Privacy Policy.

The data controller responsible for the processing described in this Privacy Policy is:

For privacy-related questions or requests concerning your personal data, contact hello@juerana.com.

Juerana Advisory currently collects personal data primarily through the website’s contact form. When you submit the form, we may collect:

• Name
• Organisation / company
• Email address
• Topic of your enquiry
• Message or other information you choose to provide

You should avoid providing sensitive personal information or other information that is not necessary for your enquiry.

The website does not currently use analytics, advertising pixels, marketing trackers or other tracking technologies.

Your personal data is collected when you voluntarily submit the contact form on the Juerana Advisory website. The information you provide is:

• recorded in HubSpot CRM as a contact or lead; and
• sent by email to arthur.anunciacao@juerana.com so that your enquiry can be reviewed and answered.

The website itself does not maintain a separate database of contact-form submissions.

We use the personal data submitted through the contact form for the following purposes:

Responding to enquiries

To read, assess and respond to your enquiry, including questions about Juerana Advisory’s services, potential collaborations, projects or other business matters.

Managing potential business relationships

Where your enquiry relates to a potential project, collaboration or professional relationship, we may use your information to communicate with you and take steps requested by you before entering into a professional relationship or contract.

Maintaining business records

We may retain relevant correspondence and contact information where reasonably necessary to maintain records of business enquiries, establish or defend legal claims, or comply with applicable legal obligations.

We do not currently use contact-form information for automated marketing campaigns or add contacts to a newsletter or mailing list.

Under the EU General Data Protection Regulation (GDPR), personal data must be processed on an applicable legal basis. The AEPD identifies several possible legal bases, including consent, contractual/pre-contractual measures, legal obligations and legitimate interests.

For contact-form enquiries, the relevant legal basis will generally be:

Taking steps at your request

Where you contact Juerana Advisory regarding a potential service, project or professional relationship, processing your information may be necessary to respond to your request and take steps at your request before entering into a contract.

Legitimate interests

Where appropriate, we may process information where this is necessary for the legitimate interests of Juerana Advisory, such as managing genuine business enquiries, maintaining appropriate business records, protecting our services and establishing or defending legal claims, provided that these interests do not override your rights and freedoms.

Legal obligations

Where processing is necessary to comply with a legal obligation applicable to Juerana Advisory.

Consent

Where we specifically request your consent for a particular processing activity, we will rely on your consent for that activity. Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Not currently.

The Juerana Advisory website does not currently operate a newsletter or automated marketing mailing list. Submitting the contact form does not automatically subscribe you to marketing communications.

If Juerana Advisory introduces newsletters, promotional communications or other optional marketing activities in the future, the relevant privacy information and consent mechanism will be updated where required.

Your contact-form information is processed through the following services:

HubSpot

Contact-form submissions are recorded in HubSpot CRM so that Juerana Advisory can manage enquiries and potential business relationships. HubSpot acts as a service provider / processor in relation to applicable processing carried out on behalf of Juerana Advisory.

Email services

Your enquiry is also sent by email to arthur.anunciacao@juerana.com through the email infrastructure used by Juerana Advisory.

Website infrastructure

The website is served through Lovable’s infrastructure and global CDN/edge infrastructure. The website uses HTTPS/SSL to protect communications.

We do not currently sell, rent or otherwise commercially disclose contact-form personal data to third parties.

Personal data may nevertheless be disclosed where necessary to service providers supporting the operation of the website and business, where legally required, or where necessary to establish, exercise or defend legal claims.

Some service providers used by Juerana Advisory may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, Juerana Advisory will take the measures required by applicable data-protection law, including relying where applicable on an adequacy decision, appropriate safeguards such as Standard Contractual Clauses, or another legally recognised transfer mechanism.

Information about relevant international transfers and safeguards can be requested by contacting hello@juerana.com.

This section is particularly relevant because services such as CRM and cloud infrastructure may involve international processing. The AEPD identifies information about third-country recipients and applicable transfer safeguards as part of the information provided to data subjects.

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected. For contact enquiries, information may be retained for the period necessary to:

• respond to and manage the enquiry;
• manage an ongoing or potential professional relationship;
• maintain appropriate business records;
• comply with legal or accounting obligations; or
• establish, exercise or defend legal claims.

Where information is no longer required, it will be deleted or otherwise securely disposed of, subject to applicable legal retention requirements.

If you are subject to the GDPR, you may have the right, depending on the circumstances, to:

• Access your personal data;
• Correct inaccurate or incomplete personal data;
• Request deletion of your personal data;
• Request restriction of processing;
• Object to certain processing;
• Request portability of personal data where applicable;
• Withdraw consent where processing is based on consent; and
• Obtain information about how your personal data is processed.

The AEPD identifies access, rectification, erasure, restriction, objection and portability among the principal GDPR rights.

To exercise your rights, contact hello@juerana.com. Please provide sufficient information for us to identify your request and verify your identity where reasonably necessary.

You will not normally be charged for exercising your rights. Requests should generally be answered within one month, although applicable law allows an extension in certain circumstances.

Where the Brazilian Lei Geral de Proteção de Dados Pessoais (LGPD) applies, you may also have rights under Brazilian data-protection law. These may include, as applicable:

• confirmation that your personal data is being processed;
• access to your personal data;
• correction of incomplete, inaccurate or outdated data;
• information about the entities with which your data has been shared;
• anonymisation, blocking or deletion in applicable circumstances;
• deletion of personal data processed on the basis of consent, subject to legal exceptions;
• revocation of consent;
• information about the possibility and consequences of refusing consent where consent is required; and
• other rights provided by the LGPD.

The ANPD identifies these among the rights available to data subjects under the LGPD.

To exercise applicable rights, contact hello@juerana.com.

Requests should first be addressed directly to the controller. Where a person believes their rights under the LGPD have not been properly addressed, they may have the possibility of submitting a petition to the Brazilian data protection authority (ANPD), subject to the applicable requirements.

If you are located in Spain or otherwise subject to EU data-protection law, you have the right to lodge a complaint with a competent data-protection supervisory authority.

In Spain, the relevant supervisory authority is the Agencia Española de Protección de Datos (AEPD). You can find information about exercising your rights and making complaints through the AEPD’s official website.

This does not affect your right to contact Juerana Advisory directly first.

Juerana Advisory takes reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

The website is served over HTTPS/SSL. Access to contact information is limited to what is reasonably necessary for managing enquiries and the business.

However, no method of transmission or electronic storage can be guaranteed to be completely secure.

The Juerana Advisory website currently does not use cookies. The website does not currently use:

• Google Analytics;
• advertising pixels;
• Meta Pixel;
• behavioural tracking;
• advertising cookies;
• marketing cookies; or
• other non-essential tracking technologies.

The website’s language selection operates through the URL and does not require a cookie.

If cookies or other tracking technologies are introduced in the future, this Privacy Policy and the Cookie Policy will be updated accordingly and, where legally required, an appropriate consent mechanism will be implemented before non-essential cookies are used.

The Juerana Advisory website may contain links to third-party websites or platforms, including professional networks or external resources.

Juerana Advisory is not responsible for the privacy practices, content or security of third-party websites. We recommend reviewing the privacy policies of any external website you visit.

Juerana Advisory does not currently use the personal data collected through the website to make decisions based solely on automated processing or profiling that produce legal or similarly significant effects on individuals.

Juerana Advisory may update this Privacy Policy from time to time to reflect changes to the website, services, technology, legal requirements or the way personal data is processed.

The latest version will always be published on this page, together with the date of the latest update.

If you have questions about this Privacy Policy or wish to exercise your data-protection rights, please contact:

Last updated: 25 September 2026