This global privacy notice describes the company-level privacy framework for BrasMedia websites, public legal materials, and request-handling operations that are not limited to one specific product.
What this notice covers
This notice applies to:
- visits to BrasMedia public sites and legal/documentation properties;
- inbound questions, privacy requests, and responsible disclosure reports sent to BrasMedia;
- shared operational records created while responding to customer, prospect, vendor, or legal inquiries.
Product-specific applications and services may publish their own privacy documents. Where a product-specific notice addresses the same processing activity in more detail, the more specific product notice controls for that product interaction.
Data categories BrasMedia may process at the company level
Depending on the interaction, BrasMedia may process:
- identity and business contact details that you submit in a contact form or request flow;
- organization details needed to route a legal, procurement, privacy, or security inquiry;
- records of correspondence, attachments, and follow-up notes;
- basic technical data generated by the website or documentation hub, such as browser metadata, IP-derived connection information, device characteristics, and server logs;
- records showing when a request was received, assigned, verified, answered, restricted, or closed;
- limited preference, consent, or accessibility-related information where needed to operate the site or honor user choices.
BrasMedia may receive this information directly from you, from your organization, from ordinary site usage, or from service providers that help deliver website, communications, or documentation workflows.
Why BrasMedia processes this information
BrasMedia may use company-level information to:
- respond to questions, requests, and legal notices;
- authenticate the origin of a privacy or security request when verification is reasonably necessary;
- protect the integrity, availability, and security of public web properties;
- document compliance decisions, disclosures, and follow-up actions;
- improve the clarity, structure, and accessibility of public documentation;
- administer public-site preferences, consent flows, and publishing analytics where law and context permit.
Lawful bases and consent discipline
BrasMedia may rely on one or more lawful bases recognized by applicable data protection law, including contract-related necessity, legitimate interests, legal obligations, and consent where consent is the appropriate basis.
When legitimate interests are used, BrasMedia expects those interests to be tied to documented operational needs such as site security, abuse prevention, recordkeeping, or response management, and not to override applicable statutory rights.
BrasMedia does not treat this notice as blanket consent for every future site implementation. Where a particular site feature, optional cookie, or marketing tool requires consent under applicable law, BrasMedia expects that consent to be requested through an appropriate mechanism for the relevant jurisdiction and context.
Cookies, analytics, and site telemetry
BrasMedia public sites and documentation properties may use technical storage, server logs, and limited analytics or measurement tools to:
- keep sessions and security state functioning correctly;
- remember language, display, or accessibility preferences;
- understand publishing quality, navigation patterns, and service health;
- detect abuse, misconfiguration, or unusual operational activity.
These tools should be selected and configured in a way that is proportionate to the purpose and consistent with applicable law. Where an optional category of tracking or campaign technology is introduced, BrasMedia expects the relevant surface to provide an appropriate notice and choice flow instead of relying on this document alone.
Sharing and service providers
BrasMedia does not publish customer or requester personal data for unrelated commercial use. Information may be disclosed on a need-to-know basis to:
- hosting, infrastructure, communications, or document-delivery providers that support the public sites and request flows;
- professional advisors, auditors, or service providers acting under confidentiality or contractual controls;
- counterparties, authorities, or courts where disclosure is required or appropriate under applicable law;
- internal or affiliated teams that need the information to triage a request, investigate an issue, or maintain the relevant site or product surface.
This notice does not state that BrasMedia sells identifiable personal data from privacy requests, legal inquiries, or public-site interactions for unrelated third-party marketing use. If a materially different data-sharing model is ever introduced for a public property, BrasMedia expects that model to be documented explicitly.
Retention approach
Company-level records are retained according to their operational and legal purpose. As a general rule:
- request and correspondence records may be retained while the matter remains active and for a defensible follow-up period afterward;
- security and system logs may be retained for operational security, abuse prevention, and investigation needs;
- legal or accounting records may be kept for as long as applicable law, dispute risk, or documented compliance obligations require.
Where possible, BrasMedia expects records to be deleted, restricted, or anonymized when continued identifiable retention is no longer justified.
International transfers and cross-border handling
BrasMedia may rely on service providers or infrastructure located in more than one jurisdiction. Where cross-border handling occurs, BrasMedia expects the transfer to be supported by an appropriate legal basis and reasonable contractual or technical safeguards for the relevant context.
Your rights and verification
Depending on the law that applies to your situation, you may have rights to:
- request access to personal data;
- request correction of inaccurate information;
- request deletion or restriction where continued processing is not justified;
- object to certain processing activities;
- request information about the basis and scope of the processing.
BrasMedia may ask for enough information to verify identity, authority, and scope before disclosing or deleting information. Where the relevant data is controlled by a customer organization or tied to a product workspace, BrasMedia may also need to coordinate the request with that organization or with the applicable product team.
To route a request, use the guidance in Contact and Privacy Requests.
Children
The BrasMedia legal hub and related public company pages are not directed to children. If BrasMedia becomes aware that personal data was submitted by or about a child in a context where that submission should not have occurred, the company expects to review and address the issue promptly.
Security and data protection posture
BrasMedia expects company-level data to be handled with measures that are reasonable for the nature of the site, the request type, and the operational risk involved. That may include access control, credential discipline, logging, change management, vendor review, and incident-response processes appropriate to the environment.
Changes to this notice
BrasMedia may update this notice when the structure of the hub, request channels, or company-level practices materially change. The version and last-updated fields on this page reflect the current published revision.