01Who we are
RKF Prumo Consultoria e Assessoria Empresarial LTDA, trading as Prumo Consultoria, Brazilian tax ID (CNPJ) 56.056.511/0001-80, a limited liability company (sociedade empresária limitada) classified as a microenterprise (ME), headquartered at Rua Coromandel, 12, Sala 101, Graça, Belo Horizonte, MG, ZIP 31140-100, Brazil. Registered activity: business management consulting, excluding specific technical consulting (CNAE 70.20-4-00). No secondary activities are registered.
Under the Brazilian General Data Protection Law (Lei nº 13.709/2018, LGPD), the company is the controller of the data described in this policy. When it receives spreadsheets, reports, or system access from a client to carry out a consulting project, it acts as a processor of the data that client controls.
02Data we collect
- Identification and contact: name, email, phone or WhatsApp, company, and role, provided through the form on this site, by email, by phone, or in meetings.
- Client company data: legal name, CNPJ, address, and billing details needed for proposals, contracts, and invoices.
- Project data: figures, documents, org charts, indicators, and accounts the client shares for diagnosis, planning, and follow-up.
- Data about the client's team: name, position, and opinions gathered in interviews, when the client authorizes it.
- Browsing data: IP address, browser, device, and pages visited, logged by the infrastructure that hosts this site.
The contact form stores nothing on this site: it opens the visitor's own email program with the message filled in, and the message is sent from the visitor's own email account.
03Purposes
- Responding to contact requests and preparing proposals;
- Delivering the contracted diagnosis, planning, process, and follow-up services;
- Issuing contracts, invoices, and work reports;
- Keeping in touch about ongoing projects;
- Meeting legal, tax, and accounting obligations;
- Keeping this site and our working files secure.
We do not sell personal data or hand it to third parties for their own commercial purposes. Promotional messages go only to people who have consented and can be stopped at any time by writing to the email address in section 11.
04Sharing
- Service providers: accounting, legal counsel, website hosting, email provider, and spreadsheet and document tools, always under confidentiality and only to the extent the service requires;
- Referred professionals: when a project calls for an accountant, lawyer, or other specialist and the client agrees to the referral;
- Authorities: when required by law, regulation, or court order.
Project data belongs to the client and is handled according to the client's instructions, within the contracted scope.
05Cookies
This site does not use its own tracking, analytics, or advertising cookies. The hosting and content delivery infrastructure may use cookies strictly necessary for security and for the pages to work. Visitors can block cookies in their browser without affecting contact by email or phone.
06Retention
- For as long as the negotiation, contract, or project lasts;
- For the tax and accounting periods required by law, generally five years;
- For the limitation period that applies to contracts;
- Until consent is withdrawn, when consent is the legal basis for processing.
Project files received from the client are returned or deleted when the work ends, unless a legal duty to keep them applies. Once these periods have passed, data is securely erased or anonymized.
07Data subject rights
- Confirmation that processing takes place and access to the data;
- Correction of incomplete, inaccurate, or outdated data;
- Anonymization, blocking, or deletion of unnecessary or excessive data;
- Portability to another provider, subject to trade secrets;
- Deletion of data processed on the basis of consent;
- Information about sharing that has taken place;
- Withdrawal of consent and objection to unlawful processing.
Requests should be sent to the email address in section 11 and are answered within 15 business days.
08Security
- Every page on this site is served over an encrypted connection (HTTPS);
- Client files are kept in accounts protected by individual passwords and two-step authentication where available;
- Access is limited to the people working on the project;
- Access and storage practices are reviewed periodically.
Security incidents that may pose a relevant risk to data subjects will be reported to the ANPD and to those affected within the legally required time frames.
09International transfers and external links
The email, storage, and hosting services the company uses may keep data on servers outside Brazil. In those cases, the transfer goes to countries with an adequate level of protection or is covered by contractual clauses and the other safeguards provided for in the LGPD. This site may contain links to third-party pages; this policy does not apply to them, and we recommend reading the policies of each site you visit.
10Changes
This policy may be revised to reflect changes in the law, in our services, or in the tools we use. The date of the latest revision appears at the top of the page. Significant changes will be communicated to active clients by email.
11Contact and data protection officer
- Company: RKF Prumo Consultoria e Assessoria Empresarial LTDA (Prumo Consultoria)
- CNPJ: 56.056.511/0001-80
- Address: Rua Coromandel, 12, Sala 101, Graça, Belo Horizonte, MG, ZIP 31140-100, Brazil
- Data protection officer email: contato@rkfvitality.com
- Phone: +55 (31) 3212-3321
Data subjects may also file a complaint with the
Brazilian National Data Protection Authority (ANPD) at
gov.br/anpd.