Privacy & Cookie Policy

Last updated: 26 September 2026.

Moraes de Freitas Advogados (“the Firm”, “we”) respects your privacy. This Policy explains which personal data we collect through the website moraesdefreitas.adv.br, what we use it for, with whom we share it and what your rights are. It was drafted in accordance with the Brazilian General Data Protection Law (Law No. 13,709/2018, “LGPD”) and, since we also practise in Portugal, with the European Union’s General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”).

1. Who is the data controller

The controller of the personal data processed through this website is Moraes de Freitas Advogados, with offices in Rio de Janeiro, São Paulo, Belo Horizonte (Brazil) and Porto (Portugal). For any matter relating to this Policy or to your data, write to contato@moraesdefreitas.adv.br.

2. What data we collect and why

2.1 Contact forms

When you use the contact form on the home page or the form in the sidebar, you provide us with your name, email address, area of interest (optional) and your message. We use this data solely to reply to your enquiry and, where applicable, to assess whether we can provide legal services.

Legal basis: steps prior to entering into a contract to which you are party (LGPD, art. 7, V; GDPR, art. 6(1)(b)) and, in the alternative, our legitimate interest in replying to enquiries received (LGPD, art. 7, IX; GDPR, art. 6(1)(f)).

2.2 Newsletter

If you subscribe to our newsletter, we collect your email address to send you legal updates and analysis. You may unsubscribe at any time using the link included in every message.

Legal basis: consent (LGPD, art. 7, I; GDPR, art. 6(1)(a)).

2.3 WhatsApp and social media

The WhatsApp, LinkedIn, Instagram and Facebook buttons take you to third-party services, which process your data under their own privacy policies. When you start a conversation on WhatsApp, your phone number and the content of your messages are processed by us for the same purpose described in section 2.1.

2.4 Browsing data

Like any website, ours automatically records technical access information such as IP address, browser type, pages visited and date and time of access. These logs are kept by our hosting provider for security and service stability reasons.

Legal basis: legitimate interest in the security and operation of the website (LGPD, art. 7, IX; GDPR, art. 6(1)(f)).

3. Cookies

Cookies are small files stored in your browser. This website currently uses only essential cookies, which are necessary for it to work:

Your language choice (Portuguese, English or Spanish) does not use cookies: it is part of the page address (for example, /en/ or /es/). We do not use advertising cookies. Should we start using audience statistics cookies, they will be activated only with your consent, requested in the cookie notice, and this Policy will be updated. You may delete or block cookies at any time in your browser settings.

4. With whom we share data

We do not sell or transfer personal data. We share data only with suppliers that help us run the website, under contractual obligations of confidentiality and data protection:

• Automattic Inc. (WordPress.com), responsible for hosting the website and for the access logs, with servers in the United States and the European Union.
• Corporate email provider, through which we receive the messages sent via the forms.
• MailPoet, the tool used to send the newsletter.
• The Firm’s internal communication tools, when used to forward messages received through the website to the team in charge.

We may also share data when required by law, by order of a competent authority or for the regular exercise of rights in judicial, administrative or arbitration proceedings.

5. International transfers

Because we practise in Brazil and Portugal and use suppliers with infrastructure outside those countries, your data may be transferred internationally. In such cases we adopt the safeguards provided for in the LGPD (arts. 33 to 36) and in the GDPR (Chapter V), such as standard contractual clauses and the selection of suppliers offering an adequate level of protection.

6. How long we keep data

• Contact messages: for as long as necessary to reply to and assess the request and, where we are engaged, for the retention period of the case file, in accordance with the applicable professional and legal rules.
• Newsletter: until you unsubscribe.
• Access logs: for a minimum of six months, as required by the Brazilian Internet Civil Framework (Law No. 12,965/2014, art. 15), or for the period required by the hosting provider.

7. Your rights

You may at any time request confirmation that processing is taking place, access, rectification, anonymisation, blocking or erasure of your data, portability, information on data sharing, withdrawal of consent and objection to processing, under art. 18 of the LGPD and arts. 15 to 22 of the GDPR. To exercise these rights, write to contato@moraesdefreitas.adv.br. We will reply within the statutory time limits.

You may also lodge a complaint with the National Data Protection Authority (ANPD) in Brazil or with the National Data Protection Commission (CNPD) in Portugal.

8. Security

We adopt appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or improper disclosure, such as encrypted connections (HTTPS), access control to the administration panel and the team’s duty of professional secrecy under the Brazilian Statute of the Legal Profession and the Bar Association’s Code of Ethics and Discipline.

9. Children and adolescents

This website is not intended for persons under 18 and we do not knowingly collect data from children or adolescents. If you believe a minor has provided us with data, please contact us so that we can delete it.

10. Changes to this Policy

This Policy may be updated to reflect legal changes or changes in how the website works. The current version will always be available on this page, with the date of the last update shown at the top of the text.