This policy describes how KOS Agência (kosagencia.com), the brand-management unit of Grupo KOS, handles personal data of visitors and of people who submit the contact form. The controller is KOS Agência, Rua Pires da Mota, 565, Aclimação, São Paulo, SP, 01529-001, Brazil, email [email protected], phone +55 11 93621-0698. Processing follows Brazil’s LGPD (Law 13.709/2018) and exists to answer commercial requests, run the site, and measure conversation origin — not to sell lists.
data we collect
From the contact form: first name, last name, email, phone, company, message, page URL, locale, attribution id (trackingRef), and UTM parameters when present. The server also stores IP address and user-agent for security (rate limit, honeypot, and reCAPTCHA). WhatsApp clicks go through /api/wa and may carry a reference code. Visit events (pageview and engagement) may be forwarded in batches to the internal CRM. Cookies and localStorage keep campaign attribution (first/last touch) for up to 90 days, with an in-memory fallback if storage is blocked.
why we use it
To reply to the commercial request; deliver the lead by email (Resend) and to the Grupo KOS finance/CRM system; prevent abuse and spam; understand which campaign or page started the conversation; improve the site. We do not use form data for third-party marketing. Google Tag Manager may load measurement tags in production. When reCAPTCHA v3 is on, a token is sent to Google for a risk score.
who we share with
Processors that run the site: transactional email (Resend), Google (reCAPTCHA and, if configured, GTM tags), and the internal Grupo KOS leads platform. We do not sell lists. Blog posts are public editorial content; the blog ingest API is authenticated and is not a product for end visitors.
retention, security, and rights
Commercial leads are kept as long as needed for the business relationship and legal duties. Security logs rotate. You may request access, correction, anonymization, portability, or deletion at [email protected], with reasonable identification. You may refuse non-essential cookies in the browser; the site still works, but campaign attribution may be incomplete. Questions about this policy: same email and São Paulo address.