Privacy and data protection

Privacy Policy

What we do with personal data on this site — and what you can require from us.

Last updated

July 29, 2026

This policy explains which personal data Horus Safety processes when you visit horussafety.com, open the chat or contact us, for what purpose, for how long and what your rights are. It covers this website. It does not cover the Horus Safety platform deployed inside a client plant, whose processing is governed by the contract for each deployment.

01Who controls your data

Horus Safety is the controller of the personal data processed on this website — it decides the purposes and means of processing (art. 5, VI of the Brazilian LGPD; art. 4(7) of the GDPR).

Requests from data subjects, questions about this policy and communications from authorities should be addressed to the data protection channel at the end of this page.

02What data we process

This site has no forms, no sign-up and no logged-in area. Data reaches us in four ways:

What you tell the chat. The chat is our main contact channel. Whatever you type there — typically name, company, role, e-mail, phone and a description of your operation — is processed to answer you and prepare a proposal.
What you send by e-mail or WhatsApp. Same content, different channel.
Browsing data, if you allow analytics. Pages viewed, visit duration, traffic source, language, device type, approximate location by country or region, and the campaign that brought you here.
Advertising data, if you allow advertising. Identifiers that let Google measure which ad generated your contact and show you Horus Safety ads on other sites.

Our hosting provider also records technical access logs — IP address, date and time, requested address and browser identification — for site security and availability.

We do not process sensitive personal data through this website, and we do not make automated decisions with legal effects on you.

03Purposes, legal bases and retention

Purpose	Legal basis (LGPD / GDPR)	Retention
Answering your contact and preparing proposals	Pre-contractual steps — art. 7, V / art. 6(1)(b)	5 years after the last contact
Measuring audience and campaign performance	Consent — art. 7, I / art. 6(1)(a) and art. 5(3) ePrivacy	14 months
Advertising measurement and remarketing	Consent — art. 7, I / art. 6(1)(a) and art. 5(3) ePrivacy	Up to 90 days for click identifiers; see the Cookie Policy
Site security and availability	Legitimate interests — art. 7, IX / art. 6(1)(f)	6 months
Complying with legal obligations and defending claims	Legal obligation and legal claims — art. 7, II and VI / art. 6(1)(c) and (f)	As required by law

04The chat

The chat is operated by Typebot. Its script is not loaded when you open the page — only when you click to start a conversation. Until then, no request is made to the chat provider and no identifier is stored.

A conversation is a lead: what you write is stored by Typebot and reaches our commercial team. Please do not send sensitive data, credentials, or third-party personal data through the chat — it is not the right channel for that.

05Advertising and remarketing

With your consent, we use Google Ads to measure which advertisement generated a contact and to run remarketing — showing Horus Safety advertising to people who have already visited this site, on other sites and platforms in the Google network.

This is the most intrusive processing on this site, which is why it sits in its own consent category and starts switched off. Refusing it changes nothing about the content or functionality you get here.

You can also limit ad personalisation directly with Google, at myadcenter.google.com, independently of the choice you make here.

07International data transfers

These providers process data outside Brazil, including in the United States and the European Union. For those transfers we rely, in Brazil, on standard contractual clauses and the other instruments of art. 33 of the LGPD and ANPD Resolution 19/2024; and, in the European Union, on the EU-U.S. Data Privacy Framework adequacy decision — under which Google LLC is certified — and on the standard contractual clauses of art. 46 of the GDPR.

08Security and fonts

The site is served over HTTPS only and is statically generated: there is no database, form or admin panel exposed to the internet.

Typography is self-hosted. Many sites load fonts from Google servers, which transmits the visitor IP address to Google on every page view, with no possible consent — the page cannot render without the font. We host the font files ourselves, so that request does not happen.

No system is infallible. In the event of a security incident with relevant risk, we will notify the Brazilian authority (ANPD) within the deadline of ANPD Resolution 15/2024 and, where the GDPR applies, the competent authority within 72 hours.

09Your rights

At any time and free of charge, you may:

confirm whether we process your data and access it;
correct incomplete, inaccurate or outdated data;
request anonymisation, blocking or deletion of unnecessary or non-compliant data;
request portability to another provider;
withdraw consent and be informed of the consequences;
find out which entities we shared your data with;
object to processing based on legitimate interests;
lodge a complaint with a data protection authority.

We reply in simplified form immediately and, for full access, within 15 days (art. 19 of the LGPD). Where the GDPR applies the deadline is 1 month, extendable by 2 further months in complex cases (art. 12(3)). We may ask for additional information to confirm your identity first — a safeguard, not an obstacle.

Complaints may be filed with the ANPD in Brazil or, in the European Union and the United Kingdom, with the supervisory authority of your country of residence (art. 77 of the GDPR).

10Notice for United States residents

We do not sell personal information for money. Because this site uses Google Ads remarketing, allowing the advertising category may constitute "sharing" for cross-context behavioural advertising under the CCPA/CPRA and comparable state laws. Refusing that category, or leaving it off, means no such sharing takes place.

This site honours the Global Privacy Control (GPC) signal: if your browser sends it, analytics and advertising are automatically disabled and the banner is not displayed.

We do not use sensitive personal information to infer characteristics. Commercial e-mail identifies the sender, includes a physical address and offers an opt-out; promotional WhatsApp or SMS messages are sent only with prior consent.

11Children

This is a B2B site aimed at industrial safety and maintenance professionals. It is not directed at anyone under 18 and we do not knowingly collect children’s data. If we become aware that we have, we will delete it.

12Changes to this policy

We may update this policy to reflect changes to the site or to the law; the date at the top shows the last revision. Changes that broaden the purposes subject to consent restart consent collection, and the banner will appear again.

Exercising your rights

Talk to us about your data

Requests for access, correction, deletion, portability or withdrawal of consent — and any question about this policy — should be sent to the channel below. Mark the subject as "Privacy" to speed up handling.

E-mail: contact@horussafety.com