1. Who is responsible for your data
Mr. Hermys is the trade name of the individual microentrepreneur below, who is the controller of the personal data processed on this site and in our customer service. In other words, the one who decides how and why your data is used.
- Registered name
- 65.026.851 Marcio Matheus Goulart de Souza Silva
- Trade name
- Mr. Hermys
- CNPJ (Brazilian company ID)
- 65.026.851/0001-59
- Legal form
- Individual Microentrepreneur (MEI)
- Head office
- Volta Redonda, RJ, Brazil
- hello@mrhermys.com
This policy applies to the website mrhermys.com, to the contact forms and to conversations with Mr. Hermys by email and social media.
2. Data we collect
Data you give us
- In the assessment form: name, email, company website (optional), best time for a video call (optional), your main challenge and the services you are interested in.
- In conversations by email or social media: whatever you choose to send us, such as name, phone number, information about your company and files.
- If you become a client: data for the contract and billing, such as name or company name, tax ID, address and payment details, plus the access and materials needed for the service (for example, access to the website or to the ad accounts).
Data collected automatically
- Access logs: IP address, date and time of the visit, pages accessed, browser and operating system. They are generated by the server and used for the security and operation of the site.
- Cookies and similar technologies: essential ones are always on; statistics and marketing ones only after your consent. Details in the Cookie Policy.
We do not ask for sensitive data (such as health, religion, racial origin or biometrics). Please do not send it to us either.
3. What we use your data for and on what legal basis
The LGPD only allows personal data to be used with a justification set out in law, called a legal basis (art. 7). These are ours:
| What we use it for | Legal basis |
|---|---|
| Answer your contact, carry out the free assessment and send a proposal | Steps prior to a contract, at your request (art. 7, V) |
| Provide the contracted service and keep in touch during the project | Performance of a contract (art. 7, V) |
| Issue invoices and comply with tax and accounting obligations | Compliance with a legal obligation (art. 7, II) |
| Keep access logs for the site | Compliance with a legal obligation (Brazilian Internet Act, art. 15) and legitimate interest (art. 7, IX) |
| Protect the site against spam, fraud and attacks | Legitimate interest (art. 7, IX) |
| Measure audience and the performance of pages and ads (non-essential cookies) | Consent (art. 7, I) |
| Send content and news from Mr. Hermys | Consent (art. 7, I), which you can withdraw at any time |
| Defend our rights in judicial or administrative proceedings | Regular exercise of rights (art. 7, VI) |
We do not sell, rent or hand over your data to third-party lists. We do not make decisions about you in a fully automated way.
4. Who we share it with
We share only what is necessary, with providers that help us operate:
- Website hosting: Hostinger, where the site and the access logs are kept.
- Email: Hostinger, which receives and sends the messages of
@mrhermys.com, including the requests from the assessment form. - Protection against bots (Google reCAPTCHA): when you use the assessment form, Google receives technical data from your browser (such as IP address and behavior on the page) to tell people from bots. See the Google Privacy Policy.
- Measurement and advertising tools (such as Google Analytics and Meta), only if you accept the corresponding cookies.
- Accounting: client data needed to issue invoices and meet tax obligations.
- Public authorities: when there is a court order or a legal obligation.
In contracted projects, we may use third-party tools chosen together with the client (such as advertising platforms). In that case, the use is agreed in the contract.
5. International transfer
Some providers, such as Google and Meta, may process data on servers outside Brazil. In those cases, the transfer follows art. 33 of the LGPD and the safeguards offered by these providers, such as standard contractual clauses and security certifications.
6. How long we keep it
| Data | Period |
|---|---|
| Contacts that did not become clients | Up to 12 months after the last contact, or sooner if you ask |
| Client data and tax documents | During the contract and for 5 years after it ends, because of tax and legal deadlines |
| Access logs for the site | 6 months (Brazilian Internet Act) |
| Cookies | According to the Cookie Policy |
When the period ends, the data is deleted or anonymized, except when the law requires it to be kept.
7. How we protect your data
- Site with an encrypted connection (HTTPS).
- Access to data restricted to those who need it to serve you.
- Strong passwords and two-step verification on administrative accounts.
- Security updates and regular backups.
No system is 100% immune. If a security incident happens that may bring relevant risk or harm, we will notify you and the Brazilian National Data Protection Authority (ANPD), as the law requires.
8. Your rights
Under the LGPD (art. 18), you can ask at any time for:
- Confirmation that we process your data and access to it;
- Correction of incomplete, wrong or outdated data;
- Anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
- Portability of the data to another provider;
- Deletion of data processed on the basis of your consent;
- Information about who we share your data with;
- Information about the possibility of not giving consent and what that changes;
- Withdrawal of consent;
- Objection to processing that breaches the law.
To exercise any right, contact us through the channel below. We may ask for information to confirm your identity first. We answer within 15 days. If you are not satisfied, you can also complain to the ANPD.
9. Contact channel for personal data
As a small processing agent, Mr. Hermys is not required to appoint a data protection officer (Resolution CD/ANPD No. 2/2022), but keeps a direct channel for privacy matters:
Email: hello@mrhermys.com (subject: Privacy and personal data)
10. Children and teenagers
Our services are for companies and professionals. The site is not aimed at people under 18 and we do not knowingly collect data from children or teenagers. If that happens by mistake, we will delete the data as soon as we find out.
11. Changes to this policy
We may update this policy when we change how we handle data or when the law changes. The date at the top of the page always shows the version in effect. Important changes will be announced on the site.
Links to third-party sites (such as social networks) follow those sites' policies, not this one.
12. Visitors outside Brazil
Mr. Hermys is a Brazilian business, and the LGPD is the law that governs this policy. If you visit the site or contact us from another country, the points below also apply.
Your rights
Wherever you live, you can ask us to access, correct, delete or receive a copy of your personal data, object to how we use it and withdraw a consent you have given. Use the channel in section 9. You also have the right to complain to the data protection authority of your own country.
Legal bases
Statistics and marketing cookies are only used with your consent. The details you send through the assessment form are used to take the steps you asked for before a possible contract. The table in section 3 lists every purpose.
Where your data is processed
Your data is processed in Brazil and by the providers listed in section 4. Some of them use servers in other countries, including the United States. Section 5 explains the safeguards.
California residents
- What we collect and who receives it: the categories of data are in section 2, and the categories of third parties are in section 4.
- Reviewing and correcting your data: write to hello@mrhermys.com and we will answer within 15 days.
- Do Not Track: the site does not respond to the Do Not Track signal sent by browsers. Measurement tools only load after you accept them in the cookie notice, and you can change your choice at any time under "Cookie preferences" in the footer.
- Other parties: if you accept statistics cookies, the measurement tools listed in the Cookie Policy may collect information about your visits to this site over time.
- Changes: changes to this policy are published on this page, with the date at the top.