Brazilian General Data Protection Law (LGPD)
Law No. 13.709/2018 — Last updated: May 2, 2026
What is the LGPD?
The Lei Geral de Proteção de Dados Pessoais (LGPD) is Brazil's data protection law that regulates the processing of personal data. It guarantees fundamental rights of freedom, privacy, and personality development.
ORQENZA is fully compliant with the LGPD and processes your personal data with transparency, security, and respect.
Your rights as a data subject (Art. 18, LGPD)
| Right | Meaning |
|---|---|
| Confirmation and Access | Know whether we process your data and obtain a copy |
| Correction | Correct incomplete, inaccurate, or outdated data |
| Anonymization | Request anonymization of unnecessary data |
| Blocking | Temporarily suspend processing |
| Deletion | Delete data processed based on consent |
| Portability | Receive your data in an interoperable format |
| Information | Know who we share your data with |
| Revocation | Withdraw consent at any time |
| Objection | Object to processing based on legitimate interest |
How to exercise your rights
Send an email to privacidade@orqenza.com with:
- Identification (registered name and email)
- Clear description of the right you wish to exercise
- Identity documentation (when required)
Response time: up to 15 business days (Art. 18, §5 of the LGPD).
Data we process and why
| Data | Legal basis | Purpose |
|---|---|---|
| Name and email | Contract performance (Art. 7, V) | Account management |
| Payment data | Contract performance (Art. 7, V) | Billing via Stripe |
| Access logs | Legal obligation (Art. 7, II) | Security and audit |
| Analytics cookies | Consent (Art. 7, I) | Usage analysis |
| Marketing cookies | Consent (Art. 7, I) | Personalized advertising |
Cookies and consent
We use optional cookies based on your explicit consent (LGPD Art. 7, item I).
- Essential cookies are necessary for platform operation and don't require consent
- Analytics and marketing cookies are only loaded after you accept
- You can change or revoke your consent at any time
Security measures
We adopt technical and administrative measures to protect your data:
- AES-256 encryption for sensitive data at rest
- TLS/HTTPS for all data in transit
- RBAC to limit internal access
- Audit logging for all critical operations
- Daily backups with 30-day retention
International transfers
Some providers we use (Stripe, Google, Meta) process data in the US. All transfers are protected by standard contractual clauses ensuring equivalent protection.
Data Protection Officer (DPO)
Our Data Protection Officer can be contacted at:
Email: privacidade@orqenza.com
Response time: up to 15 business days
Brazilian National Data Protection Authority (ANPD)
If you believe your rights have not been met, you may file a complaint with the ANPD:
Website: www.gov.br/anpd