Sped Total Privacy Policy
This document explains how Sped Total collects, uses, stores, protects, and shares personal data in connection with its services, platform, website, and support channels.
Introduction
This Privacy Policy explains how Sped Total processes your personal data under Brazil’s General Personal Data Protection Law — LGPD, Law No. 13,709/2018 — and other applicable rules.
We recommend reading this document in full to clearly understand which data may be processed, for what purposes, how long they are retained, and which rights the data subject may exercise.
1. Definitions
- User: all natural persons who are adults with legal capacity, or who lack legal capacity in whole or in part and are duly represented or assisted, who use the Sped Total website, platform, or services.
- Personal data: information or a set of information relating to an identified or identifiable natural person.
- Purpose: the objective to be achieved through each personal data processing activity.
- Necessity: the justification for collecting and using personal data, limited to the minimum necessary to achieve the intended purpose.
- Legal bases: grounds provided by law that authorize the processing of personal data for a specific purpose.
- Consent: a freely given, informed, and unambiguous indication by which the data subject agrees to the processing of their personal data for a specific purpose.
2. Personal data collection and use policy
Sped Total seeks to collect as little personal data as possible, only what is sufficient to achieve legitimate purposes related to providing its services, sales assistance, support, contracting, security, and improving the user experience.
The main purposes of data processing include:
- enabling the sales contact requested by the user;
- understanding the interested company’s needs to recommend the appropriate solution;
- providing assistance, support, and clarification about Sped Total services;
- formalizing contracts, business proposals, and billing processes;
- operating, protecting, and improving the website, platform, and services offered.
By accessing and/or using the Sped Total website, you acknowledge this Privacy Policy. Where necessary, data processing may depend on your consent, without prejudice to other applicable legal bases.
3. Types of data we collect
3.1 Contact and registration data
Data such as name, email address, phone number, company, job title, CNPJ/CPF, and other information voluntarily provided through forms, pop-ups, contact pages, sales channels, or during assistance may be collected.
3.2 Data for contracting
When services are contracted, proposals are made, commercial documents are issued, or billing takes place, data relating to the contracting individual or legal entity may be processed, such as company name/full name, CNPJ/CPF, address, legal representative details, email address, phone number, and information needed to formalize the contract.
3.3 Technical and browsing data
Technical data related to access to the website or platform may be collected, such as IP address, access date and time, device information, browser, pages visited, and cookies needed for operation, security, analysis, and experience improvements.
3.4 Sensitive personal data
Sped Total does not aim to collect sensitive personal data, such as racial or ethnic origin, religious beliefs, political opinions, trade union membership, data concerning health or sex life, or genetic or biometric data linked to a natural person, except where strictly necessary, permitted by applicable law, or included by the user in documents or information provided to the platform.
4. How long are data retained?
4.1 Registration data and access logs
Data processed by Sped Total will be retained for as long as necessary to fulfill the purposes for which they were collected, including compliance with legal, regulatory, and contractual obligations, the lawful exercise of rights, auditing, security, and fraud prevention.
Access logs may be retained for a minimum of 6 (six) months under Brazilian Law No. 12,965/2014, known as the Marco Civil da Internet, or for longer where required by law, an order from a competent authority, or a legitimate need to preserve rights.
Once the purpose of processing has been fulfilled and no legal or regulatory obligation justifies retention, the data will be securely deleted or anonymized, as appropriate.
4.2 Data in documents, files, and attachments
When a user, customer, or contracting company uploads documents, files, or attachments to the platform, the party providing them is responsible for their content. Sped Total may have no prior knowledge of the content of these documents, which may or may not contain personal or sensitive data.
Requests to delete, change, or manage these documents may depend on action by the publishing user, the contracting company, or the administrator responsible for the contracted environment.
5. Purposes and legal bases for data collection and use
Personal data are processed only in circumstances authorized by applicable law. The main purposes and legal bases include:
- Sales assistance and requested contact: to respond to requests, demonstrate solutions, and understand the potential customer’s needs. Legal basis: consent and/or legitimate interest.
- Contracting services: to validate information, prepare proposals, formalize contracts, and begin providing services. Legal basis: performance of a contract or preliminary measures related to a contract.
- Support and user relations: to identify the user and provide appropriate assistance. Legal basis: performance of a contract, legitimate interest, or consent, as appropriate.
- Sending institutional and marketing communications: to share information, news, content, and services related to Sped Total. Legal basis: consent and/or legitimate interest, always respecting the option to unsubscribe where applicable.
- Compliance with legal and regulatory obligations: to meet legal, tax, accounting, and regulatory requirements or orders from competent authorities. Legal basis: a legal or regulatory obligation.
- Security, fraud prevention, and platform improvement: to protect services, improve functionality, fix issues, and maintain proper operation. Legal basis: legitimate interest.
6. Data transfer and sharing with third parties
In certain situations, personal data may need to be shared with third parties, such as technology providers, hosting providers, payment providers, support tools, business partners, companies in the same corporate group, technical support providers, or public authorities, always within legal limits.
Sharing may occur in the following circumstances:
- when a third party is engaged to carry out activities or provide services on behalf of Sped Total;
- when necessary to fulfill a contract or a request made by the user;
- when there is a legal obligation, court order, request from a public authority, or a need to protect rights;
- when necessary to operate, secure, improve, or maintain the website, platform, and services.
In all cases, access and sharing will be limited to the necessary purposes, in accordance with confidentiality and information security standards and applicable law.
7. Information security
Sped Total adopts reasonable technical and administrative measures to protect personal data against unauthorized access, loss, alteration, improper disclosure, destruction, or any form of inappropriate or unlawful processing.
7.1 Platform use on standard infrastructure
When services are provided on standard infrastructure, Sped Total may use technology and cloud service providers, observing security policies, access controls, and good practices consistent with applicable law and this Privacy Policy.
Data will be accessed and processed only by duly authorized employees, providers, or partners, always in accordance with the principles of purpose, adequacy, necessity, security, transparency, and minimum retention.
7.2 Platform use on the customer’s own infrastructure — On Premise
When the platform is used on the customer’s own infrastructure, such as an On Premise environment, it may be subject to the privacy policies, governance, access controls, and security mechanisms established by the customer.
In these cases, Sped Total will act within the applicable technical and contractual limits, observing the responsibilities agreed between the parties.
8. What are your rights?
Under the LGPD, personal data subjects may exercise rights relating to their data, including:
- confirmation of whether processing takes place;
- access to the personal data being processed;
- correction of incomplete, inaccurate, or outdated data;
- anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in breach of the LGPD;
- portability of data to another service or product provider, subject to ANPD regulations;
- deletion of data processed on the basis of consent, where applicable;
- information about data sharing with public and private entities;
- withdrawal of consent, where processing relies on this legal basis.
The fulfillment of certain requests may depend on verifying the data subject’s identity, the absence of legal retention obligations, the preservation of rights, or other circumstances provided by law.
10. Contact
If you have any questions or requests, or wish to exercise rights relating to your personal data, please contact Sped Total through its official channels.
Sped Total
Email for privacy and data protection: contato@spedtotal.com.br
Website: www.spedtotal.com.br
11. Content changes
Sped Total may amend this Privacy Policy at any time, particularly to reflect changes in services, technologies used, legal requirements, regulatory guidance, or improvements to internal processes.
The date of the latest update will always be shown at the beginning of this document. Significant changes requiring new authorizations or consent will be communicated through appropriate channels, where applicable.