Privacy policy
Last updated: 20 October 2026 · Version 2.0
This is the institutional website of FLX Sistemas. It presents the company and the systems we build and offers a form to request proposals and conversations. This policy explains what is processed here and what you can require from us under Brazil’s General Data Protection Law (Law No. 13,709/2018, “LGPD”).
1. Who we are
The controller of this website is FLX Sistemas, CNPJ 51.444.807/0001-54, V Nossa Senhora de Fátima, 1347, Ala 207, Caixa Postal 182, João Pessoa/PB, Brasil.
To reach our data protection officer (Article 41 of the LGPD), use the form on this site starting your message with “LGPD”, or call or message us on WhatsApp at +55 (83) 98789-7566.
2. What this website does not do
- It uses no cookies: no tracking, advertising or session cookies.
- It has no Google Analytics, social-media pixel or any audience-measurement tool.
- It has no sign-up, login or customer area.
- It does not build browsing profiles or run targeted advertising.
- It does not sell or share data with third parties for commercial purposes.
That is why there is no cookie-consent banner: there is nothing to consent to.
3. What is processed
a) When you use the form. We receive what you fill in (name, company, e-mail and/or phone, organisation size, timeline, the system of interest and your message), plus the page language, the date and time of submission and the originating IP address. We use this data to reply, understand your need and, where appropriate, prepare a proposal. The IP address is used only for security and to limit automated submissions. Legal basis: pre-contractual steps at your request (Article 7, V) and legitimate interest in the site’s security (Article 7, IX).
Requests are stored on our server in an area with no public access. When e-mail delivery is configured, a copy is also sent to the sales team’s mailbox.
b) When you talk to us by WhatsApp or phone. We receive what you send or say, for the same purpose and on the same legal basis.
c) Technical access logs. Like any web server, ours records technical request data (IP address, browser, date and time) to keep the site running and investigate abuse. Legal basis: legal obligation (Brazilian Internet Civil Framework) and legitimate interest.
4. Who we share data with
- Our hosting provider, which runs the site’s infrastructure.
- Our e-mail provider, when e-mail delivery of requests is active.
- WhatsApp (Meta), if you choose that channel; processing also follows the app’s terms.
- Public authorities, where required by law or court order.
5. How long we keep it
- Form requests: up to 24 months after the last interaction if they do not become a contract. If they do, contractual and tax retention periods apply.
- Technical access logs: 6 months, as required by Article 15 of the Brazilian Internet Civil Framework.
6. Security
All traffic is encrypted (HTTPS). Requests are kept out of the server’s public reach and the form limits submissions per address. If a security incident creates a relevant risk to your rights, we will notify you and Brazil’s National Data Protection Authority (ANPD), as required by Article 48 of the LGPD.
7. Your rights
The LGPD gives you, free of charge, the right to:
- confirm whether we process your data and access it;
- correct incomplete, inaccurate or outdated data;
- request anonymisation, blocking or deletion of unnecessary or excessive data;
- request portability;
- know who we share it with;
- withdraw consent and object to processing based on legitimate interest.
To exercise any of them, use the form starting your message with “LGPD”, or reach us by phone or WhatsApp. We reply within 15 days and may ask for additional information to confirm your identity first. If you are not satisfied, you can complain to the ANPD.
8. Systems we build for clients
This policy applies to this website. In the systems we build and maintain for clients, FLX acts as a processor: we handle data following the client’s instructions; the client is the controller and is responsible for the processing under its own privacy policy.
9. Screens shown in the portfolio
The screens shown are captures of the real systems made with fictitious demonstration data (seeds, fixtures or the systems’ own demo databases). Where a real person’s name appeared in a capture, it was blurred. Systems that could only be shown with real data appear in the index without screens.
10. Changes and contact
If the site starts using cookies, audience measurement or other forms, this policy will be updated before any collection. The date at the top shows the version in force.
Phone and WhatsApp: +55 (83) 98789-7566 · Address: V Nossa Senhora de Fátima, 1347, Ala 207, Caixa Postal 182, João Pessoa/PB, Brazil · CNPJ 51.444.807/0001-54.