Privacy Policy
Last updated · 14 September 2026
This policy explains what data Amora Lab collects on this site, why we collect it, who we share it with, and what you can do about it. It is written to be read, not to protect us from you.
1 · Who is responsible
The controller of your data is Amora Lab, a B2B marketing strategy consultancy based in Brazil. For anything related to this policy, including access or deletion requests, write to hello@amora-lab.com.
2 · What we collect
2.1 · Data you give us
When you fill in the form on the Let's Talk page, we receive exactly what you typed:
- Full name
- Phone number
- Company name
- Company website
There are no hidden fields capturing anything else. If you write to us directly by email or WhatsApp, we receive what you sent in that message.
2.2 · Browsing data
We only collect it if you accept. Until you click "Accept" on the notice shown on your first visit, no analytics script is loaded. Neither Google nor LinkedIn. If you accept, we begin collecting aggregate data about pages visited, time on page, traffic source, device and browser type, and a truncated version of your IP address.
If you decline, the notice does not return and nothing is loaded.
3 · What we use it for
- To reply to you and work out whether we can help your company.
- To understand how the site is used, which pages are read and which are abandoned, so we can improve it.
- To measure whether our ads work, when we are running them.
We do not sell your data. We do not use it to build profiles about you beyond this site. We do not send bulk marketing email to people who filled in the form.
4 · Legal basis
Under Brazil's General Data Protection Law (Law 13.709/2018), and consistent with GDPR principles for visitors in Europe:
| Data | Legal basis |
|---|---|
| Contact form | Pre-contractual steps taken at your request (art. 7, V) |
| Analytics and advertising cookies | Your consent (art. 7, I), withdrawable at any time |
5 · Who we share with
We use third-party services to run the site. Each receives only what its function requires:
| Service | Purpose | What it receives |
|---|---|---|
| Web3Forms | Delivers the form to our inbox | What you typed in the form |
| Cloudflare | Site hosting, domain email and visit statistics | Technical connection data. Visit counting uses no cookies and does not identify you |
| Google Analytics | Site usage statistics | Anonymous browsing, only with consent |
| Advertising measurement | Anonymous browsing, only with consent | |
| Meta (Facebook and Instagram) | Advertising measurement | Anonymous browsing, only with consent |
These services operate outside Brazil, so an international transfer of data takes place. All of them operate under standard contractual data protection clauses.
6 · How long we keep it
- Contact form: for the duration of the commercial conversation and up to 2 years afterwards, to keep a relationship history. You may request deletion before that.
- Analytics data: 14 months, the Google Analytics default.
- Your cookie choice: 12 months. After that we ask again.
7 · Cookies and local storage
| Item | Source | Purpose |
|---|---|---|
| Your cookie choice | This site | Stores whether you accepted or declined. The only thing written before you answer. |
| Analytics cookies | Google Analytics | Tell one visitor from another, so we know how many people visit. Only after consent. |
| Advertising cookies | Measure whether someone who saw an ad reached the site. Only after consent. | |
| Advertising cookies | Meta | Measure whether someone who saw an ad on Facebook or Instagram reached the site. Only after consent. |
8 · Your rights
You have the right to request, at any time and free of charge:
- Confirmation that we process your data, and access to it
- Correction of incomplete or outdated data
- Anonymisation, blocking or deletion of unnecessary data
- Portability to another provider
- Deletion of data processed on the basis of your consent
- Information about who we share it with
- Withdrawal of consent
To exercise any of these, write to hello@amora-lab.com. We respond within 15 days.
9 · Change your cookie choice
You can withdraw or grant consent now, without giving a reason:
10 · Security
The entire site runs over HTTPS. Access to contact data is restricted to the people actually conducting the commercial conversation. No identity documents, banking details or health data are requested anywhere on this site. If a form asks you for that, it is not ours.
11 · Changes to this policy
If anything changes materially, we update the date at the top of this page. Changes that widen data collection require fresh consent, and the notice reappears.