Privacy Policy
F. Coelho Legal Consulting respects the privacy and protection of personal data of all clients and the general public. This Privacy Policy aims to clarify how we collect, use, store, and protect personal data while you are browsing our communication channels, and how this information is collected, used, and protected by us, in compliance with the Brazilian General Data Protection Law (Law No. 13.709/2018 – “LGPD”) and, where applicable, the European Union General Data Protection Regulation (“GDPR”). By using our services and platforms, the user declares to be aware of the provisions of this Privacy Policy. The processing of personal data will be carried out based on the purposes and legal grounds described herein.
1. Source of Personal Data
F. Coelho Legal Consulting collects personal data directly from the following sources:
Clients: Personal data provided directly by the client through documents, contracts, and communications necessary for the provision of the contracted legal services.
Client Employees: Personal data of employees, representatives, and collaborators of client companies, when they use systems, platforms, or interact with us for the fulfillment of contractual or legal obligations.
Other Sources: Occasionally, data may be obtained from publicly accessible sources, or provided by duly authorized third parties, always respecting the principles of purpose, necessity, and adequacy, and in compliance with applicable legislation.
2. Types of Personal Data and Sensitive Personal Data Collected
F. Coelho Legal Consulting may process the following personal data, observing the principles of necessity, purpose, and adequacy, exclusively for legitimate purposes, such as the provision of legal services, compliance with legal or regulatory obligations, and the regular exercise of rights:
(i) Identification and contact data: full name, e-mail address, telephone number, position, represented company, and other information voluntarily provided through the contact form on the institutional website or during communication with the firm;
(ii) Banking data: when necessary for invoicing, payments, or reimbursements, pursuant to contractual obligations;
(iii) Essential technical browsing data: IP address, browser type and version, operating system, and information necessary to ensure the proper and secure functioning of the institutional website. These data may be collected through session cookies and essential technical cookies, which are temporary, used only to enable basic functionalities, and automatically deleted when the browser is closed. They do not store sensitive data nor allow the individual identification of the user without the user’s active provision of information.
F. Coelho Legal Consulting does not intentionally collect sensitive personal data, as defined by the LGPD and the GDPR. If, on an exceptional basis, such data are processed, this will occur with an appropriate legal basis and with the explicit consent of the data subject, where applicable.
F. Coelho Legal Consulting does not collect personal data from minors. If it identifies that such data have been transmitted improperly, it will promote their immediate deletion, in compliance with applicable legislation.
3. Purposes of Processing
F. Coelho Legal Consulting processes personal data for the following purposes:
• Provision of contracted services, including legal consulting, drafting of documents, and communication with clients;
• Compliance with legal or regulatory obligations, including those applicable to legal practice and data protection;
• Management of the relationship with users, such as operational communications, clarifying doubts, and monitoring services;
• Administration of accounts and registrations, when applicable, including website forms;
• Provision of technical support, training, and assistance related to contracted legal services;
• Continuous improvement of services and internal processes, through analyses and tests, respecting the principle of data minimization;
• Compliance with internal and external audit requirements, including information security;
• Protection of the rights and legitimate interests of F. Coelho Legal Consulting, including defense in judicial or administrative proceedings;
• Compliance with court orders, requests from public authorities, and legal obligations, including applicable foreign laws;
• Guarantee of information, network, system, and office property security, for fraud prevention and incident handling.
4. Applicable Legal Bases
F. Coelho Legal Consulting processes personal data on the following legal bases, according to the specific purpose:
• To comply with legal and regulatory obligations;
• To perform contracts signed with our clients;
• To protect our rights and legitimate interests, such as service improvement and information security;
• To respond to judicial or administrative requests.
All processing operations are carried out in compliance with applicable data protection legislation, ensuring transparency and security for data subjects.
5. Sharing of Personal Data with Third Parties
If necessary, personal data may be shared with:
• Partner law firms, correspondent lawyers, or service providers supporting legal consulting;
• Public bodies, administrative or judicial authorities, upon request or in the exercise of the professional activity;
• Technology companies used for document management, communications, and information security.
In all cases, sharing will be limited to the minimum necessary to fulfill the specific purpose.
6. Storage and Security
We adopt appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, or alteration. Data are stored securely, as long as necessary to fulfill the informed purposes, observing applicable legal or regulatory deadlines.
7. International Transfer of Personal Data
Some personal data may be stored or processed by third-party cloud computing providers located outside Brazilian territory. F. Coelho Legal Consulting selects service providers that demonstrate compliance with internationally recognized data protection standards.
