Introduction
LSK Technologies Ltda. ("LSK Technologies," "we," "us," or "our") is a technology company registered under CNPJ 68.423.163/0001-10, headquartered at Rua Osvaldo Aranha, 258, Três Portos, Sapucaia do Sul — RS, Brazil. We develop and deliver technology solutions at the intersection of life sciences, laboratory management, and healthcare operations.
This Privacy Policy explains how we collect, use, store, protect, and disclose information about you when you visit our website (the "Site"), communicate with us by email or phone, or interact with us in the context of a business relationship. It also explains the rights you hold over your personal data and how to exercise them, regardless of whether you are located in Brazil, the European Union, or any other jurisdiction.
We act as the data controller for the personal information processed in connection with our website and business activities. Where we engage subprocessors to handle data on our behalf, those relationships are governed by appropriate data processing agreements ensuring comparable standards of protection.
By accessing and using our Site, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, please discontinue use of the Site. This policy is designed to satisfy the requirements of Brazil's Lei Geral de Proteção de Dados (LGPD, Law No. 13,709/2018) and, where applicable to users in the European Economic Area, the General Data Protection Regulation (GDPR, Regulation EU 2016/679). It also aligns with the transparency standards required by advertising and analytics platforms, including Google Ads policies.
Information We Collect
We collect personal information in three principal ways: directly from you when you choose to provide it, automatically as you navigate our Site, and occasionally from third-party sources such as analytics or advertising partners. Below is a detailed breakdown.
2.1 Information You Provide Directly
When you reach out to us through our contact channels — whether by emailing us at [email protected], calling our team, or connecting with us at an industry event — you may provide us with:
- Your full name and professional title;
- Your employer or institution name;
- A business email address and/or telephone number;
- The content of any message, inquiry, or request you send us;
- Any documents, attachments, or additional context you voluntarily share.
We collect only what you voluntarily offer. Providing this information is never mandatory to browse our Site — it is required only if you wish to initiate communication with us. We do not operate user accounts, portals, or member areas, and we do not run data-capture forms on our Site at this time.
2.2 Information Collected Automatically
Like virtually every website, our Site collects certain technical data automatically whenever a device connects to it. This is inherent to how the internet works and, depending on the circumstances, may or may not constitute personal data:
- Log data: IP addresses, browser type and version, operating system, referring URL, pages visited, time spent on pages, and the date and time of your visit. This information is captured by our web server and analytics infrastructure.
- Device information: Screen resolution, device category (desktop, tablet, mobile), and general hardware type, as reported by your browser's User-Agent string.
- Usage and navigation data: The pages you view, the order in which you view them, links you click, and how you arrived at the Site (organic search, direct, referral, or paid advertising).
- Approximate geolocation: Derived from your IP address to a city or region level. We do not collect precise GPS location data.
- Cookie and tracking technology data: As described in detail in Section 4 of this policy.
2.3 Information From Third Parties
We may receive aggregated or pseudonymous information about how our advertising campaigns perform from platforms such as Google Ads and Google Analytics. This may include the general characteristics of users who saw or clicked our advertisements (e.g., interest categories, broad age ranges, device types). We do not receive individually identifiable information from these platforms in a way that allows us to identify you personally without your direct involvement.
How We Use Your Information
We are committed to using your data only for purposes that are legitimate, proportionate, and that you could reasonably anticipate when sharing information with a technology company. Every processing activity we conduct has a lawful basis under LGPD and, where GDPR applies, under Article 6 of that Regulation.
3.1 Responding to Inquiries and Managing Business Relationships
When you contact us, we use the information you provide to respond to your message, answer your questions, provide quotations, arrange meetings, and manage the ongoing commercial relationship that may follow. The lawful basis for this processing is the performance of a contract or pre-contractual steps at your request (LGPD Art. 7, VI; GDPR Art. 6(1)(b)), as well as our legitimate interests in conducting business effectively.
3.2 Improving Our Website and Services
We analyse aggregated usage and technical data to understand which areas of our Site are most useful, which content generates the most engagement, and where visitors encounter difficulty. This informs decisions about design, content, and navigation. The lawful basis is our legitimate interest (LGPD Art. 7, IX; GDPR Art. 6(1)(f)) in maintaining and improving a functional, high-quality digital presence.
3.3 Marketing and Advertising
We use analytics and advertising platforms to understand the reach of our marketing campaigns, identify which audiences are most relevant for our solutions, and measure the effectiveness of paid advertising spend. Where we engage in remarketing (showing our advertisements to people who have previously visited our Site), we do so through platforms that provide appropriate consent mechanisms to end users. The lawful basis for this processing is our legitimate interest in promoting our services to organisations and professionals who may benefit from them, subject to your right to object as described in Section 8.
3.4 Legal and Compliance Obligations
We may process and retain your personal data when required to do so by applicable Brazilian law, court order, regulatory demand, or to establish, exercise, or defend legal claims. This processing is grounded in legal obligation (LGPD Art. 7, II; GDPR Art. 6(1)(c)).
We do not use your personal data for automated decision-making that produces legal or similarly significant effects. We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.
