1. GENERAL INFORMATION
EnghouseSG understands how important it is to know and feel secure about the use of personal data in its possession. Therefore, we are committed to clarifying and explaining our Privacy Policy.
This Privacy Policy contains information regarding how we process the personal data of users who access our website or whose data is shared as a result of the provision of our services. Its purpose is to inform interested parties about the types of data collected, the reasons for collection, and how users may update, manage, or delete such information.
This Privacy Policy was prepared in accordance with Federal Law No. 12,965 of April 23, 2014 (Brazilian Internet Bill of Rights – Marco Civil da Internet) and Federal Law No. 13,709 of August 14, 2018 (Brazilian General Data Protection Law – LGPD).
This Privacy Policy may be updated due to regulatory changes or modifications to our processes. Therefore, users are encouraged to periodically review this section.
2. DEFINITIONS
For the purposes of this Policy, the following definitions apply:
- Legal bases: the legal grounds provided for in the LGPD that allow EnghouseSG to process personal data, such as collection, processing, storage, and sharing.
- Controller: a natural or legal person, under public or private law, responsible for decisions regarding the processing of personal data.
- Personal data: any information related to an identified or identifiable natural person.
- Sensitive personal data: personal data concerning racial or ethnic origin, religious belief, political opinion, trade union membership, or membership in a religious, philosophical, or political organization, data related to health or sexual life, genetic or biometric data, when linked to a natural person.
- Data Protection Officer (DPO): a person appointed by the Controller to act as a communication channel between the Controller, users, and the National Data Protection Authority.
- LGPD: Brazilian General Data Protection Law.
- Processing: operations carried out by EnghouseSG on personal data, including activities such as collection, production, receipt, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, deletion, evaluation, control of information, modification, communication, transfer, dissemination, or extraction.
- Data subject: the natural person to whom the personal data being processed refers.
3. WHAT PERSONAL INFORMATION DO WE COLLECT?
The personal information we obtain may be collected in the following ways:
Website: Personal information is collected when users interact with our website through contact forms. This information may include, among others, full name, corporate email address, phone number, job title, company name, and CNPJ. Users are not required to provide any personal data to browse the website. Information is provided voluntarily and only basic data is required if the user requests contact. All personal information is collected fairly and non-invasively, with voluntary consent, and is accessible only to authorized personnel.
Newsletter: Users may choose to receive our newsletter containing news, articles, and promotions by providing their full name and email address through a form on our website. Users may unsubscribe at any time by clicking the unsubscribe link included in the footer of our emails.
Customer service channels: Users may contact us via phone or chatbot tools. Personal data is collected to identify the user and address their request, which may include name, email, phone number, and any information voluntarily provided.
Cookies: Personal data may be collected through cookies. For more information, please refer to our Cookie Policy.
Data related to the provision of our services: To enable our services through the technical solutions offered, we process data of our clients’ employees who access the platform, such as name, email, login, and pre-registered password, as well as personal data detailed in documents verified by EnghouseSG for management and financial administration. EnghouseSG stores this data directly or through its infrastructure providers, according to client instructions and for the period defined by them.
For mobile device management services, EnghouseSG may also have access to personal data of clients or their employees, such as first name, last name, email, ICCID, phone number, geolocation data, and data usage records.
Sharing: We may receive personal data shared by our business partners, necessary for contract execution and/or invoice issuance, including contact email, full name, CPF, CNPJ, corporate name, responsible person’s name, phone number, full business address, and state registration, when applicable.
Job applicants: Personal data of job applicants is collected via forms available on recruitment platforms used by EnghouseSG. Collected data may include full name, email, city, state, and professional information provided by the candidate.
Employees: Personal data collected from employees is necessary for employment registration and compliance with labor legislation.
4. SOCIAL MEDIA
EnghouseSG also uses social media to communicate and interact with clients and consumers through third-party websites such as Facebook, Instagram, and LinkedIn. These platforms are not operated or controlled by EnghouseSG. By interacting with EnghouseSG’s social media pages, users may disclose personal information to EnghouseSG or third parties. Social buttons may record information about user activity. Users should review the respective privacy policies of these platforms.
The amount of personal information visible depends on the user’s privacy settings on each social media platform.
5. PURPOSES AND LEGAL BASES
Below are the purposes and legal bases for EnghouseSG’s data processing activities:
EnghouseSG relies on legitimate interest only for specific purposes, ensuring that such processing does not override the rights and freedoms of data subjects.
6. DATA SUBJECT RIGHTS
Data subjects may exercise their rights by clicking here to access the Data Subject Access Request (DSAR) form
- Confirmation of the existence of data processing;
- Access to personal data;
- Correction of incomplete, inaccurate, or outdated data;
- Data portability;
- Deletion of personal data when applicable;
- Information about data sharing;
- Withdrawal of consent, when applicable.
EnghouseSG may request additional information to confirm the data subject’s identity and may refuse requests in situations permitted by law.
7. HOW LONG DO WE STORE DATA?
Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected, in accordance with legal requirements.
8. WITH WHOM DO WE SHARE DATA?
EnghouseSG does not sell, rent, or improperly disclose personal data. Data sharing occurs only in legally permitted situations, such as compliance with legal obligations, contractual execution, or protection of EnghouseSG’s interests.
9. DATA PROTECTION OFFICER (DPO)
The Data Protection Officer is responsible for receiving complaints, providing information, and cooperating with the National Data Protection Authority (ANPD).
dataprotectionofficer@enghouse.com
10. HOW DO WE PROTECT DATA?
EnghouseSG adopts technical and organizational measures to protect personal data, including SSL encryption and incident response procedures.
Users will be notified of security incidents that may pose relevant risks to their rights and freedoms.
11. CHANGES TO THIS POLICY
This Privacy Policy was last updated on June 27, 2022.
EnghouseSG reserves the right to modify this Privacy Policy at any time. Continued use of the website implies acceptance of the updated terms.