Privacy policy
Privacy policy
Last updated: 17 September 2026.
Who we are
TraceTus (“TraceTus”, “we”) is the controller of the personal data processed on this website, tracetus.com. Contact for privacy matters: [email protected].
What data we process and why
Contact form. Name, e-mail, company (optional) and the message you send. We use these details solely to reply to your request and to follow up on the conversation you started. Legal basis: steps taken at the request of the data subject prior to entering into a contract (GDPR, art. 6(1)(b); LGPD, art. 7, V) and our legitimate interest in responding to those who contact us.
Access statistics. We use Cloudflare Web Analytics, which does not use cookies or device identifiers and does not track visitors across sites. It records aggregated data only (pages visited, country, browser type, loading performance). Legal basis: legitimate interest in maintaining and improving the site.
Technical logs. As with any website, the hosting provider records technical connection data (IP address, date and time, resource accessed) for security and abuse prevention. Legal basis: legitimate interest. Cloudflare, which serves the site, applies bot detection through a lightweight script that does not use tracking cookies or identify individuals. Legal basis: legitimate interest in security.
We do not use tracking, advertising or profiling cookies. We do not sell or share personal data for third-party purposes.
Who we share data with
Processors acting on our behalf, only to the extent necessary:
- Cloudflare — site hosting, protection and access statistics.
- Resend — delivery of the e-mail generated by the contact form.
- Google Workspace — the mailbox that receives the messages.
These processors may process data outside Brazil and the European Economic Area. In such cases the transfer is covered by standard contractual clauses and by the safeguards provided for in the GDPR (Chapter V) and the LGPD (art. 33).
We may also disclose data where required by law or by order of a competent authority.
Personal data and the blockchain network
No personal data is written to Rede Blockchain Brasil or to any other network by TraceTus services, not even as a hash. Records involving individuals receive an internal identifier; the link to the person is kept off-chain and can be deleted.
How long we keep data
Contact-form messages are kept for as long as needed to handle the request and for no longer than 24 months after the last contact, unless a contractual relationship or legal obligation requires a longer period. Access statistics are aggregated and do not identify individuals. Technical logs follow the hosting provider’s retention periods.
Your rights
You may at any time request: confirmation of processing; access to your data; rectification of incomplete, inaccurate or outdated data; anonymisation, blocking or erasure; portability; information about sharing; and withdrawal of consent, where applicable (GDPR, arts. 15–22; LGPD, art. 18). To exercise these rights, write to [email protected]. We reply within the statutory period.
You may also lodge a complaint with the Brazilian National Data Protection Authority (ANPD) or, if you are in the European Union, with the data protection authority of your country.
Security
We apply appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS), access control and data minimisation.
Minors
This site is not intended for people under 18 and we do not knowingly collect data from children or adolescents.
Changes
This policy may be updated. The date at the top indicates the current version. Material changes will be highlighted on this page.