Cookies & Tracking Technologies
Cookies are small text files placed on your device by a website you visit. They are widely used to make websites work efficiently, to remember user preferences, and to provide owners with information about how their sites are used. We also employ similar technologies such as pixel tags (web beacons) and browser local storage. This section explains exactly what tracking technologies we use and for what purpose.
4.1 Types of Cookies We Use
4.2 Google Analytics & IP Anonymisation
We use Google Analytics 4 (GA4) to collect aggregated behavioural data about how visitors use our Site. We have configured GA4 with IP anonymisation enabled, meaning the last octet of each visitor's IP address is masked before storage by Google. Data collected through GA4 is processed by Google Ireland Limited (for EEA users) or Google LLC (for other users) under the terms of Google's Data Processing Amendment. We do not upload to Google any information that would allow an individual to be re-identified.
4.3 Google Ads Conversion Tracking & Remarketing
If you click on one of our Google Ads advertisements and subsequently visit our Site, a cookie is set that records the visit for attribution purposes. This allows us to measure whether our ad campaigns lead to meaningful engagement. We may also create remarketing audiences — lists of users who visited specific pages — to show relevant follow-up advertisements via the Google Display Network. Google's data collection in this context is governed by its own Privacy Policy and, where applicable, by your personalised advertising preferences set at adssettings.google.com.
4.4 Managing Your Cookie Preferences
Strictly necessary cookies cannot be disabled because the Site cannot function without them. For all other categories, you have several options:
- Browser settings: Most browsers allow you to block or delete cookies via their Settings or Preferences menu. Disabling analytics and advertising cookies may affect your experience and our ability to measure site performance.
- Google opt-out: You can opt out of Google Analytics tracking across all websites by installing the Google Analytics Opt-out Browser Add-on. You can manage Google's advertising personalisation at adssettings.google.com.
- Industry opt-outs: For broader ad-network opt-outs, visit optout.aboutads.info (US-based networks) or youronlinechoices.eu (EEA users).
Where required by applicable law (including in the EEA and in Brazilian states where data protection authorities have issued binding guidance), we obtain your consent before placing non-essential cookies.
Sharing With Third Parties
We share personal data only when there is a clear, legitimate reason to do so, and we never sell your information. The categories of third parties with whom we share data are listed below.
5.1 Service Providers and Subprocessors
We engage technology service providers to help us operate our Site and business. These subprocessors act on our instructions and are permitted to process your data only for the specific purposes we define in our agreements with them. Current categories of subprocessors include:
- Web hosting and infrastructure: Providers that host our website files and databases on their servers, located in Brazil or jurisdictions with adequate data protection frameworks.
- Analytics platforms: Google Analytics 4 (Google LLC / Google Ireland Limited) for traffic measurement and site performance analysis.
- Advertising platforms: Google Ads (Google LLC) for campaign management, conversion measurement, and remarketing.
- Email and communication tools: Email service providers used to route and store business correspondence.
- Professional advisers: Our legal counsel, accountants, and auditors, who are bound by professional confidentiality obligations.
5.2 Legal and Regulatory Disclosures
We may disclose personal data to courts, government authorities, law enforcement agencies, or regulatory bodies when we are legally required to do so, when we believe disclosure is necessary to protect our rights or the safety of individuals, or in connection with the investigation of fraud or other unlawful activity.
5.3 Business Transactions
If LSK Technologies were to undergo a merger, acquisition, reorganisation, or sale of all or part of its business, personal data held by us might be transferred to the acquiring or merging entity as part of that transaction. In such circumstances, we would take reasonable steps to ensure that the recipient of your data maintains equivalent protections to those described in this policy, and we would notify affected individuals as required by law.
5.4 International Data Transfers
Because we use global platforms like Google Analytics and Google Ads, your data may be transferred to and processed in the United States or other countries outside Brazil or the EEA. Google operates under the EU–U.S. Data Privacy Framework (for EEA transfers) and provides Standard Contractual Clauses for international transfers. For transfers out of Brazil, we rely on LGPD Art. 33 mechanisms, including transfers to countries recognised by Brazil's national data protection authority (ANPD) as providing an adequate level of protection, or on contractual safeguards where required.
Data Retention
We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law. Our general retention practices are:
- Business correspondence and contact records: Retained for the duration of a business relationship plus a minimum of five (5) years afterward, to comply with Brazilian commercial and tax record-keeping requirements, and to enable us to respond to any future claims arising from our interactions.
- Website server logs (IP addresses, access records): Retained for a maximum of six (6) months for security monitoring and debugging, after which they are automatically purged or anonymised.
- Google Analytics data: Retained within Google's platform for a maximum of fourteen (14) months at the user and event level, as configured in our GA4 property settings. Aggregate reports may be retained indefinitely.
- Google Ads conversion data: Managed within the Google Ads platform per Google's standard retention schedules, typically up to eighteen (18) months for conversion history.
- Cookie consent records: Retained for twelve (12) months from the date consent was recorded, or until you withdraw it.
When data reaches the end of its applicable retention period, we securely delete or anonymise it in a way that prevents re-identification. We apply the same standards to data held by our subprocessors, requiring them to certify data deletion or return data to us upon termination of their services.
