Privacy Policy
Last updated: September 22, 2026
This Privacy Policy describes how AGROMAT processes personal data in connection with the agromat.agr.br website, in accordance with Brazil's General Data Protection Law (Lei nº 13.709/2018 — LGPD) and the guidance of the National Data Protection Authority (ANPD).
This document aims to be simple and transparent about how the site actually works. It is not a substitute for individualized legal advice and does not, on its own, certify full legal compliance, which depends on a broader legal and organizational assessment.
1. Who the controller is
The controller of the personal data processed through this website is AGROMAT SA, registered under Brazilian company registration number (CNPJ) 17.718.668/0001-71 ("Agromat"), located at Avenida Marechal Deodoro, 687 - Araés, Cuiabá - MT, 78005-101, Brazil (head-office address per the site; legal domicile to be confirmed).
Contact for privacy matters, including those concerning the Data Protection Officer (DPO / Encarregado): contato@agromat.agr.br.
2. What data may be processed
This is an institutional website. There is no user registration, login area or profiling. The personal data that may be processed is:
- Contact data provided voluntarily in the contact form: name, e-mail, phone (optional), subject and message.
- Technical browsing data strictly necessary for the operation and security of the site (for example, IP address and browser information present in the hosting server logs).
- Cookie preference: your choice (accept/reject categories) is stored locally in your browser (local storage key “agromat_consent”). It is not an identifier and is not sent to our servers.
- If you choose to load the embedded Google map in the “Where we are” section, Google may process your IP address and set its own cookies, subject to Google's privacy policy.
3. Purposes of processing
Data is processed for the following purposes:
- Responding to requests and business enquiries sent through the form.
- Operating, securing and preventing fraud and abuse on the site.
- Recording and honoring your cookie preference.
- Complying with applicable legal and regulatory obligations and the regular exercise of rights.
4. Legal bases
For each purpose, the legal basis is defined according to the context. Where there is not enough information to determine the concrete basis, the item is flagged for legal review.
- Contact form: pre-contractual steps and/or legitimate interest in handling the business enquiry (art. 7, V and IX, LGPD). [TODO — CONFIRMAR COM A AGROMAT]
- Necessary technical browsing data: legitimate interest in operating and securing the site (art. 7, IX, LGPD).
- Cookie preference: compliance with the LGPD itself / information security; the preference is stored to honor your choice.
- Embedded Google map and other non-essential cookies: consent (art. 7, I, LGPD).
- Compliance with a legal or regulatory obligation, where applicable (art. 7, II, LGPD).
6. Third-party technologies and services
We may use the following processors/services, according to the purpose:
- Website hosting and delivery (infrastructure). [TODO — CONFIRMAR COM A AGROMAT] (identify the provider).
- Sending contact-form messages from Agromat's official e-mail address (contato@agromat.agr.br), through the e-mail service contracted for the domain.
- Content management system (CMS) for the site's text — restricted administrative access; it does not collect visitor data.
- Google Maps (Google LLC) — only if you consent to loading the map.
7. Data sharing
We do not sell personal data. Sharing occurs only with the processors necessary for the purposes above, with public authorities when required by law, and for the regular exercise of rights.
Loading the Google map involves transferring data (for example, IP address) to Google, which may occur outside Brazil, subject to applicable safeguards. [TODO — CONFIRMAR COM A AGROMAT] (assess international transfer and safeguards for the other processors).
8. Storage and retention
Contact form messages are retained for as long as needed to handle the request and for a reasonable additional period for defense in proceedings and compliance with legal obligations.
Technical server logs are kept for a limited period, according to the hosting provider's policy. [TODO — CONFIRMAR COM A AGROMAT] (define concrete retention periods).
The cookie preference stays in your browser until you clear it or until a relevant version change of this policy.
9. Security
We adopt technical and administrative measures to protect data, such as HTTPS connection, least-privilege access to the CMS, secrets kept only on the server and not exposed to the browser, and data minimization by default (privacy by design).
No method of transmission or storage is completely secure; we pursue continuous improvement of our practices.
10. Data subject rights
Under the LGPD, you may request, where applicable:
- confirmation that processing exists;
- access to the data;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of the law;
- portability, subject to trade and industrial secrets;
- deletion of data processed on the basis of consent;
- information about the entities with which the data has been shared;
- information about the possibility of not giving consent and the consequences;
- withdrawal of consent.
11. How to withdraw consent
Withdrawal is free and straightforward. For non-essential cookies, use the “Cookie preferences” link in the footer of any page: you can disable categories at any time. When you disable the Google map, it will no longer load on future visits.
For other processing based on consent, send the request to the privacy contact.
12. Contact and exercise of rights
To exercise your rights or clarify privacy questions, contact us at contato@agromat.agr.br.
We will respond within the time and manner set by applicable law. You may also file a complaint with the ANPD.
13. Changes to this Policy
This Policy may be updated to reflect legal, technical or operational changes. Relevant changes to cookie categories or third-party services cause the site to request a new consent decision.
14. Last updated
Last updated: 2026-09-22. Consent mechanism version: 1.0.0.