Last updated: August 2026
This Privacy Policy explains what personal data BonsaiHacks collects, why we collect it, how long we keep it and which rights you can exercise. It applies to this website and to every page published under this domain.
1. Who is the controller of your data
The controller is GNOMO DIGITAL SOLUÇÕES WEB LTDA, CNPJ 47.167.102/0001-60, with registered office at Pedro Delmanto Sobrinho, 196 — Vila Maria, Botucatu — SP, CEP 18611-355, Brazil. You can reach us at any time through our contact page, which is our official channel for privacy requests.
We process personal data in accordance with the Brazilian General Data Protection Law (LGPD, Law 13.709/2018) and, for visitors located in the European Economic Area or the United Kingdom, with the General Data Protection Regulation (GDPR / UK GDPR).
2. What data we collect
- Data you send us voluntarily: the name, e-mail address and message you type into our contact form. We only use it to answer you.
- Technical data collected automatically: IP address, approximate region, device type, operating system, browser, referring page, pages visited, time on page and interaction events.
- Advertising and measurement identifiers stored by third parties through cookies and similar technologies, as described in section 5.
We do not ask for and do not want sensitive data. Never send us bank account numbers, card numbers, passwords, copies of identity documents, health information or any other confidential data — we do not process applications of any kind.
3. Why we process your data and on which legal basis
- To reply to your messages — legal basis: your request / performance of a pre-contractual step (LGPD art. 7, V; GDPR art. 6(1)(b)).
- To operate, secure and improve the website, including preventing abuse and fraud — legal basis: legitimate interest (LGPD art. 7, IX; GDPR art. 6(1)(f)).
- To measure audience and understand which guides are useful — legal basis: consent where required, otherwise legitimate interest.
- To display advertising, including personalised advertising where you have agreed to it — legal basis: consent (LGPD art. 7, I; GDPR art. 6(1)(a)).
- To comply with legal obligations and to defend our rights — legal basis: legal obligation and regular exercise of rights.
4. Who we share data with
We do not sell your personal data. Data may be shared with service providers that act on our behalf or as independent controllers of their own services, namely: hosting and content delivery providers, audience measurement providers (Google Analytics) and advertising providers (Google AdSense and its authorised vendors, as declared in our ads.txt file). Each of these providers processes data under its own privacy terms.
Some of these providers are located outside Brazil and outside the European Union. When data is transferred internationally we rely on the safeguards offered by the provider, such as standard contractual clauses and adequacy decisions.
5. Cookies and similar technologies
This site uses cookies and comparable technologies for three purposes: to make the site work (strictly necessary), to measure audience, and to deliver and limit the frequency of advertising. Strictly necessary items do not require consent; measurement and advertising items are only activated with your consent where consent is legally required.
Advertising partners may use identifiers to show ads based on your previous visits to this or other websites. You can change or withdraw your choices at any time using the privacy settings link available in the consent banner of this site, and you can also block or delete these files directly in your browser settings. Blocking them does not stop you from reading our content.
6. How long we keep data
Contact-form messages are kept for up to 24 months after the last interaction, so that we can follow up on a request. Technical logs are kept for up to 6 months. Measurement and advertising data are kept according to the retention periods of the respective providers. After these periods data is deleted or anonymised, except where a longer period is required by law.
7. Your rights
Under the LGPD and the GDPR you may request: confirmation that we process your data; access to your data; correction of incomplete or outdated data; anonymisation, blocking or deletion of unnecessary or excessive data; portability; information about with whom we share data; withdrawal of consent; and objection to processing based on legitimate interest. In the EEA and the UK you also have the right to lodge a complaint with your supervisory authority; in Brazil, with the ANPD.
To exercise any of these rights, write to us through the contact page. We answer within 15 days (LGPD) or one month (GDPR), and we may ask for information that confirms your identity before acting on a request.
8. Security
We apply technical and organisational measures appropriate to the nature of the data we handle, including encrypted transport (HTTPS), restricted administrative access and periodic updates of the platform. No system is completely immune to incidents; if a security incident is likely to create a relevant risk to your rights, we will inform you and the competent authority as required by law.
9. Children
This website is intended for adults. We do not knowingly collect personal data from children or adolescents. If you believe a minor has sent us personal data, contact us and we will delete it.
10. Third-party links
Our guides link to banks, insurers, employers and other institutions. Once you follow an external link you are subject to the privacy policy of that third party, and we have no control over what they collect. Read their terms before providing any information.
11. Changes to this policy
We may update this Privacy Policy to reflect legal, technical or editorial changes. The date at the top of the page always shows the current version, and material changes will be highlighted on this page.
This website is informative only and does not provide financial, legal or investment advice. See also our Terms of Use.