Privacy policy

What we collect

There is only one way for you to give us data through this site: the form in the contact section. It asks for:

• Name — required, so we know who we are talking to
• Email — required, because that is how we reply
• Company and phone — optional, to place the enquiry and allow a call
• Message — whatever you wish to tell us
• The language of the page you were on, so we reply in the same one

IP address

When you submit the form, your IP address is held in the server's memory for ten minutes. It serves a single purpose: stopping bots from firing hundreds of messages in a row. It is never written to disk, never tied to the content of your message, and disappears when the server restarts.

What we use it for

To answer your enquiry and carry on the commercial conversation you started. Nothing else. We send no mailshots, add your address to no marketing list, and neither sell nor pass your data to third parties.

The legal basis is article 7, item V of the Brazilian data protection act (LGPD): preliminary steps towards a contract, taken at your request. For the anti-abuse IP record, the basis is item IX, the legitimate interest in keeping the contact channel working.

How long we keep it

Your message stays in Hera's mailbox for as long as it takes to deal with it and, after that, for up to 24 months as a record of the commercial history. Once the period is over, it is discarded.

If the conversation turns into a contract, the data is then handled under that contractual relationship, with its own periods — and you will be told so at the time.

Who we share it with

Nobody, commercially. There are only two technical exposures, and they deserve to be stated plainly:

• The provider hosting Hera's mailbox necessarily processes the message in order to deliver it, as happens with any email
• On solution pages that carry a video, the thumbnail is fetched from YouTube's servers as the page loads — which reveals your IP address to Google even if you never click play

The YouTube player and the Google map load only after you click them. Before that click, no request is made to those services and none of their cookies is set. Once you click, Google's own privacy policies apply.

Cookies

This site sets no cookies of its own: no session cookie, no preference cookie, no measurement cookie. Your chosen language lives in the page address, not in a cookie.

Third-party cookies appear only if you click to load the YouTube video or the Google map, and they belong to those services.

Your rights

Brazilian data protection law lets you, at any time:

• Confirm whether we hold data about you, and see what we hold
• Correct data that is incomplete, inaccurate or out of date
• Ask for unnecessary or excessive data to be anonymised, blocked or deleted
• Ask for your data to be ported to another supplier
• Request deletion of data handled on the basis of your consent
• Learn who we have shared your data with
• Withdraw your consent

To exercise any of these, simply write to the contact given above. We reply within fifteen days.

Security

The site is served over HTTPS only, and the form validates everything it receives on the server. Access to the mailbox that receives the messages is restricted to Hera's team.

No measure removes risk entirely. Should a security incident occur that could put you at material risk, we will notify both you and the Brazilian data protection authority, as the law requires.

Changes to this policy

If the site starts collecting anything different, this page changes first — not afterwards. The update date at the top marks the last revision.