✦ data protection

Data Protection and the LGPD

uInspect is a Brazilian company. The processing of personal data on our platform is governed by the LGPD (Law No. 13,709/2018), Brazil's General Data Protection Law, a statute similar in spirit to Europe's GDPR. uInspect adopts the LGPD as its minimum reference and works consistently to raise the bar.

How we apply the LGPD

Legal bases for processing

Every processing of personal data on the platform relies on an explicit legal basis from article 7 of the LGPD:

  • Performance of a contract (normal use of the platform by the corporate client)
  • Compliance with a legal obligation (retention of evidence for tax and regulatory purposes)
  • Legitimate interest (security and fraud prevention)
  • Consent (direct marketing communications)

Principles in practice

  • Purpose: data is collected for legitimate, specific purposes made known to the data subject
  • Adequacy: processing consistent with the stated purposes
  • Necessity: we collect only the minimum necessary
  • Transparency: clear information about processing, in the privacy policy and the terms of use
  • Security: technical and organizational protection measures (encryption in transit and at rest, access control, workspace segregation)
  • Prevention: measures to avoid harm arising from data processing
  • Non-discrimination: no processing for discriminatory purposes
  • Accountability: ability to demonstrate compliance through documentation and audit

Data subject rights

As the subject of your data, you can exercise all the rights provided in article 18 of the LGPD:

  • Confirmation that processing takes place
  • Access to the data
  • Correction of incomplete, inaccurate or outdated data
  • Anonymization, blocking or deletion of data that is unnecessary or processed in violation of the law
  • Portability of the data to another provider
  • Deletion of personal data processed with consent
  • Information about the public and private entities with which uInspect shared your data
  • Information about the option of not giving consent and the consequences of refusing
  • Withdrawal of consent

How to exercise your rights

Send your request to privacidade@uinspect.com.br, stating:

  • Full name and identification document
  • The right you wish to exercise
  • A clear description of what you are requesting and, when applicable, of the data involved

We respond within the 15-day period set by the LGPD. Deletion requests may be partially held back by legal obligations (tax retention, evidence in ongoing proceedings).

Data Protection Officer (DPO)

The DPO is the official channel between uInspect, data subjects and the ANPD (Autoridade Nacional de Proteção de Dados, Brazil's national data protection authority). Contact: dpo@uinspect.com.br.

Full privacy policy

The full detail of what data we collect, what we use it for, who we share it with and how long we retain it is in the Privacy Policy.

Security posture

The technical and organizational measures we apply to protect data are described in Security Posture.

Incidents

In the event of a security incident involving personal data, we notify the affected data subjects and the ANPD within the legal deadlines, describing the incident, the data involved, the related risks and the measures taken.

Legal review pending. This page is being validated by external counsel specialized in the LGPD. It describes our practices under Brazilian law and is not a statement of compliance with the GDPR, the CCPA or any other foreign legislation. This page is a courtesy translation of the Portuguese original, which prevails in case of divergence.