Privacy Policy


XERFAN ADVOCACIA S/S prioritizes the protection of personal data, ensuring all necessary aspects of security and privacy. We are also committed to transparency in the processing of personal data for our stakeholders. Therefore, this Privacy Policy establishes how the collection, use, and transfer of information from clients or other individuals accessing or using our website are carried out. 

By using our services, you understand that we collect and use your personal information as described in this Policy, in accordance with the General Data Protection Law (LGPD, Federal Law 13.709/2018), the consumer protection provisions of Federal Law 8078/1990, and other applicable Brazilian legal regulations. 

XERFAN ADVOCACIA S/S, in the role of Data Controller, undertakes to comply with the provisions of this Privacy Policy.

1. What data do we collect about you and for what purpose? 

Our website collects and uses some of your personal data to facilitate the provision of services and enhance the user experience. 

  • Personal data provided by the data subject 
  • Data provided by users (contact information, professional data, financial or technical information); 
  • Browsing data (e.g., IP address, location, country, browsing time, access time) or data that arises from your interaction with our website;
  • Cookies and internet tracking systems;
  • Information about the user’s religious beliefs is collected when they fill out their registration.

2. Consent 

We process your personal data based on your consent. Consent is the voluntary, informed, and unambiguous expression by which you authorize us to process your data. 

Therefore, in accordance with the General Data Protection Law, your data will only be collected, processed, and stored with prior and explicit consent. 

Your consent will be obtained specifically for each purpose described above, demonstrating the commitment to transparency and good faith of XERFAN ADVOCACIA S/S towards its users/customers, in compliance with relevant legislative regulations. 

When using the services of XERFAN ADVOCACIA S/S and providing your personal data, you are aware of and consenting to the provisions of this Privacy Policy, as well as being informed of your rights and how to exercise them. 

At any time and at no cost, you may revoke your consent. 

It is important to note that revoking consent for data processing may result in the inability to properly perform certain website functionalities that rely on such operations. Such consequences will be provided in advance.


3. What are your rights? 

XERFAN ADVOCACIA S/S ensures its users/customers their rights as data subjects provided for in Article 18 of the General Data Protection Law. Therefore, you can, free of charge and at any time: 

  • Confirm the existence of data processing, in a simplified or clear and comprehensive format; 
  • Access your data, being able to request them in a readable copy in printed or electronic form, secure and reliable; 
  • Correct your data by requesting their editing, correction, or updating; 
  • Limit your data when unnecessary, excessive, or processed in non-compliance with the legislation through anonymization, blocking, or deletion; 
  • Request the portability of your data through a report of your registration data; f. Delete your data processed based on your consent, except in cases provided by law; g. Revoke your consent, withdrawing authorization for the processing of your data; 
  • Be informed about the possibility of not providing your consent and the consequences of refusal.

4. How can you exercise your rights as a data subject? 

To exercise your rights as a data subject, you should contact us through the available means: 

– Email 

– Phone 

In order to ensure your proper identification as the data subject of the requested personal data, we may ask for documents or other evidence to verify your identity. In such cases, you will be informed in advance.

5. How and for how long will your data be stored? 

Your collected personal data will be used and stored for the necessary duration to provide the service or achieve the purposes outlined in this Privacy Policy, considering the rights of data subjects and controllers. 

In general, your data will be retained for the duration of the contractual relationship between you and XERFAN ADVOCACIA S/S. Once the storage period for personal data has ended, they will be deleted from our databases or anonymized, except in cases legally provided for in Article 16 of the General Data Protection Law, namely: 

  • Compliance with a legal or regulatory obligation by the controller; 
  • Research purposes by a research entity, ensuring, whenever possible, the anonymization of personal data; 
  • Transfer to a third party, respecting the data processing requirements stipulated by this Law; or 
  • Exclusive use by the controller, with no access granted to third parties, and with the data anonymized. 

Essential personal information necessary to comply with legal, judicial, and administrative determinations and/or to exercise the right of defense in legal and administrative proceedings will be retained, regardless of the deletion of other data. 

The storage of collected data reflects our commitment to the security and privacy of your data. We employ measures and technical protection solutions to ensure the confidentiality, integrity, and inviolability of your data. Additionally, we have appropriate security measures in place to address the risks and control access to stored information.

6. What do we do to keep your data secure? 

To maintain the security of your personal information, we utilize physical, electronic, and managerial tools focused on protecting your privacy.

We apply these tools considering the nature of the collected personal data, the context and purpose of the processing, and the risks that potential breaches pose to the rights and freedoms of the data subjects. 