Data Security
We take the security of personal information seriously and have implemented technical and organisational measures designed to protect it against accidental loss, destruction, alteration, unauthorised disclosure, or access. Our security measures include:
- Encryption in transit: Our Site is served exclusively over HTTPS using TLS 1.2 or higher, ensuring that data exchanged between your browser and our web server is encrypted in transit.
- Access controls: Administrative access to systems that store personal data is restricted to authorised personnel on a need-to-know basis, and is protected by strong authentication mechanisms including multi-factor authentication where technically feasible.
- Vendor due diligence: We review the security practices of third-party subprocessors before onboarding them and maintain data processing agreements that obligate them to appropriate security standards.
- Incident response: We maintain an internal process for detecting, investigating, and responding to personal data breaches. Where a breach is likely to result in a risk to individuals' rights and freedoms, we will notify the relevant data protection authority and, where required, the affected individuals within the timeframes prescribed by LGPD and GDPR.
- Regular review: We periodically review our data processing activities, security controls, and this Privacy Policy to ensure they remain appropriate and up to date.
Important: No method of electronic storage or internet transmission is completely secure. While we strive to protect your personal information using commercially reasonable means, we cannot guarantee absolute security. If you believe your interaction with us has been compromised, please contact us immediately at [email protected].
Your Rights
Depending on your location, you may have significant rights over the personal data we hold about you. Brazilian data subjects enjoy rights under LGPD Art. 18; individuals in the EEA enjoy rights under GDPR Articles 15–22. In practice, we apply these rights consistently to all individuals, regardless of where they reside.
Right of Access
You may request confirmation of whether we process personal data about you, and if so, a copy of that data along with details of how we use it, where it comes from, and with whom we share it.
Right to Correction
You may ask us to correct inaccurate or incomplete personal data we hold about you. We will update our records promptly and, where feasible, notify relevant subprocessors of the correction.
Right to Deletion
You may request the erasure of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (if consent was the basis), or where the data has been unlawfully processed. Certain legal obligations may prevent full deletion.
Right to Restriction
You may ask us to restrict how we use your data while a dispute about accuracy or legality is resolved, or where you need us to preserve it for a legal claim even if we no longer need it ourselves.
Right to Object
You may object at any time to our processing of your personal data where we rely on legitimate interests as our lawful basis — including processing for direct marketing or analytics purposes. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
Right to Data Portability
Where processing is based on consent or contract and is carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format, or transmit it directly to another controller where technically feasible.
Right to Withdraw Consent
Where we process data on the basis of your consent (such as certain cookies), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal. Instructions for withdrawing cookie consent appear in Section 4.
Right to Lodge a Complaint
If you believe we have processed your data unlawfully, you have the right to lodge a complaint with Brazil's ANPD (Autoridade Nacional de Proteção de Dados) or, if you are in the EEA, with the supervisory authority in your country of residence.
How to Exercise Your Rights
To exercise any of the above rights, please send us a written request by email to [email protected] with the subject line "Data Subject Rights Request." Please include your full name, a description of the right you wish to exercise, and enough detail to allow us to identify the data we hold about you. We will respond within the timeframe required by applicable law — within fifteen (15) days for LGPD requests and within thirty (30) calendar days for GDPR requests, extendable by a further two months for complex or numerous requests.
We will not charge a fee for responding to rights requests unless they are manifestly unfounded or excessive. Where a fee applies, we will notify you in advance. We may need to verify your identity before fulfilling a request, to protect against fraudulent access to another individual's data.
Children's Privacy
Our website and services are directed exclusively at professionals, businesses, and organisations operating in the life sciences, laboratory, and healthcare technology sectors. They are not intended for, and do not knowingly target, individuals under the age of eighteen (18).
We do not knowingly collect personal data from children. If we become aware that we have inadvertently received personal information from a person under eighteen, we will delete that information from our records without delay. If you are a parent or legal guardian and believe your child has submitted personal data to us, please contact us immediately at [email protected] so that we can take appropriate action.
Changes to This Policy
We review this Privacy Policy at least annually and whenever there is a material change to how we collect or use personal data — for example, when we introduce a new third-party service, modify our cookie configuration, or when applicable law is updated. The "Last updated" date at the top of this page reflects when the most recent revision was made.
Where changes are material — meaning they significantly affect your rights or the way we use your data — we will take additional steps to bring them to your attention, which may include prominently displaying a notice on our Site. We encourage you to revisit this page periodically to stay informed about how we handle your information.
Your continued use of our Site after a policy update constitutes acceptance of the revised terms, to the extent permitted by applicable law. If you disagree with any material change, you may exercise your rights as described in Section 8 or cease using the Site.
Contact the Data Controller
All questions, requests, or concerns regarding this Privacy Policy, or regarding the processing of your personal data by LSK Technologies, should be directed to us using the contact details below. We are committed to addressing all enquiries promptly and transparently.
If you are raising a data protection complaint, please clearly state that in your correspondence so we can route it to the appropriate member of our team. For technical requests such as cookie opt-outs, please also refer to the steps in Section 4 above.