Privacy policy

Last updated: September 28, 2026

This policy explains how we handle personal data when you visit poolee.com.br and contact us. It follows Brazil's General Data Protection Law (Law No. 13,709/2018, LGPD).

Who is responsible

The data controller is Bruno Santos de Souza, responsible for the POOLEE Leisure brand, Alphaville · Barueri/SP, Brazil.

The data protection officer is also Bruno Santos de Souza, reachable at pooleelazer@gmail.com.

What data we process and why

1. Visiting the site. When you open the site, our hosting, delivery and security provider (Cloudflare) receives technical connection data, such as IP address, browser type and the page requested. It is used to deliver the site, protect it against attacks and abuse, and diagnose failures. Legal basis: legitimate interest.

2. Service area check. When you type a city or postal code (CEP) in the "Where we work" section, the text is sent to our server only to tell you whether we serve your area. We do not store what you type or link it to you, and it does not appear in the server's technical logs. To look up a postal code, we send only the code itself to public address lookup services (BrasilAPI and, if unavailable, OpenCEP). The result of the check (the city and whether it is within our service area) may be cached for up to 30 days, identified by an encrypted code of the postal code or city, with no data about who searched. Legal basis: legitimate interest.

3. WhatsApp contact. When you tap a WhatsApp button, you are taken to the WhatsApp app with a pre-filled message that may include the city you searched. The conversation takes place on WhatsApp, which has its own privacy policy. The data you send us in the conversation (such as name, phone number, project address and project details) is used to handle your request and prepare a proposal. Legal basis: pre-contractual steps at your request.

4. Usage statistics (only with your consent). If you accept the "Statistics" category, we use Google Analytics to understand how the site is used: pages visited, device type, approximate region and where the visit came from. We also record two events: a tap on a WhatsApp button (and which part of the page it was on) and the result of the service area check (inside, outside or not found, with the city and state). We never send the text you typed or the postal code. Data is retained for 14 months. We have not enabled Google Signals. Cookies: _ga and _ga_*. Legal basis: consent.

5. Marketing (only with your consent). If you accept the "Marketing" category, we use advertising tools from Google (Google Ads) and Meta (Facebook and Instagram) to measure the results of our ads and to show them to people who have visited the site. With this consent, browsing data and taps on a WhatsApp button may be used by Google to measure and optimize our campaigns and to build ad audiences. We send Meta a tap on a WhatsApp button and the result of the service area check (only inside, outside or not found, with no city and no postal code). None of these tools read what you type on the site. Cookies: _gcl_aw (Google, set only when you arrive at the site from a Google ad), _fbp and _fbc (Meta). Legal basis: consent.

6. Your cookie choice. We store in your browser the choice you made in the cookie notice (which categories you accepted, the date and the version of this policy), so we don't ask again on every visit. This record stays only on your device and is renewed every 12 months or whenever this policy changes. Legal basis: legitimate interest, as it is needed for the notice to work.

Nothing for statistics or marketing is loaded before you accept the corresponding category. You can accept all, reject all or choose by category. To change your choice at any time, use the "Cookie preferences" link in the site footer. When you withdraw consent, the cookies for those categories are deleted.

We share data only with the providers needed for the purposes above: Cloudflare (hosting and security), BrasilAPI and OpenCEP (postal code lookup, the code only), Google (Google Analytics and Google Ads, if you consent) and Meta (Pixel and WhatsApp). We do not sell personal data.

International transfers

Cloudflare, Google and Meta may process data on servers outside Brazil. These transfers follow the safeguards set out in these providers' contracts and terms, under Article 33 of the LGPD.

How long we keep data

Technical access logs: for the hosting provider's retention period, for security purposes.
Cached service area results: up to 30 days, without identifying who searched.
Google Analytics: 14 months.
Conversations and service data: for as long as needed to handle your request and, if there is a contract, for the periods required by law.
Cookie choice: up to 12 months, in your own browser.

Your rights

Under the LGPD, you may request at any time: confirmation that we process your data; access to it; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary data or data processed in breach of the law; portability; deletion of data processed on the basis of your consent; information about who we share it with; and withdrawal of consent. To exercise any of these rights, write to pooleelazer@gmail.com. You may also file a complaint with Brazil's National Data Protection Authority (ANPD).

Security

The site uses an encrypted connection (HTTPS), security policies that prevent unauthorized scripts from running, and only loads third-party services with your consent.

Children and teenagers

The site is not directed at people under 18, and we do not knowingly process data from children or teenagers.

Changes to this policy

We may update this policy. When we do, the date at the top changes and the cookie notice appears again so you can confirm your choice.