Legal Documents Hub

1.1 General Information

For digital-course sales on phorte.com, the controller is ASSOCIAÇÃO DE EDUCAÇÃO E NOVAS TECNOLOGIAS PHORTE, a private non-profit entity registered under CNPJ No. 42.098.615/0001-42 and headquartered at Rua Rui Barbosa, No. 422, 1st floor, Bela Vista, São Paulo/SP, CEP 01326-010, Brazil. The Association issues purchase tax documents and receipts. Faculdade Phorte is the brand and educational institution providing the courses. The privacy contact is Data Protection Officer Leonardo Vinicius Alcarde Garcia.

This Policy covers the Phorte website, course pages, forms, checkout, support communications, and digital flows connected with buying and accessing courses, including the Edux Portal where data is processed to deliver the purchased service. Third-party sites and services may have their own notices.

LGPD refers specifically to Brazil’s General Personal Data Protection Law; this English version does not present it as a global privacy law. For visitors in the EU/EEA, the GDPR and relevant national electronic-privacy rules may apply. Relevant state privacy laws may apply in parts of the United States. See Privacy Laws by Market for more information. The law that applies depends on the service, the person’s location, and the specific processing involved.

Browsing the website or submitting a form does not constitute blanket consent to every use of personal data. We determine the applicable legal basis for each purpose, such as fulfilling a requested purchase, meeting legal obligations, consent where required, or another basis permitted by applicable law. When consent is the basis, we request it separately and you may withdraw it without affecting prior processing; withdrawal may disable only the optional feature concerned.

1.2 Data Collection and Purposes of Processing

Depending on the page, checkout, and country, data may include:

1.3 Data Storage and Retention Periods

There is no single retention period for all data. Each category is kept only as long as needed for its stated purpose and any applicable legal, tax, academic, or claims periods:

• Application access logs: where required by Brazil’s Internet Civil Rights Framework, kept for the statutory minimum of six months under confidentiality and in a controlled environment;
• Orders and tax documents: kept for the period required by tax, accounting, and consumer-protection duties;
• Academic records: retained under the rules that apply to the educational service and academic archive;
• Other data: kept until no longer needed for the purpose, unless another legal duty or the establishment, exercise, or defence of legal claims requires retention.

At the end of the applicable period, data is deleted or anonymized unless its retention is permitted or required by law. A deletion request does not override mandatory retention duties.

1.4 Legal Grounds and Consent

The legal basis is determined for each purpose and data set. To complete a requested purchase and provide a course, we may process data needed to perform the contract and steps requested by the buyer; billing and mandatory records may be processed to meet legal duties; optional analytics and advertising cookies depend on your cookie-panel choice. Checkout reminders and promotional communications are separate purposes and may have separate preference and unsubscribe controls. Legitimate interest is used only where permitted and after considering people’s rights and expectations.

1.5 Sharing of Personal Data

Only data needed for the purposes described may be shared with:

• Website/checkout and payment providers, including WooCommerce, Stripe, and PagBank, depending on the purchase flow;
• Technical services that serve or protect pages, such as Google-hosted fonts, Cloudflare, and hCaptcha, where used;
• Analytics and customer-relationship providers, including Google Analytics, Microsoft Clarity, and RD Station, subject to applicable preferences;
• Providers involved in checkout recovery and support, including CRM, webhook, SURI, and WhatsApp, as described in this Policy;
• Cookiez/Elementor, to record cookie consent status, selected categories, and the date/time of the choice;
• The Edux Portal and technology providers that enable access to digital courses;
• Competent public authorities when required by law, regulation, or a valid order.

Some providers may process data in other countries or allow access from abroad. Where this occurs, safeguards required by applicable law will be applied. Contact the Data Protection Officer for information about a particular provider or transfer.

1.6 Security Measures and Information Protection

We use technical and organizational safeguards proportionate to the data and risks. These may include access controls, protected data transfers, and internal procedures; safeguards vary by system and provider.

If a security incident presents a relevant risk or harm, we will take containment measures and notify the ANPD and affected people where and within the time limits required by applicable rules.

1.7 Data Subject Rights

Depending on the law applicable to your situation, you may exercise rights such as:

1. Confirmation of the existence of data processing;
2. Access to your personal data;
3. Correction of incomplete, inaccurate, or outdated data;
4. Anonymization, blocking, or elimination of unnecessary or excessive data;
5. Data portability to another service provider, where applicable;
6. Elimination of personal data processed on the basis of consent;
7. Information regarding public and private entities with which data has been shared;
8. Information about the possibility of denying consent and the corresponding consequences;
9. Withdrawal of consent through a simple and free procedure;
10. Objection to or restriction of certain processing and, where provided by law, opting out of sharing for targeted advertising.

1.8 Data Governance and Review

We review this notice when relevant services, providers, data flows, or legal requirements change. Staff handling personal data must follow internal access and confidentiality rules.

Cookie, provider, and retention information is updated when relevant technical changes are made to the services.

1.9 Policy Updates, Governing Law, and Jurisdiction

This Policy may be updated when the services, processing activities, or applicable rules change. The date above is the editorial review date for this version.

Brazilian law, including the LGPD, applies to relevant processing activities. This statement does not waive mandatory rights or forums available to a data subject or consumer under the law applicable where they live.

1.10 Privacy Laws by Market

European Union and European Economic Area — GDPR. The General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) may apply to Phorte when its territorial-scope conditions are met, including certain offers of goods or services to people in the EU or monitoring of their behavior there. Where it applies, the relevant processing must be assessed for requirements such as transparent notices, lawful bases, individual rights, processor arrangements, security, retention, and international transfers. National rules implementing the ePrivacy Directive may also apply to cookies and electronic communications. See the official GDPR text, the ePrivacy Directive, and the European Commission guidance on when the GDPR applies.

Where the GDPR applies, individuals may have rights including access, rectification, erasure, restriction of processing, data portability, objection, and the right to complain to a supervisory authority, subject to the conditions and exceptions in the Regulation. Requests can be sent to our privacy contact listed on this page. Any requirement to appoint an EU representative or Data Protection Officer must be assessed against Phorte’s actual activities and the GDPR’s conditions.

United States — ADPPA status. The American Data Privacy and Protection Act (ADPPA, H.R. 8152) was proposed federal legislation in the 117th U.S. Congress. It was reported with amendments and ordered printed on December 30, 2022; it did not become law in that Congress and is not presented here as a current legal duty. U.S. obligations depend on the federal and state laws in force for the relevant market and processing. See the official U.S. Government Publishing Office record for H.R. 8152.

2.1 General Information

This Policy explains cookies and similar technologies on Phorte websites. The configured consent model is worldwide opt-in: non-essential categories depend on the visitor’s choice. Cookies needed for requested functions, security, the cart, and recording that choice may operate separately, subject to applicable law.

2.2 What Are Cookies?

Cookies are small files stored in a browser or device. Pixels, local storage, and similar technologies may also record identifiers, pages visited, and events. Their nature and duration vary; session cookies are not necessarily removed by every browser when it closes.

The term "cookie" also encompasses equivalent technologies such as tracking pixels, web beacons, and mobile device identifiers.

• Session cookies: remain for a session or for the period set by the service;
• Persistent cookies: remain until the provider-defined expiration or manual deletion;
• First-party and third-party cookies: may be set by the website or by external services loaded on a page.

2.3 Categories of Cookies Used and Purposes

Categories and examples observed on the site include:

2.4 How to Manage or Disable Cookies

In the banner, you can accept, reject, or customize optional categories. To review or withdraw a saved choice, use the persistent “Cookie preferences” link in the website footer. This controls cookies; it does not replace preferences for email, WhatsApp, or other data processing.

You can also delete cookies in your browser settings, but this may erase your saved choice and show the banner again. To choose categories on this site, use “Cookie preferences” in the footer.

To manage cookies directly in your browser, refer to official guides:

• Google Chrome: Manage cookies in Google Chrome ↗
• Mozilla Firefox: Manage cookies in Firefox ↗
• Microsoft Edge: Manage cookies in Microsoft Edge ↗
• Apple Safari: Manage cookies in Safari ↗

2.5 Inquiries and Support Channels

Cookiez records consent status and selected categories; the configured validity is 180 days. Categories and services may vary by page and checkout step. For questions or privacy requests, contact the Data Protection Officer at Leonardo.alcarde@phorte.org.br.

3.1 Acceptance and Scope

These Terms govern access to and use of Phorte websites, pages, forms, and digital portals. Digital-course purchases are contracted with ASSOCIAÇÃO DE EDUCAÇÃO E NOVAS TECNOLOGIAS PHORTE; offer details and purchase terms are shown at checkout before an order is confirmed. Browsing the website does not constitute consent to the data processing described in the Privacy Policy.

3.2 User Registration, Accuracy, and Duties

When completing forms or enrollment details, users should provide accurate, current information and submit corrections when needed.

Users agree to utilize the platforms ethically and lawfully, committing not to:

• Attempt to breach or bypass security, authentication, or infrastructure mechanisms of Faculdade Phorte servers;
• Deploy automated tools (bots, crawlers, scrapers) to extract content without prior written permission;
• Disseminate malicious code, viruses, trojans, or corrupted software;
• Transfer or share authentication credentials with third parties, which may result in immediate account suspension.

3.3 Intellectual Property and Copyright

All visual assets, trademarks, course titles, pedagogical frameworks, e-books, audiovisual resources, podcasts, study guides, and source code are the exclusive property of Faculdade Phorte or its licensors, protected by Brazilian Intellectual Property Laws (Laws No. 9,610/1998 and No. 9,279/1996).

3.4 External Links and Third-Party Services

Our portals may provide links to external partner platforms, payment processors, or social networks. Faculdade Phorte is not responsible for the privacy practices, terms, or content hosted on independent third-party domains.

3.5 Limitation of Liability and Jurisdiction

Faculdade Phorte employs industry best practices to ensure continuous service availability, but is not responsible for temporary disruptions resulting from telecommunication and internet network providers.

Mandatory rules relevant to the service and the user’s location apply. This statement does not limit consumer rights or mandatory forums available under applicable law.