Privacy Policy

1. General Information

Duo Consultoria & Engenharia Ltda, registered under Tax ID No. 63.560.666/0001-14, headquartered at R. São Bartolomeu, 816 - Q - 38 LT 13 CS, Jardim Planalto, Goiânia - GO, ZIP 74333-260, is committed to protecting the personal data of its customers and website visitors, in compliance with the Brazilian General Data Protection Law (LGPD - Law No. 13.709/2018).

This Privacy Policy describes how we collect, use, store, and protect your personal information in the context of consulting and engineering services.

2. Data Collected

We may collect the following information:

• Identification data: Full name, Tax ID (CPF), Company Tax ID (CNPJ), company name
• Contact data: Email, phone number, commercial address
• Professional data: Professional registration (CREA, CAU), company information
• Project data: Project specifications, technical requirements, site information
• Business data: Company information, industry sector, project needs
• Payment data: Information necessary for transaction processing
• Browsing data: IP address, browser type, pages visited
• Contractual data: Service contracts, project agreements
• Technical documentation: Engineering documents, plans, reports

3. Purpose of Data Processing

The collected data is used to:

• Provide consulting and engineering services
• Develop and manage projects
• Conduct technical analysis and studies
• Create engineering designs and plans
• Provide quality assurance services
• Coordinate with stakeholders and authorities
• Process payments
• Issue invoices and receipts
• Provide customer service
• Send project updates and information (with consent)
• Comply with professional regulatory obligations (CREA, CAU)
• Comply with legal and fiscal obligations
• Improve our services

4. Legal Basis for Processing

Data processing is performed based on:

• Consent: When you expressly authorize the use of your data
• Contract execution: To fulfill consulting and engineering contracts
• Legal obligation: To comply with professional, fiscal, and regulatory obligations
• Legitimate interest: For project coordination and professional relationship management

5. Data Sharing

Duo does not sell or commercialize personal data. We may share data only with:

• Clients: For project coordination
• Partners and subcontractors: For project execution
• Suppliers: For materials and services procurement
• Government agencies: For permits and approvals
• Professional councils: CREA, CAU for regulatory compliance
• Payment processors: For transaction processing
• Service providers: Project management systems, accounting
• Tax authorities: To comply with tax obligations
• Legal authorities: When required by law or court order

6. Data Security

We implement technical and organizational measures to protect your data:

• Encryption of payment and project data
• Access controls to customer and project information
• Secure project management systems
• Confidentiality agreements
• Security system monitoring
• Regular backups and secure storage
• Employee training on data protection
• Periodic security audits
• Professional secrecy standards

7. Your Rights as Data Subject

Under LGPD, you have the following rights:

• Confirmation and access: Confirm the existence of processing and access your data
• Correction: Request correction of incomplete, inaccurate, or outdated data
• Anonymization, blocking, or deletion: Request removal of unnecessary data
• Portability: Request data portability
• Deletion: Request deletion of data processed with consent
• Information: Obtain information about data sharing
• Revocation: Revoke consent at any time
• Opposition: Object to the processing performed

8. Cookies and Similar Technologies

We use cookies to improve your browsing experience. You can configure your browser to refuse cookies.

9. Data Retention

We retain your data for the time necessary to:

• Fulfill the purposes described in this policy
• Duration of professional relationships and contracts
• Project records: for technical responsibility purposes
• Legal prescription periods (generally 5-10 years for engineering projects)
• Professional regulatory obligations (CREA, CAU)
• Contract documentation
• Exercise of legal rights

After these periods, data will be securely deleted or anonymized.

10. International Data Transfer

Your data is stored and processed in Brazil. We do not perform international data transfers.

11. Minors

Our services are intended for legal entities and professionals over 18 years of age. We do not intentionally collect data from minors.

12. Changes to This Policy

This Policy may be updated periodically. Significant changes will be communicated by email or website notice.

13. Data Protection Officer (DPO)

We have appointed a Data Protection Officer responsible for ensuring LGPD compliance.

14. Contact

To exercise your rights or clarify questions:

We will respond to your requests within 15 calendar days, extendable by another 15 days with justification.

15. Applicable Law and Jurisdiction

This Policy is governed by the laws of the Federative Republic of Brazil, especially Law No. 13.709/2018 (LGPD). The jurisdiction of Goiânia/GO is elected to resolve any disputes.

Last updated: December 2025