Privacy and Data Protection
Privacy Policy
Last updated: October 25, 2026
DoMeLift is committed to operating with transparency, integrity, and enterprise-grade data protection standards when processing personal data of clients, partners, and corporate visitors. This Privacy Policy outlines our data handling practices in compliance with the Brazilian General Data Protection Law (LGPD - Law 13,709/2018) and relevant international data privacy principles.
1. Data We Collect and Purposes of Processing
We collect personal data strictly necessary to facilitate business inquiries and deliver tailored software demonstrations. When you submit a walkthrough request, we collect: full name, business email address, company name, estimated volume of active placements, and contact phone number. These details reach our sales team by email, at [email protected]; the website does not store them in a database. The sole purpose of processing is to coordinate product demonstrations, address technical inquiries, and provide enterprise proposals. Technical traffic data and server logs are maintained strictly for network security and threat prevention.
2. Legal Bases for Processing
Personal data collected through this website is processed under the following lawful bases: (a) explicit consent provided upon submitting contact forms; (b) legitimate business interests in supporting B2B staffing and consulting technology relationships; and (c) executing pre-contractual steps and fulfilling legal and regulatory compliance obligations.
3. Data Sharing and Zero Commercial Sale
DoMeLift does not sell, rent, lease, or monetize personal data to third parties for marketing or advertising purposes. Data is shared exclusively with critical infrastructure partners (such as SOC2-certified enterprise cloud hosting providers and encrypted email service providers) or pursuant to compulsory legal requests issued by competent public authorities. Walkthrough requests leave the website's own server, at our hosting provider, straight to our mailbox: no third-party form service receives them. If you accept analytics cookies, browsing data is sent to Google Analytics, operated by Google LLC (see section 6).
4. Security, Storage, and Data Retention
We implement defense-in-depth cybersecurity controls, including end-to-end TLS encryption in transit and AES-256 encryption at rest, role-based access governance (least privilege principle), and comprehensive audit logging. Commercial lead inquiries are retained only for the duration required to evaluate business partnerships or until the data subject requests deletion, subject to statutory retention mandates. Walkthrough requests stay in the sales mailbox for as long as needed to follow up. To prevent abuse, the website keeps for up to 15 minutes a per-IP attempt counter, identified only by a hash (HMAC), and for up to 1 hour the total count of emails sent, with no personal data.
5. Data Subject Rights
Under applicable data protection legislation (including LGPD Article 18), you have the right to request at any time: confirmation of processing activities; access to your personal data; correction of incomplete, inaccurate, or outdated data; anonymization, blocking, or erasure of unnecessary data; data portability; and withdrawal of consent.
6. Cookies and Browser Storage
The site uses browser storage to remember your cookie choice and your place on the page when you switch languages. With your consent, we load Google Analytics (Google LLC), which sets the _ga and _ga_<ID> cookies for up to 2 years to measure visits in aggregate. Without consent, no analytics cookie is set. You can change your choice at any time under “Cookie preferences” in the footer.
7. Data Protection Officer (DPO) and Inquiries
To exercise any of your data protection rights or submit questions regarding our privacy practices, contact our Data Protection Officer directly at: [email protected].