Privacy Policy

1. Who is responsible for this website

This Privacy Policy applies to the website located at gmqsadvisory.online, published under the trade name "GMQS Advisory." That trade name is used by GMQS - Gestao Empresarial LTDA, a Brazilian limited liability company (Sociedade Empresária Limitada) registered under CNPJ 04.199.178/0001-64, with its registered office at Rua Conselheiro Lafaiete, 1925 — Apt 702, Sagrada Familia, Belo Horizonte, MG, 31.035-560, Brazil.

GMQS - Gestao Empresarial LTDA is the sole legal owner of this domain and the sole data controller for personal information collected through it. "GMQS Advisory" is not a separate legal entity, subsidiary, licensee or franchise arrangement — any reference to it in this document should be read as a reference to the registered company above.

2. Information we collect

We collect only the information that is necessary to respond to enquiries and to maintain a professional relationship with individuals who reach out through this website. Depending on how you contact us, the information collected may include:

• Identification details such as your full name and the organization you represent;
• Contact details such as your email address and telephone number;
• The content of the message you send us and any documents you choose to attach;
• Basic technical information logged automatically by our web server (IP address, browser type, date and time of access), used exclusively for security monitoring and diagnostics.

We do not knowingly collect information from individuals under the age of eighteen. Our services are directed at organizations and their representatives.

3. Why we collect it

Personal information collected through this site is used for the following purposes:

• Responding to enquiries and providing follow-up information about our services;
• Establishing and managing professional engagements with our clients;
• Meeting record-keeping and disclosure obligations under Brazilian law;
• Protecting the security and integrity of our website and technical infrastructure.

4. Legal basis

The processing of personal data described in this Policy is carried out under one or more of the legal bases set out in the Brazilian General Data Protection Law (LGPD — Lei nº 13.709/2018), including your consent, the performance of a contract or preliminary steps taken at your request, the legitimate interests of the firm, and compliance with legal or regulatory obligations.

5. Storage and retention

Personal information is stored on protected systems accessible only to authorized personnel of GMQS - Gestao Empresarial LTDA. We retain personal data for as long as it remains necessary for the purposes described above, or for as long as the law requires us to keep records of professional engagements. When data is no longer needed for any of those purposes, it is securely deleted or anonymized.

6. Sharing of information

We do not sell, rent or trade personal information collected through this website. We may share limited information with:

• Service providers who assist us with technical infrastructure (for example, email or hosting), under confidentiality obligations and only to the extent needed for the service they provide;
• Public authorities, when disclosure is required by a valid legal order or by an applicable regulation;
• Professional advisors (such as accountants or lawyers) engaged by the firm, where their involvement is necessary for a legitimate purpose.

We do not transfer personal data to affiliate networks, resellers or licensees, because we do not operate any such arrangements.

7. Cookies and analytics

Our website uses only the technical cookies strictly necessary for basic navigation. We may use aggregated, anonymous statistics to understand how the site is used and to improve its content over time. These statistics do not identify individual visitors.

8. Your rights

Under the LGPD, you have the right to request confirmation of whether we process your personal data, to access that data, to correct incomplete or inaccurate information, to request anonymization, blocking or deletion of unnecessary data, and to withdraw a consent previously given. To exercise any of these rights, please contact us using the details below and allow up to fifteen business days for our response.

9. Security measures

We adopt reasonable technical and organizational safeguards to protect the personal information under our control, including access controls, secure storage, and periodic review of our internal procedures. While no system can be considered fully immune to failure, we work continuously to reduce the risk of unauthorized access, loss or misuse.

10. Third-party links

This website may contain links to external websites operated by third parties. We are not responsible for the privacy practices or the content of those websites. We encourage visitors to review the privacy policies of any external site they visit.

11. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The date of the most recent revision is shown at the top of this page. Continued use of the website after a revision constitutes acceptance of the updated Policy.

12. How to contact us

Questions, requests and complaints related to this Privacy Policy should be directed to GMQS - Gestao Empresarial LTDA using the following contact details: