1. Controller and contact
Iris Data Technology Ltda., CNPJ 27.164.777/0001-48, headquartered at Rua Eng. Jean Buff, 71, São Paulo/SP, CEP 02417-180, is the controller for the processing described in this notice. Privacy questions and requests can be sent to contact@irisdatatech.com.
2. Scope
This notice covers the Iris Data Tech corporate website, direct commercial contact and institutional communications. IrisFlow, IrisTarget and other products may have supplemental notices for their own service-specific processing.
3. Data and purposes
We may process information voluntarily submitted through contact channels, such as name, business email, company, role and message, as well as technical information needed for website security and operation. We use it to respond to requests, prepare or manage commercial relationships, provide support, protect the website and comply with legal obligations.
5. Legal bases, sharing and retention
Processing uses the applicable legal basis for each situation, including consent when requested, contract-related steps, legal obligations, legitimate interest after a documented assessment, and regular exercise of rights. We do not sell personal data. We may share the minimum necessary with service providers or authorities when legally required. Data is retained only for the period necessary for the disclosed purpose, security, legal obligations or defense of rights.
6. Your rights
You may request confirmation, access, correction, anonymization, blocking, deletion where applicable, portability, information about sharing, review of automated decisions where applicable, and revocation of consent. We may request information necessary to verify identity and protect third parties. See Data Subject Rights.
7. Updates
This notice may be updated for legal, technical or operational reasons. The current version will remain available on this page.