White M&I Caldeiraria logo
White M&I Caldeiraria logo

Privacy policy.

Last updated: October 14, 2026.

This Privacy Policy explains how M&I Caldeiraria (“M&I”, “we”) collects, uses, stores and protects the personal data of visitors to this website and people who contact us, in accordance with the Brazilian General Data Protection Law (Law No. 13,709/2018 – LGPD).

 

1. Data controller

  • Legal name: M&I Comércio e Serviços LTDA
  • CNPJ (Brazilian tax ID): 14.783.451/0001-57
  • Address: Estrada Oswaldo Pires de Camargo, Capoavinha, Votorantim/SP, Brazil, ZIP 18117-803
  • Privacy contact: mei@meicaldeiraria.com.br
  • Data Protection Officer (DPO): Danilo Ismirim Milano

 

2. Data we collect

Data you provide: when you fill in the contact form, we collect your name, company, phone number, email, subject and message. When you contact us by email, phone or WhatsApp, we process the information you choose to share.

Data collected automatically: while you browse, we may record your IP address, browser and device type, pages visited, time on site, traffic source and interactions with the website. This data is obtained through cookies and similar technologies, described in section 5.

We do not knowingly collect sensitive personal data or data from people under 18.

 

3. How we use data

  • To respond to contact requests, quotes, questions and partnership proposals;
  • To review résumés submitted for job opportunities;
  • To maintain business relationships with clients and prospects;
  • To understand how the website is used and improve its content and performance;
  • To measure the results of marketing campaigns and show more relevant ads;
  • To comply with legal and regulatory obligations and exercise rights in legal proceedings, when necessary.

 

4. Legal bases

We process personal data based on the following grounds provided for in the LGPD: pre-contractual procedures at the data subject’s request (such as sending quotes or reviewing résumés); M&I’s legitimate interest (such as improving the website and business communication with companies); consent, for analytics and marketing cookies; and compliance with legal or regulatory obligations.

 

5. Cookies and tracking technologies

Cookies are small files stored in your browser. This website uses:

  • Necessary cookies: essential for the website to work, such as remembering your chosen language (up to 1 year), recording your cookie choice (180 days) and security and performance features. They cannot be disabled without affecting navigation.
  • Google (Google tag / Google Analytics): used to generate traffic statistics and measure the performance of the website and campaigns. Google Analytics cookies (such as _ga and _ga_*) last up to 2 years. Information is processed by Google under the Google Privacy Policy.
  • Meta Pixel (Facebook and Instagram): used to measure ad effectiveness and build audiences for campaigns on Meta platforms. The Pixel cookie (_fbp) lasts about 90 days. Information is processed by Meta under the Meta Privacy Policy.

Analytics and marketing cookies are only activated if you accept them in the cookie notice. You can change your choice at any time through the Cookie preferences link in the website footer.

You can also block or delete cookies in your browser settings and manage personalized ads in Google Ad Settings and Meta Ad Preferences. Blocking cookies may affect some website features.

 

6. Data sharing

M&I does not sell personal data. Data may only be shared with:

  • Service providers that support the website’s operation, such as hosting, email delivery and technical maintenance;
  • Google and Meta, as described in section 5;
  • Public authorities, when required by law or court order.

International transfers: some of these providers process data outside Brazil. Google and Meta, for example, process data mainly in the United States and in other countries where they operate servers. These transfers follow Article 33 of the LGPD and rely on standard contractual clauses approved by the Brazilian Data Protection Authority (ANPD Resolution CD/ANPD No. 19/2024) or on other safeguards provided for by law.

 

7. Data retention

Data is kept for as long as necessary to fulfill the purposes described in this policy or to meet legal obligations. As a reference:

  • Contacts and quote requests that do not lead to a business relationship: up to 2 years after the last contact;
  • Clients and suppliers: for the duration of the relationship and, afterwards, for the periods required by tax, accounting and civil laws;
  • Résumés: up to 12 months after receipt;
  • Browsing data: for the cookie durations listed in section 5; statistical reports in Google Analytics for up to 14 months.

After these periods, data is deleted or anonymized.

 

8. Security

We adopt technical and administrative measures to protect personal data against unauthorized access, loss, alteration or improper disclosure, such as encrypted connections (HTTPS) and access control to our systems. No system is completely risk-free, but we work continuously to reduce risks.

 

9. Your rights

Under the LGPD, you may request at any time:

  • Confirmation that we process your data and access to it;
  • Correction of incomplete, inaccurate or outdated data;
  • Anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
  • Portability of your data to another provider;
  • Information about who your data is shared with;
  • Withdrawal of consent and deletion of data processed on that basis;
  • Objection to processing carried out without your consent, such as processing based on legitimate interest, where the LGPD has not been complied with. You may also ask at any time to stop receiving business communications.

To exercise your rights, send an email to mei@meicaldeiraria.com.br. We respond within 15 days of receiving your request and may ask for additional information to confirm your identity. You may also file a complaint with the Brazilian Data Protection Authority (ANPD).

 

10. External links

This website may contain links to third-party sites, such as social networks, WhatsApp and Google Maps. This policy does not apply to those services, which have their own privacy rules.

 

11. Visitors from other countries

M&I is a Brazilian company and is mainly governed by the LGPD. Visitors from other countries also have the rights guaranteed by their local laws:

  • European Union, European Economic Area and United Kingdom (GDPR): we process your data to take pre-contractual steps at your request (Art. 6(1)(b)), based on our legitimate interest in business communication with companies and in improving the website (Art. 6(1)(f)), with your consent for analytics and marketing cookies (Art. 6(1)(a)) and to comply with legal obligations (Art. 6(1)(c)). In addition to the rights in section 9, you may request restriction of processing, object to processing based on legitimate interest, withdraw your consent at any time and lodge a complaint with the data protection authority in your country. As we are based in Brazil, your data is processed outside the European Economic Area; where service providers are involved, we use the safeguards provided for in the GDPR, such as standard contractual clauses.
  • United States: M&I does not sell personal data. Google and Meta advertising cookies are only activated with your consent and can be turned off at any time under “Cookie preferences”.
  • Other countries, such as Mexico, Argentina, Colombia and Chile: we respect the rights guaranteed by your country’s data protection laws. To exercise them, use the same email address listed in section 9.

 

12. Changes and language versions of this policy

This Privacy Policy may be updated at any time. The current version will always be available on this page, with the date of the last update.

This policy is published in Portuguese, English and Spanish, with the same content and date. In case of any discrepancy between versions, the Portuguese version prevails.