NWLAB privacy policy.

1. Who we are

This policy describes how Neverwinter Lab Consultoria e Marketing Ltda, Brazilian tax ID (CNPJ) 45.929.574/0001-87, handles personal data collected through the site nwlab.com.br.

It applies to the public pages of the site, to the contact flow of the Diagnostic and to the interactions started from the channels presented here.

2. Which data we may collect

The data varies with the interaction. Today, on the public site, that mainly includes:

• Identification and contact data sent by you, such as name, email and phone.
• Commercial information provided in the Diagnostic, such as type of business, service of interest, revenue range and context of the request.
• Basic technical data generated by browsing and by the infrastructure, such as IP address, date, time, browser and access logs, when needed for security and operation.
• Additional information you decide to include on your own in messages, emails or forms.

3. How the data is used

The data may be processed for legitimate purposes proportional to the contact you started:

• Answering requests, questions and commercial inquiries.
• Assessing how well the need you presented matches the services NWLAB offers.
• Organizing the response, the initial diagnostic, the proposal and later commercial communication.
• Recording contact history, preventing abuse and preserving operational security.
• Complying with legal and regulatory obligations, or responding to valid requests from a competent authority.

4. Legal bases

Processing may take place, depending on the case, on the basis of preliminary procedures related to a contract, legitimate interest, compliance with a legal obligation and, where applicable, consent.

Where consent is the appropriate basis, you may withdraw it under the terms of the LGPD, the Brazilian data protection law, without affecting the processing already carried out legitimately until then.

5. Sharing with third parties

NWLAB does not sell personal data. Sharing may happen only with partners and vendors that make the operation of the site and of the service possible, always within the minimum needed for each purpose.

In the current implementation of the site, that may include:

• Hosting, security and technical infrastructure services.
• Providers used to receive and forward forms.
• Email and commercial communication tools.
• Google, through Google Analytics, for aggregate audience and site usage metrics.

The Diagnostic form is currently forwarded by a third-party form processing service. That means the data you send travels through that provider on its way to the NWLAB contact channel.

6. Cookies, analytics and browsing data

The specific policy on cookies is in the Cookie Policy. In short, the site uses Umami (self-hosted analytics, no cookies) and Google Analytics 4 to measure audience and page usage. There are no marketing or advertising tracking scripts on the public frontend.

Even so, technical data and infrastructure logs may exist to maintain the security, availability and integrity of the operation.

7. Retention and security

We keep personal data for as long as needed to fulfill the purposes of this policy, preserve legitimate operational history, meet legal obligations or exercise rights in administrative, arbitral or judicial proceedings.

We adopt reasonable technical and organizational measures to reduce the risk of unauthorized access, loss, improper alteration or use incompatible with these purposes. Even so, no system connected to the internet offers an absolute guarantee of security.

8. Your rights as a data subject

Under the LGPD, you may request, where applicable:

• Confirmation that processing exists.
• Access to, correction of or update of incomplete, inaccurate or outdated data.
• Anonymization, blocking or deletion of data processed unnecessarily or irregularly.
• Information about the sharing that has taken place.
• Portability, where appropriate and technically feasible.
• Withdrawal of consent and objection to processing based on specific legal grounds, where applicable.

To exercise these rights, send your request to contato@nwlab.com.br. We may ask for additional information to confirm your identity and avoid improperly exposing data to third parties.

9. Updates to this policy

This policy may be adjusted whenever there is a relevant change in the operation of the site, in the integrations used or in the applicable legal requirements. The update date at the top indicates the version currently in force.