:
You can also file complaints with the National Data Protection Authority (ANPD), through the website gov.br/anpd.