Privacy begins by reducing unnecessary collection.

For personal data whose purposes and means are determined by the company, the declared controller is THEION PROJETOS INTEGRADOS LTDA, CNPJ 62.110.803/0001-56. This notice covers the institutional website and messages sent to the channel below. Contracts, professional relationships or future operations may require additional notices.

The current public site does not create user accounts, host an embedded contact form or install a THEION-operated behavioral analytics or advertising tool. This statement describes the current configuration and must be reviewed before a new collection mechanism is activated.

Search terms and guided-brief choices are processed in the visitor’s browser against public content bundled with the site. Copy and share actions request browser or device capabilities. Opening the external Getnet checkout is also an explicit visitor action. These interactions do not transmit a search, selection, draft or payment data to THEION by themselves.

Contact links use the mailto protocol to prepare a draft in the visitor’s email application. A message is transmitted only when the visitor chooses to send it, after which the sender’s provider, THEION’s email infrastructure and any necessary service provider may process the message under the applicable purpose and policies.

The hosting and network providers may process technical records such as IP address, time, requested resource and browser information for delivery, availability, abuse prevention and infrastructure diagnosis. This notice does not represent those provider records as a THEION visitor-profiling system.

Data voluntarily sent by email may be used to respond to the request, carry out preliminary procedures requested by the data subject, comply with legal or regulatory obligations, exercise rights and protect the operation. The applicable legal ground depends on the concrete relationship; simple browsing is not treated as consent to advertising.

Information received directly should remain only for the period compatible with its purpose, the relationship and applicable legal, regulatory, professional or rights-preservation duties. A deletion request must also be evaluated against lawful retention requirements.

Subject to the Brazilian General Data Protection Law and the circumstances of the processing, a person may request confirmation, access, correction and information about sharing, as well as other applicable rights. Responding may require identity confirmation, locating the data and evaluating retention obligations.

Hosting, email infrastructure, Getnet checkout and other services selected by the visitor may process data under their own policies and may use infrastructure in other countries. THEION does not receive card data through this website and does not publish a definitive transfer claim without verifying the concrete provider, contract and data flow.

This notice must be reviewed before activating a new form, account, metric, vendor or integration. The publication date identifies the public version. This operational disclosure does not replace legal analysis of a specific contract, incident or future processing activity.