Institutional documents
Learn how Tectril collects, uses, shares, stores and protects personal data across its digital environments and institutional relationships.
Privacy and data protection
This Privacy and Personal Data Protection Policy explains how Tectril Soluções em Logística e Comércio Ltda., operating under the trade name Tectril Supply Chain Solutions (“Tectril”), collects, uses, stores, shares, protects and otherwise processes personal data related to access to the website, its subdomains, forms, communication channels and other digital environments that refer to this document.
Tectril processes personal data ethically, transparently and securely, in accordance with the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados Pessoais — LGPD, Federal Law No. 13,709/2018), other applicable laws, recognized governance practices and privacy-by-design principles.
Document: Privacy and Personal Data Protection Policy
Version: Rev. 0
Effective date: July 2026
Responsible area: Privacy and Compliance
Privacy channel: [email protected]
Policy contents
This Policy clearly explains how Tectril processes personal data and the measures adopted to protect the rights and freedoms of data subjects.
It also provides guidance on the use of privacy channels and supplements the Terms of Use, the Cookie Policy and specific notices displayed in certain forms or environments.
This Policy applies to visitors to the website and its subdomains, representatives of clients and prospective clients, suppliers, service providers, partners, candidates, event participants, individuals who contact Tectril and other data subjects whose data is processed through the covered environments.
Contractual, employment, corporate or operational relationships, as well as matters related to the Integrity Channel, may be subject to additional notices and rules.
For the processing activities described in this Policy, Tectril may act as a controller, when it determines the purposes and essential means of processing, or as a processor, when it processes personal data on behalf of a client and under that client’s instructions.
When Tectril acts as a processor, data subject requests may need to be directed to the relevant client acting as controller.
Depending on the interaction, Tectril may process:
Tectril recommends that users do not submit excessive personal data, sensitive personal data or confidential documents through general-purpose forms.
Data may be obtained directly from the data subject, their company or representative through forms, email, telephone, WhatsApp Business, LinkedIn, meetings, events, proposals, contracts and other legitimate channels.
Technical information may be collected automatically by the server, website platform and cookies or similar technologies, according to the tools and settings actually in use.
Personal data may be processed to:
Depending on the circumstances, processing may rely on consent, compliance with a legal or regulatory obligation, performance of a contract or preliminary procedures, regular exercise of rights, legitimate interests, credit protection and other lawful grounds provided by the LGPD.
Consent will be requested when required and may be withdrawn without affecting processing lawfully carried out before withdrawal or processing based on another legal ground.
To the extent necessary, personal data may be shared with providers of hosting, email, technology, security, forms, storage, communications, analytics, consulting, auditing and support; companies within the same economic group; clients or partners involved in the request; and public authorities where there is a legal obligation or legitimate basis.
Tectril seeks to select providers that meet confidentiality, data protection and information security requirements. Personal data is not sold.
Certain technology providers or recipients involved in international operations may be located outside Brazil or use infrastructure in other countries.
In such cases, Tectril will adopt mechanisms and safeguards consistent with the LGPD and applicable regulations, considering the nature of the data, the purpose of the transfer and the associated risks.
The website may use cookies required for operation, security, preferences, performance, statistics and, where applicable and authorized, communications or marketing.
Non-essential cookies must be enabled according to the choices made available through the consent banner or preference manager. Details on categories, duration and providers are available in the Cookie Policy.
The website may contain maps, videos, buttons, links or embedded third-party content. Interaction with these resources may allow the relevant provider to process data under its own terms and policies.
Tectril will identify analytics, advertising, security or form tools in this Policy only when they are actually used. The provider list may be updated to reflect the website’s actual configuration.
Tectril adopts technical and administrative measures proportionate to the risks, which may include access controls, authentication, credential management, backups, updates, device protection, privilege restrictions, logs, monitoring, confidentiality clauses and incident-response procedures.
No system is completely invulnerable. Data subjects should also follow good security practices, avoid sending unnecessary information and report suspicious activity.
Personal data will be retained for the period required to fulfil the stated purposes and applicable legal, regulatory, contractual and limitation periods.
Retention may be extended to preserve evidence, conduct audits or investigations, defend rights, meet tax, customs or recordkeeping obligations and comply with legal-hold requirements. Once retention is no longer required, data will be deleted, anonymized or retained where otherwise lawfully permitted.
Under the LGPD, data subjects may request, where applicable: confirmation of processing; access; correction; anonymization, blocking or deletion of unnecessary, excessive or unlawfully processed data; portability; information about sharing; deletion of data processed on the basis of consent; information about the consequences of withholding consent; withdrawal of consent; objection; and review of decisions made solely through automated processing.
Certain rights may be restricted where data retention is required to comply with legal obligations, exercise rights, prevent fraud or satisfy another lawful basis.
Requests should be sent to [email protected].
To protect the data subject, Tectril may request reasonable information to confirm identity, representation and authority. Requests will be handled within applicable time limits and procedures and may be answered in a simplified format or by a complete statement, as provided by the LGPD.
Reports concerning ethics, integrity, fraud, harassment, discrimination, corruption or other misconduct must be submitted through the Integrity Channel rather than the general privacy email address.
Processing through that channel will be governed by a specific privacy notice and rules addressing confidentiality, anonymity where offered, non-retaliation, evidence preservation and restricted access.
Tectril’s institutional digital environments are not directed to children, and the company does not intentionally seek to collect children’s data through the website.
Where processing of children’s or adolescents’ data is necessary in another context, Tectril will observe their best interests, applicable legal grounds and appropriate safeguards.
Suspected loss, unauthorized access, disclosure or any other event involving personal data should be promptly reported to [email protected].
Tectril will assess the nature, scope and risks of the event and implement containment and remediation measures. Where required, it will notify the controller, affected data subjects and the Brazilian National Data Protection Authority (Autoridade Nacional de Proteção de Dados — ANPD).
This Policy may be updated to reflect legal, regulatory, technological, contractual or operational changes. The current version will be published on this page with its revision number and effective date.
Material changes may be communicated through a website notice or other appropriate means.
This Policy is governed by the laws of the Federative Republic of Brazil, particularly Federal Law No. 13,709/2018 (LGPD) and Federal Law No. 12,965/2014 (Brazilian Internet Civil Rights Framework), without prejudice to other applicable rules.
Questions and requests concerning personal data: [email protected].
Effective date: July 2026. Version: Rev. 0. In the event of inconsistency among language versions, the Portuguese version will prevail for interpretation in Brazil.
Related documents and channels
Consult the complementary documents and use the appropriate channel for each type of request.
