PRIVACY POLICY
How we handle your data.
This policy explains what personal data Lisa collects, why we process it, who we share it with and how you exercise your rights. It follows Brazilian Law No. 13.709/2018 (LGPD) and applies to this website and to the Lisa Radar and Lisa Monitor products.
VERSION 1.0 · EFFECTIVE 1 AUGUST 2026
01
Data controller
Lisa is the controller of the personal data processed on this website and within the Lisa Radar and Lisa Monitor products. The controller decides the purposes and the means of processing.
For any privacy matter, requests must be submitted through our contact form with the subject line “Privacy”.
02
What we collect
Professional identification and contact data you provide in our forms: full name, work email, company and role.
Browsing data collected through cookies and equivalent technologies: IP address, device, browser, pages visited and traffic source.
Report interaction data, opens and downloads, when delivery is tracked.
- We do not collect sensitive personal data.
- We do not collect patient health data.
- We do not collect data relating to children or adolescents.
- Our reports address markets, not individuals.
03
Purposes and legal basis
Sending the edition and related communications: consent (Art. 7, I).
Performing a subscription and delivering contracted services: contract performance (Art. 7, V).
Product improvement, audience measurement and platform security: legitimate interest (Art. 7, IX).
Tax, accounting and regulatory obligations: legal obligation (Art. 7, II).
Where processing relies on consent, you may withdraw it at any time, without affecting processing already carried out.
04
Sharing
We do not sell personal data and we do not transfer it for third-party advertising. We share data only with processors acting under contract and on our instructions:
- Infrastructure and cloud hosting providers.
- Email and content distribution platforms.
- Audience analytics and CRM tools.
- Public authorities, when required by law or a binding order.
05
International transfer
Some processors operate servers outside Brazil. Such transfers follow Art. 33 of the LGPD and are supported by standard contractual clauses or equivalent safeguards ensuring a level of protection compatible with Brazilian law.
06
Retention
Lead data is retained for as long as the relationship lasts or until consent is withdrawn.
Client data is retained throughout the contract term and for the legal periods that follow it.
Browsing data is retained for a limited period consistent with audience and security analysis.
Once the purpose is exhausted, data is deleted or irreversibly anonymised.
07
Your rights
Under Art. 18 of the LGPD you may request:
- Confirmation that processing takes place.
- Access to your data.
- Correction of incomplete, inaccurate or outdated data.
- Anonymisation, blocking or deletion of unnecessary or excessive data, or data processed unlawfully.
- Portability to another provider.
- Deletion of data processed on the basis of consent.
- Information on the public and private entities with which data has been shared.
- Information on the possibility of refusing consent and the consequences of doing so.
- Withdrawal of consent.
08
Cookies
We use strictly necessary cookies, which keep the site working, and analytics cookies, which measure audience and improve content.
You can block or delete cookies in your browser settings. Blocking necessary cookies may affect parts of the site.
09
Security
We apply role-based access control, encryption in transit and periodic permission reviews, along with logging of access to production environments.
In the event of a security incident with relevant risk, we notify affected data subjects and the ANPD within the legal timeframe.
10
Data protection contact
Requests and questions about this policy must be submitted through our contact form.
You also have the right to lodge a complaint with the ANPD, Brazil's National Data Protection Authority.
11
Changes
The current version and effective date appear at the top of this page. Material changes are communicated by email to registered subscribers before they take effect.
This policy is a working version pending legal review. The controller's full legal name and CNPJ will be added upon registration.
