Who is responsible for your data
The data controller is Guilherme Toso, operating as MagentLabs
(magentlabs.com). You can contact us at guimtoso8@gmail.com.
What data we collect
We collect the following categories of personal data:
- Contact information — name, work email address, company name, and role. This data comes from the Calendly booking form when you schedule an intro call with us.
- Usage data — pages visited, time on page, referrer URL, browser type, and approximate geographic location (country/region level, not precise location). This data comes from Google Analytics 4 if you have consented to analytics cookies.
We do not collect any special categories of data under LGPD Art. 11 or GDPR Art. 9 (no health, biometric, racial, religious, political, sexual orientation, or government identification data).
Why we process your data (lawful basis)
We process your data on the following lawful bases:
Purpose | Data used | Lawful basis |
|---|---|---|
Responding to your booking request and conducting the intro call | Name, email, company, role | LGPD Art. 7 IX (legitimate interest) — B2B business contact |
Understanding how visitors use the site to improve it | Usage data via GA4 | LGPD Art. 7 I (consent) — only after you accept analytics cookies |
How long we keep your data
- Lead contact data (name, email, company, role from Calendly) — we retain this for 24 months from the date of your last interaction with us. If no engagement follows, data is deleted at that point.
- Analytics data — retained by Google Analytics for 14 months (the minimum configurable retention period). We do not export this data to other systems.
Our processors
We use third-party services that process personal data on our behalf under signed Data Processing Agreements. For the full list of processors and their DPA status, see our Processor List.
Your rights
Depending on your jurisdiction, you may have rights including: access, correction, deletion, portability, and objection. To exercise any of these rights, use the Subject Rights Request form.
We respond within 15 business days (LGPD standard). GDPR requests are fulfilled within 30 calendar days. CCPA requests within 45 calendar days.
International data transfers
We are based in Brazil. Some of our processors (Calendly, Google, Vercel) are based in the United States. Data transfers to the US occur under Standard Contractual Clauses (SCCs) or equivalent adequacy mechanisms incorporated into each processor's DPA.
Contact
For privacy questions or to exercise your rights:
- Email: guimtoso8@gmail.com
- Subject Rights Form: Use our subject rights request form
We aim to respond to all privacy enquiries within 5 business days.