Zottis Sociedade Individual de Advocacia

Privacy Policy

Effective date: 1 April 2026

1. Who we are

This website is operated by Zottis Sociedade Individual de Advocacia, a law firm registered in Brazil under CNPJ 40.771.730/0001-00, with registered address at Av. Carlos Gomes, 777, conj. 406, Porto Alegre, RS, Brazil. For data-protection purposes, Zottis Sociedade Individual de Advocacia is the controller of your personal data.

If you have any questions about this policy or how we handle your data, please contact us at brazil@advogadoszr.com.

2. Data we collect and why

We collect only the personal data necessary to provide our services:

  • Contact and enquiry data — name, email address and any information you choose to share when you email us or book a consultation. We use this to respond to your enquiry and, where you become a client, to carry out the legal services you have requested.
  • Scheduling data — when you book a consultation via our Cal.com integration, the scheduling process is handled by Cal.com on its own platform. We receive confirmation of the appointment and your contact details. Cal.com processes your data in accordance with its own Privacy Policy.
  • Technical and usage data — we use Google Analytics 4 (Google Ireland Limited / Google LLC) to understand how visitors use this website (for example pages viewed and interactions with buttons). Google processes this information under its terms and may use cookies or similar technologies; you can read more in Google’s Privacy Policy. We do not use Google Ads or Meta Pixel for advertising on this site. Standard server logs (IP address, browser type, pages visited) may also be retained by our hosting provider for security and operational purposes.

3. Legal basis for processing

We rely on the following legal bases to process your personal data:

  • Performance of a contract / pre-contractual steps — to respond to your enquiry and deliver legal services you have requested (LGPD Art. 7(V); GDPR Art. 6(1)(b)).
  • Legitimate interests — to manage our business operations, prevent fraud and maintain the security of our systems, where these interests are not overridden by your rights (LGPD Art. 7(IX); GDPR Art. 6(1)(f)).
  • Compliance with a legal obligation — where we are required to retain records under Brazilian law, including professional obligations of the Ordem dos Advogados do Brasil (LGPD Art. 7(II); GDPR Art. 6(1)(c)).
  • Consent — where we ask for your consent for any specific purpose, such as sending marketing communications, you may withdraw it at any time (LGPD Art. 7(I); GDPR Art. 6(1)(a)).

4. Attorney–client confidentiality

All information shared with us in the context of a legal engagement is subject to professional secrecy and attorney–client privilege under Brazilian law and the ethical rules of the OAB. We do not disclose client information to third parties except where required by law or with your express consent.

5. Third-party services

We use the following third-party services that may process your data as independent controllers or processors:

  • Cal.com — online scheduling. When you book a consultation, you are interacting with Cal.com's platform. Please review Cal.com's Privacy Policy for details of their data practices.
  • Hosting provider — our website is hosted on infrastructure that may process server log data for operational and security purposes.
  • Google Analytics — as described in section 2, usage data is processed by Google as a processor or sub-processor depending on your jurisdiction; you may use Google’s browser add-ons or device settings to limit analytics where available.

6. International transfers

Given our international practice, your data may be processed in countries outside Brazil and the European Economic Area, including countries that may not provide equivalent levels of data protection. Where such transfers occur, we implement appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) in accordance with LGPD, GDPR and applicable law.

7. How long we keep your data

We retain personal data for as long as necessary to fulfil the purposes described above, and in accordance with applicable legal and professional retention obligations. Client files are generally retained for a minimum period required by Brazilian professional rules. Enquiry data that does not result in an engagement is kept for a reasonable period and then deleted.

8. Your rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access — to confirm whether we process your data and to receive a copy of it.
  • Correction — to request that inaccurate or incomplete data be corrected.
  • Deletion — to request that we delete your data where there is no lawful reason to retain it.
  • Portability — to receive your data in a structured, commonly used format where technically feasible.
  • Objection / restriction — to object to or request restriction of certain processing activities.
  • Withdrawal of consent — where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at brazil@advogadoszr.com. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with the relevant supervisory authority: the ANPD (Autoridade Nacional de Proteção de Dados) in Brazil or the competent data protection authority in your country of residence.

California and US state residents: if you are located in a US state with applicable privacy laws (including California, Virginia, Colorado or others), you may have additional rights under those laws. Please contact us to exercise them.

9. Cookies

Google Analytics may set cookies or use local storage to distinguish sessions and measure site usage, as described in section 2. Strictly necessary cookies may also be set by the browser session or by third-party embeds such as Cal.com to ensure basic functionality. Where required by applicable law, we will obtain your consent before setting non-essential cookies.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date at the top of this page. We encourage you to review this policy periodically.