In such cases, the Firm ensures that international data transfers comply with the LGPD, based on legal mechanisms permitted by law, including adherence to standard contractual clauses, certifications, contractual commitments offered by global providers, or other safeguards recognized by the Brazilian Data Protection Authority (ANPD).
Where applicable, the provisions of the GDPR and equivalent international frameworks are also observed, ensuring an adequate level of protection for data subjects
8. Security and Incident Communication
F. Coelho Legal Consulting adopts technical and administrative measures to protect personal data against unauthorized access, loss, or undue alterations. However, due to the nature of the internet, it is not possible to guarantee that malicious third parties will not succeed in improperly accessing stored information. Should this occur, F. Coelho Legal Consulting will be liable within the limits provided by applicable law.
In compliance with applicable law, F. Coelho Legal Consulting undertakes to communicate, within a reasonable period, to the Brazilian Data Protection Authority (ANPD) or the competent authority, as well as to affected data subjects, any security incident that may cause relevant risk or damage.
The firm’s liability will be exercised within the limits established by applicable law.
9. Processing of Data and Responsibility of F. Coelho Legal Consulting
F. Coelho Legal Consulting acts as a Controller of personal data of its employees and as a Processor of personal data provided by its clients. In both cases, processing is carried out in accordance with applicable legislation, respecting data subject rights and the purposes for which the data were collected.
10. Data Retention Period
F. Coelho Legal Consulting will retain personal data only for the time necessary to fulfill the purposes for which they were collected, subject to the following criteria:
• Duration of the relationship with the client or user;
• Fulfillment of legal, regulatory, or contractual obligations;
• Regular exercise of rights in judicial, administrative, or arbitration proceedings;
• Compliance with determinations of the Brazilian Data Protection Authority (ANPD) or other competent authorities;
• When applicable, for the period necessary to prove compliance with legal or regulatory obligations;
• Until the data subject requests deletion, where applicable, or revokes consent, pursuant to law.
11. Rights of Data Subjects
F. Coelho Legal Consulting respects the rights of data subjects under the LGPD and, where applicable, under the GDPR.
Under the applicable law, data subjects may request:
-
Confirmation of the existence of processing;
-
Access to their personal data;
-
Correction of incomplete, inaccurate, or outdated data;
-
Anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data;
-
Portability of data to another service or product provider;
-
Information about data sharing;
-
Withdrawal of consent, where applicable;
-
Objection to processing based on legitimate interest, with each request analyzed on a case-by-case basis, balancing the data subject’s rights and the controller’s legitimate interest.
Where applicable, under the GDPR, data subjects may also exercise:
-
The right to restrict processing;
-
The right to lodge a complaint with the competent data protection authority.
12. How to Exercise Your Rights
The data subject may exercise their rights by contacting us at:
We will respond to requests as soon as possible, in compliance with applicable legal deadlines.
13. Cookies and Data Collection via Forms
The website of F. Coelho Legal Consulting provides forms for users to contact us and send their personal information, such as name, e-mail, and phone number. The provided data are used exclusively to respond to requests and are not shared with third parties for marketing purposes without prior consent.
To ensure the security and proper functioning of the website and its forms, only session cookies and essential technical cookies are used. These cookies are temporary, automatically deleted when the browser is closed, and do not collect personal data for other purposes.
The user may, at any time, configure their browser to limit or block cookies; however, this action may compromise the proper functioning of certain website features.
14. Questions and Additional Information
If you have any questions about this Policy or the processing of personal data, please contact us via the e-mail address provided above.
15. Changes to this Policy
This Privacy Policy may be amended at any time to reflect legislative updates, changes in the services provided, or improvements in the personal data governance of F. Coelho Legal Consulting.
Substantial changes that imply a new purpose or significant modification in the form of personal data processing will be communicated prior to the entry into force of the new version, through the institutional website and, when necessary, by other means of communication with affected data subjects.
The current version of the Privacy Policy will always be available on the institutional website of F. Coelho Legal Consulting, indicating the date of the last update.
16. Governing Law and Jurisdiction
This Policy shall be primarily governed by the laws of Brazil, in particular Law No. 13.709/2018 (Brazilian General Data Protection Law – LGPD), without prejudice to the mandatory application of other data protection regulations, including the General Data Protection Regulation (GDPR), where applicable.
Any disputes related to the processing of personal data shall be resolved before the courts of the Judicial District of São Paulo, State of São Paulo, Brazil, except where mandatory consumer protection rules or data protection laws provide otherwise, including the right of data subjects to bring claims in their country of residence.