Privacy Policy
Last updated: 4 September 2026.
Draft, pending legal review. What follows describes exactly what this site does today, checked against the code itself. It has not yet been reviewed by Leonnes’ legal counsel and should not be published as final until it has.
Who the controller is
Leonnes Cybersecurity is the controller of the personal data handled on this site. For anything to do with privacy, write to info@cyberleonnes.com.
What we collect
Little, and what there is comes from you, deliberately.
| Data | When | What for |
|---|---|---|
| Name | When you send the demo form | Knowing who we are talking to |
| Work e-mail | When you send the form | Replying to your request |
| Message | When you send the form | Understanding your situation before we call |
| Theme preference | When you switch light/dark | Keeping your choice for next time |
| Consent record | When you answer the privacy notice | Not asking twice, and honouring your answer |
The last two rows never leave your browser: they live in your own device’s local storage and are never sent to us.
Audience measurement, only with your consent
Without your permission Google Analytics does not load: no Google script and no request to Google, not even anonymous pings. No social pixel, no heatmap, no session recording. Typefaces are served from this domain rather than from an outside service, so loading them sends no request anywhere else.
If you accept measurement in the privacy notice, the consent signal becomes
“granted” and Google Analytics 4 records the pages you visit, technical data
about your browser and an anonymous visit identifier (the _ga cookies); Google
uses the IP address to approximate location and does not store it. You can
withdraw consent at any time under Cookie settings, in the footer of every
page.
Legal basis
Handling the form data rests on article 7 of Brazil’s LGPD: your consent in sending it (item I) and the steps preliminary to the contract you asked about (item V). The theme preference and the consent record exist to provide the thing you asked for and are shared with nobody.
Who we share it with
Nobody, for marketing. Form submissions are read by the Leonnes team answering your request.
Three suppliers take part in running the site, and a fourth only with your consent:
- Cloudflare, which hosts and delivers these pages. Like any server, it processes your IP address and technical request data to deliver the content and protect the service from abuse.
- Cloudflare Turnstile, which checks that a human is sending the form. It is designed to work without tracking cookies and is not used to profile visitors.
- Brevo (Sendinblue SAS, France), which delivers your form message to the Leonnes team and the acknowledgement to you, and keeps your name and e-mail in Leonnes’s contact list for following up on your request.
- Google (Google Analytics 4), loaded only if you accept audience measurement — until then nothing is sent to Google, as described above.
International transfer
Cloudflare’s infrastructure is distributed globally, Brevo operates in the European Union and Google in the United States and other countries, which means data is processed outside Brazil. The transfers rest on each supplier’s contractual safeguards, under chapter V of the LGPD.
How long we keep it
Form messages are kept for as long as it takes to reply and to carry the resulting conversation, then deleted. What sits in your browser stays until you clear it — see the Cookie Policy.
Your rights
Article 18 of the LGPD gives you, among others, the right to confirm that processing exists, to access your data, to correct it, to ask for its deletion, to request portability and to withdraw consent at any time.
To exercise any of them, write to info@cyberleonnes.com. We will answer within the statutory period.
Security
This site is served over HTTPS only and applies a content security policy that restricts where scripts, styles and images may be loaded from. No measure removes risk entirely, and we will not claim otherwise.
Changes
A material change to this policy changes the date at the top of this page. If we begin handling data in a new way, it will be said here before it happens, not after.