Privacy policy

1. Who processes your data

Indumaplast is the controller of the personal data submitted through this website. Address: Rua do Aço, 289 — Parque São Pedro, Itaquaquecetuba · SP · 08586-210, Brazil.

2. What we collect

We collect what you type into the website forms, plus the minimum technical data needed to record your request:

• Contact details: name, e-mail and, when provided, phone number.
• Request content: subject, message and, in the configurator, the specification you chose — format, dimensions, density, application, and the calculated volume and weight.
• Consent record: the date and time you accepted, and the exact wording you accepted.
• Technical data: site language, browser identification, and an irreversible version of your IP address. The IP itself is never stored — we keep only a derived code that cannot be turned back into the original address, used to curb automated submissions.

We do not collect sensitive personal data, we use no tracking or advertising cookies, and we do not profile visitors.

3. Why we use it

• To answer your quote or contact request.
• To keep a record of the sales conversation.
• To protect the site against automated submissions and form abuse.

We use your data for no other purpose, and we send no marketing messages unless you ask for them.

4. Legal basis

Processing relies on your consent under article 7, I of Brazilian Law 13,709/2018 (LGPD), collected when you submit the form. For the technical data used against abuse, the basis is legitimate interest (article 7, IX), limited to what site security requires.

5. Who we share it with

We neither sell nor rent your data. Your request is forwarded by e-mail to our sales team, which involves our e-mail provider acting as a processor. Beyond that, we share data only where required by law or by order of a competent authority.

6. How long we keep it

We keep the record of your contact for as long as the business relationship lasts and for the period required to meet legal obligations. Once the purpose ends, or at your request, the record is erased. Erasure is permanent: we delete name, e-mail, phone and message content, keeping only the protocol number and the request source — nothing that identifies you — for internal auditing.

7. Security

Access to records is restricted to authorised staff, with individual authentication and an audit trail of every query and change. Site traffic is encrypted and the IP address is stored only in irreversible form.

8. Cookies

The public site uses no tracking, analytics or advertising cookies. The internal administration area uses one strictly necessary cookie to keep the session of a logged-in user.

9. Your rights

Article 18 of the LGPD gives you the right to: confirm whether we process your data; access it; correct incomplete, inaccurate or outdated data; request anonymisation, blocking or erasure of unnecessary data or data processed unlawfully; request portability; be told who we share it with; be informed that you may withhold consent and what follows from that; and withdraw your consent at any time.

Withdrawal does not affect processing already carried out and may end an ongoing conversation.

10. How to exercise your rights

Use the form on the Contact page quoting the protocol number you received when you submitted the form. We will reply as soon as we can. You may also file a complaint with the Brazilian data protection authority (ANPD).

11. Changes to this policy

We may update this policy to reflect changes to the site or to the law. The version in force is always the one published on this page, with the date shown below.

In force since 25 August 2026.