This policy explains what personal data JV Group collects, why we collect it, who we share it with and what rights you have. It is written to satisfy the Brazilian General Data Protection Law (LGPD, Law No. 13.709/2018) and the EU General Data Protection Regulation (GDPR) for visitors and Clients in the European Economic Area and the United Kingdom.
1. Who is responsible for your data
JV BUSINESS GROUP LTDA, trading as JV Group, is a private limited company (sociedade empresária limitada) incorporated in Brazil on 3 December 2021 and registered with the Receita Federal do Brasil under CNPJ 44.472.436/0001-59. Its registered office is at Rua Rio Grande do Norte, 1435 — Sala 708, 7º andar, Savassi, Belo Horizonte — MG, 30130-138, Brazil.
For the purposes of the LGPD and the GDPR, that company is the controller of the personal data described in this policy. Data protection enquiries go to joaosnunes8576@proton.me, marked "Data protection", and are answered by the managing partner, who acts as our data protection contact.
2. The short version
This website is a set of static pages. It runs no analytics, no advertising pixels and no third-party trackers, and its forms submit nothing to us on their own — they open your own email client with a message you can read before sending. We hold personal data only when you contact us or become a Client. We never sell it, and we never share it for anyone else's marketing.
3. What we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Enquiry data | Name, company, email address, country, service of interest, budget range and whatever you write in your message | You, when you email us or send an enquiry |
| Client data | Contact details of your staff, billing address, tax identifiers such as CNPJ or VAT number, purchase order references | You, during an engagement |
| Transaction data | Amount, currency, date, invoice number, last four digits and brand of the card, payment status | Stripe — we never receive full card numbers |
| Engagement records | Briefs, proposals, contracts, correspondence, approvals and reports | Created during the work |
| Technical data | IP address, user agent, timestamps and security signals recorded by our hosting provider | Automatically, in server and security logs |
We do not knowingly collect sensitive personal data (dados pessoais sensíveis) and ask that you do not send any to us. We do not carry out profiling or automated decision-making that produces legal effects.
4. Why we use it, and our legal basis
| Purpose | Legal basis — LGPD | Legal basis — GDPR |
|---|---|---|
| Replying to your enquiry and preparing a proposal | Art. 7, V — pre-contractual steps | Art. 6(1)(b) — steps prior to a contract |
| Delivering the services and managing the engagement | Art. 7, V — performance of a contract | Art. 6(1)(b) — performance of a contract |
| Invoicing, tax and accounting records | Art. 7, II — legal obligation | Art. 6(1)(c) — legal obligation |
| Security, fraud prevention and server logs | Art. 7, IX — legitimate interest | Art. 6(1)(f) — legitimate interests |
| Establishing or defending a legal claim | Art. 7, VI — exercise of rights | Art. 6(1)(f) — legitimate interests |
| Sending studio updates you asked for | Art. 7, I — consent | Art. 6(1)(a) — consent |
Where we rely on consent you may withdraw it at any time, without affecting processing already carried out.
5. Cookies and analytics
This website sets no analytics, advertising or profiling cookies. The only cookies that may reach your browser are strictly necessary ones set by our hosting and security provider to keep the site available and to filter malicious traffic. Full details, and how to block them, are in our Cookie Policy.
6. Who we share it with
We never sell personal data and we never disclose it for another organisation's marketing. We share it only with service providers who process it on our instructions, under contract, and only as far as their function requires:
- Stripe — payment processing and fraud prevention;
- Email and file hosting providers — correspondence and document storage;
- Our website host and CDN — serving this site and filtering abusive traffic;
- Accountants and legal advisers — statutory accounting and legal advice;
- Advertising platforms — only where we manage a campaign in an account you own, and only with the data required to run it.
We may also disclose data where the law, a court or a competent authority requires it, or to establish or defend a legal claim.
7. International transfers
We are based in Brazil and some of our providers are outside Brazil and outside the European Economic Area, principally in the United States. Where personal data is transferred internationally we rely on the safeguards permitted by Article 33 of the LGPD and Chapter V of the GDPR, which in practice means Standard Contractual Clauses, the provider's own approved transfer mechanism, or an adequacy decision. A copy of the relevant safeguard is available on request.
8. How long we keep it
| Data | Retention period | Reason |
|---|---|---|
| Enquiries that do not become engagements | 12 months | Follow-up and record of contact |
| Client and engagement records | 5 years after the engagement ends | Contractual and limitation periods |
| Invoices and tax records | 5 years minimum | Brazilian tax and accounting law |
| Server and security logs | Up to 6 months | Security, in line with Marco Civil da Internet |
| Marketing consents | Until withdrawn, then a record of the withdrawal | Proof of consent |
9. Security
Access to personal data is limited to people who need it for their work. Data is held in reputable hosted services protected by encryption in transit and at rest, multi-factor authentication and access logging. This site is served over HTTPS. No system is perfectly secure, but where an incident is likely to create a relevant risk we will notify you and the Brazilian data protection authority (ANPD), and any other regulator required, within the legal deadline.
10. Your rights under the LGPD
If you are in Brazil, Article 18 of the LGPD gives you the right to obtain confirmation that we process your data and to access it; to correct incomplete or out-of-date data; to anonymise, block or delete unnecessary or unlawfully processed data; to data portability; to delete data processed on consent; to information about the entities we share data with; to be told the consequences of refusing consent; and to withdraw consent.
Write to joaosnunes8576@proton.me. We reply within 15 days as required by the LGPD. If you are not satisfied you may complain to the Autoridade Nacional de Proteção de Dados (ANPD) at gov.br/anpd.
11. Your rights under the GDPR
If you are in the European Economic Area or the United Kingdom you have the rights of access, rectification, erasure, restriction of processing, data portability and objection, including objection to processing based on legitimate interests. We respond within one month, extendable by two further months for complex requests, and will tell you if we need the extension.
You may also lodge a complaint with your national supervisory authority.
12. Children
Our services are sold to businesses and this website is not directed at children. We do not knowingly collect the personal data of anyone under 18. If you believe a child has given us data, write to us and we will delete it.
13. Data we process for our Clients
During an engagement we may access personal data belonging to a Client's own customers — for example a mailing list inside the Client's email platform. For that data the Client is the controller and we act as processor, handling it only on the Client's documented instructions and for the engagement, keeping it confidential, applying the security measures above, and returning or deleting it when the engagement ends. We do not use Client customer data for our own purposes and we do not merge it with any other dataset.
14. Changes to this policy
We update this policy when our practices or the law change. The version and effective date at the top of this page always show the current release. Where a change materially affects you, we will tell you by email before it takes effect.
15. Contact
JV BUSINESS GROUP LTDA
Rua Rio Grande do Norte, 1435 — Sala 708, 7º andar, Savassi, Belo Horizonte — MG, 30130-138, Brazil
Email: joaosnunes8576@proton.me
Telephone / WhatsApp: WhatsApp
Hours: 09:00–18:00 (UTC−3), Monday to Friday, excluding Brazilian public holidays
We acknowledge every message within 1 business day.