1. Data controller and governing principles
Universitas (referred to as "we", "us", or "our consultancy") is committed to protecting the privacy and personal data of researchers, partners, and institutional clients engaging with our platform and consulting services.
This Privacy Policy is established in full compliance with the Brazilian General Data Protection Law (LGPD, Law No. 13,709/2018) as well as the General Data Protection Regulation (GDPR) principles of purpose limitation, necessity, transparency, and data integrity.
For data governance inquiries or rights requests, our primary contact is: Email.
2. Data collected and processing purposes
We only gather personal data strictly necessary to respond to your research proposals and project inquiries:
- Proposal Request Form: Full name, institutional email, organization, phone number, sector, desired service, and inquiry brief. Legal basis: preparatory contractual steps initiated at the request of the data subject (LGPD Art. 7, V; GDPR Art. 6(1)(b)).
- Direct Inquiries: Messages exchanged via email or WhatsApp regarding research methodology, scope, or deadlines.
3. Third-party service providers
We partner with privacy-centric technical infrastructure providers:
- Web3Forms: Operates solely as an encrypted submission router to deliver contact form inquiries directly to our secure inbox without secondary commercial use or persistent data harvesting.
- GoatCounter: Privacy-first analytics tool. It uses no cookies, stores no personal IP addresses, and does not track users across websites. All analytical metrics are aggregated and anonymous.
4. Data custody in empirical research engagements
In client engagements involving primary field collection (interviews, surveys) or secondary data extraction, we enforce rigorous pseudonymization and anonymization protocols. Research data is stored in encrypted repositories and handled in accordance with academic ethics boards and legal frameworks.
5. Your rights as a data subject
Under LGPD (Article 18) and international privacy laws, you are entitled to:
- Confirm the existence of processing of your data;
- Access your stored personal information;
- Request correction of inaccurate or incomplete data;
- Request deletion of data processed on the basis of consent;
- Revoke previously granted consent at any time.
To exercise your rights, please email us via Email.
6. Policy updates
This policy may be updated periodically to mirror legal changes and technical enhancements.
Last revised: March 2026.