Privacy notice
Last updated: 28 September 2026
This notice explains, in plain language, how we handle the personal data you send through the Anthony Max website, in line with Brazil’s General Personal Data Protection Law (LGPD, Law No. 13,709/2018).
In short
- We only use your data to respond to your enquiry and send you a copy of your message.
- We use Google Analytics to measure visits and general interactions. We do not use advertising or send contact-form content to that tool.
- We don’t sell data or use it for marketing.
- You can ask to access, correct or delete your data at any time by emailing contato@anthonymax.com.
Who we are
Anthony Max is the brand and website of MAXWEB TECNOLOGIA LTDA, the Brazilian company responsible for the processing described here (the controller, under the LGPD).
- Legal name
- MAXWEB TECNOLOGIA LTDA
- CNPJ (Brazilian company number)
- 49.244.743/0001-04
- Registered office
- Canela, Rio Grande do Sul, Brazil
- Privacy contact
- contato@anthonymax.com
As a micro-enterprise, MAXWEB is a small-scale processing agent and is not required to appoint a data protection officer (DPO), under ANPD Resolution CD/ANPD No. 2/2022. For any privacy matter, write to contato@anthonymax.com.
What data we collect
We only collect what we need to respond to your enquiry.
Through the contact form
- Name, email and message: required, so we can understand your request and reply.
- Mobile / WhatsApp: optional, only used to get back to you on that channel, if you prefer.
- Topic: optional, to help us understand what you want to talk about.
Only include what is needed in your message. Please leave out passwords, documents and client information.
Technical data
- IP address: used temporarily, only in the server’s memory, to limit repeated submissions and prevent abuse. After that window, it is discarded.
- Duplicate-submission code: to avoid repeated messages, the server keeps, for up to 24 hours and also only in memory, a code derived from your submission (a cryptographic digest that cannot be used to read its content).
- Technical logs: the site’s logs do not include the form content, your name, email or phone number.
Cookies and browser storage
- Cookies: Google Analytics may use cookies or similar identifiers to measure visits, subject to your browser settings.
- Analytics and tracking: we use Google Analytics, provided by Google LLC, to measure visited pages, general interactions, browser, device and approximate visit origin. The tool makes requests to Google and may receive an IP address and technical browser data. We do not send your name, email, phone number or contact-form content to Google Analytics, and we do not use advertising.
How we use your data
- To respond to your enquiry and talk about what you asked for, by email or, if you prefer and share your mobile number, on WhatsApp.
- To send a copy of your message to your email, in the language you used on the site, as a record of what you sent.
- To keep the site secure and prevent abuse, such as automated or repeated submissions.
We don’t use your data for marketing or profiling.
Legal bases
We process your data on these LGPD legal bases:
- Preliminary steps related to a contract, at your request (art. 7, V): to respond to your enquiry, discuss what you need and send you the copy of your message.
- Legitimate interest (art. 7, IX): to keep the site secure and prevent abuse, through the temporary use of your IP address and of the duplicate-submission code.
Who we share data with
We only share data with the providers needed for the site and the contact form to work:
- Resend (Plus Five Five, Inc., United States): the provider that sends the form’s emails: the notification to us and the copy to you. Data may be processed in the United States; this international transfer is permitted under the LGPD because it is needed to handle your request (art. 33, IX).
- Email providers: used by the company to receive and reply to messages.
- Hosting: the site runs on a server contracted by the company.
- WhatsApp: only if you share your mobile number and prefer to talk there. The conversation takes place in that app, under its own terms.
We never sell your data or share it for marketing. We may disclose data when required by law or by a competent authority.
How long we keep data
- Messages stay in the company’s email inboxes for as long as needed to reply and follow up on the conversation.
- If the contact does not lead to a business relationship, we delete the data within 12 months of the last contact, unless the law requires us to keep it longer.
- If the conversation becomes a project, the data then follows the contract and the applicable legal obligations.
- The email delivery provider may keep records of sent emails for a limited period, under its own policy.
- Your IP address and the duplicate-submission code are kept only in the server’s memory and discarded automatically (the code within 24 hours).
You can ask us to delete your data sooner, at any time.
Your rights
Under the LGPD (art. 18), you can ask us at any time for:
- Confirmation that we process your data, and access to it
- Correction of incomplete, inaccurate or outdated data
- Anonymisation, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law
- Portability of your data to another provider
- Information about who we share your data with
- Withdrawal of consent, where processing relies on it
- Objection to processing that does not comply with the LGPD
To exercise your rights, email contato@anthonymax.com. We reply within 15 days. We may ask for some information to confirm your identity before acting on your request.
If you believe your request has not been handled, you can also file a complaint with Brazil’s National Data Protection Authority (ANPD) at gov.br/anpd.
Security
- The site uses an encrypted connection (HTTPS).
- The site has no database: form submissions are not stored on the site. Messages are kept in the company’s email inboxes, in the copy sent to you and, for a limited period, in the email delivery provider’s records.
- Access to the email inboxes is restricted to the people who handle enquiries at the company.
No measure removes every risk, but we work to protect your data. If a relevant security incident occurs, we will notify you and the ANPD, as the law requires.
Children and teenagers
The site is aimed at businesses and professionals and is not intended for children or teenagers. If you are under 18, please ask a parent or guardian to get in touch on your behalf.
Changes to this notice
We may update this notice when the site, our providers or the law change. The current version is always on this page, with the last updated date at the top.