Among the measures we adopt, the following are highlighted: 

  • Only authorized personnel have access to your personal data. 
  • Access to your personal data is granted only after a commitment to confidentiality. c. Your personal data is stored in a secure and reliable environment. 

XERFAN ADVOCACIA S/S is committed to adopting the best practices to prevent security incidents. However, it is important to note that no online platform is entirely secure and free from risks. Despite our security protocols, incidents caused solely by third parties, such as cyberattacks by hackers, or due to the negligence or imprudence of the user/client, may occur. 

In the event of security incidents that may pose a significant risk or harm to you or any of our users/clients, we will notify the affected parties and the National Data Protection Authority, in accordance with the provisions of the General Data Protection Law.

7. With whom can your data be shared? 

XERFAN ADVOCACIA S/S, aiming to protect your privacy, will not share your personal data with any unauthorized third parties. 

Your data may be shared with future business partners, and we will inform you about the data that will be shared and with whom it will be shared. These partners will only receive your data to the extent necessary for the provision of contracted services, and our contracts comply with the data protection regulations of the Brazilian legal framework. However, our partners have their own Privacy Policies, which may differ from this one. We recommend reading their documents. 

Additionally, there are other situations in which your data may be shared, including: 

  • Legal determination, request, requisition, or court order with competent judicial, administrative, or governmental authorities. 
  • Cases of corporate transactions such as merger, acquisition, and incorporation, automatically. 
  • Protection of the rights of (company name) in any type of conflict, including judicial ones.

8. International data transfer 

Some of the third parties with whom we share your data may be located or have facilities located in foreign countries. In any case, your personal data will be subject to the General Data Protection Law and other Brazilian data protection laws. 

XERFAN ADVOCACIA S/S is committed to adopting efficient standards of cybersecurity and data protection to ensure compliance with legislative requirements. 

By agreeing to this Privacy Policy, you consent to such sharing, which will occur in accordance with the purposes described in this document.

9. Cookies or browsing data 

XERFAN ADVOCACIA S/S uses Cookies, which are text files sent by the platform to your computer and stored on it, containing information related to website navigation. In summary, Cookies are used to enhance the user experience. 

By accessing our website and consenting to the use of Cookies, you acknowledge and accept the use of a data collection system through the use of Cookies on your device. 

You can change permissions, block, or refuse Cookies at any time and at no cost. However, revoking consent for certain Cookies may hinder the proper functioning of some platform features. 

To manage your browser’s cookies, you can do so directly in the browser settings in the Cookies management area. You can access tutorials on the subject directly through the links below: 

  • If you use Internet Explorer. 
  • If you use Firefox. 
  • If you use Safari. 
  • If you use Google Chrome. 
  • If you use Microsoft Edge. 
  • If you use Opera. 

10. Changes to this Privacy Policy 

We reserve the right to modify this Privacy Policy at any time, especially to adapt to any changes made to our website or to legislative scope. We recommend that you review it frequently. 

Any changes will take effect upon publication on our website, and we will always notify you of the changes that have occurred.

By using our services and providing your personal data after such modifications, you consent to them.

12. Responsibility 

XERFAN ADVOCACIA S/S acknowledges the responsibility of the agents involved in data processing processes, in accordance with Articles 42 to 45 of the General Data Protection Law. 

We commit to keeping this Privacy Policy updated, observing its provisions, and ensuring compliance. 

We also commit to seeking secure technical and organizational conditions capable of protecting the entire data processing process. 

If the National Data Protection Authority requires us to take actions regarding the data processing carried out by our organization, we commit to following them.


13. Disclaimer 

As mentioned in Topic 6, although we adopt high security standards to prevent incidents, no online platform is entirely risk-free. Therefore, XERFAN ADVOCACIA S/S is not responsible for: 

  • Any consequences arising from the negligence, recklessness, or incompetence of users regarding their individual data. We guarantee and take responsibility solely for the security of data processing processes and compliance with the purposes described in this document. 
  • Emphasize that the user is responsible for the confidentiality of their access data. 
  • Malicious actions by third parties, such as hacker attacks, except in cases of proven negligent or deliberate conduct by XERFAN ADVOCACIA S/S. 
  • Highlight that in the event of security incidents that may pose a relevant risk or damage to you or any of our users/clients, we will notify the affected parties and the National Data Protection Authority of the occurrence and take the necessary measures. 
  • Inaccuracy of information entered by the user/client in the records necessary for the use of XERFAN ADVOCACIA S/S services. 
  • Any consequences arising from false or bad-faith information, which are entirely the responsibility of the user/client. 

14. Data Protection Officer 

If you have any questions about this Privacy Policy or the personal data we process, you can contact our Data Protection Officer through the following channels:

Business phone: +55 (91) 98397-2227