Privacy policy

Last updated: 21 July 2026

1. Who we are (data controller)

This policy describes how Attuant Co Ltda (CNPJ 66.654.550/0001-32), a company organized under the laws of Brazil ("Attuant", "we", "us"), handles personal data collected through attuant.com (the "Site"). Attuant is the controller (controlador) of that data under Brazil's General Data Protection Law (Lei Geral de Proteção de Dados — "LGPD", Law No. 13.709/2018).

2. What this policy covers

This policy covers only the Attuant institutional website. Our products — Malu and Probamed — process personal data under their own separate privacy notices and agreements.

3. Information we collect

We keep data collection to a minimum. The Site has no forms and no accounts. We handle:

• Email you send us — if you write to attuant@attuant.com, we receive your message and whatever you include in it, and use it only to reply.
• Technical data — like most websites, our hosting provider automatically records standard server information such as IP address, browser type, and access times, for security and reliability.
• Local preferences — your chosen language is stored in your browser's local storage (the key attuant:lang-pref). It stays on your device and is not transmitted to us.

We do not use cookies, analytics, or third-party trackers on the Site.

4. Why we process it (legal bases)

We process any message you email us to receive and respond to your request — based on your own contact and our legitimate interest in replying to enquiries (LGPD Art. 7). Technical data is processed for the security and proper functioning of the Site. We do not use your data for advertising, and we do not sell it.

5. Who we share it with

Any message you email us is used only to receive and respond to your request. We do not sell your personal data or share it with third parties for their own marketing. We rely on service providers strictly to operate the Site — for example our hosting provider (GitHub Pages) — who process data on our behalf and under our instructions.

6. Cookies and tracking

The Site does not set cookies and does not run analytics or advertising trackers. The only data stored in your browser is the language-preference key described above, which you can clear at any time through your browser settings.

7. Data retention

We keep the emails you send us only for as long as needed to handle your request and for a reasonable period afterwards for recordkeeping, after which they are deleted. Technical server logs are retained for a limited period by our hosting provider.

8. Your rights

Under the LGPD you have the right to, among other things:

• confirm that we process your data and access it;
• correct incomplete, inaccurate, or outdated data;
• request anonymization, blocking, or deletion of unnecessary data;
• request portability and information about with whom we have shared your data; and
• withdraw consent and object to processing in the cases the law allows.

To exercise any of these rights, email attuant@attuant.com. You also have the right to lodge a complaint with the Brazilian National Data Protection Authority (ANPD).

9. Security and international transfers

We apply reasonable technical and organizational measures to protect personal data against loss, misuse, and unauthorized access. Because we use service providers such as GitHub, some data may be processed on servers located outside Brazil; where that happens, we handle the transfer in line with the LGPD.

10. Changes and contact

We may update this policy from time to time; the "last updated" date above reflects the current version. For any question about this policy or your personal data, contact us at attuant@attuant.com.