LGPD
Privacy policy
What we do with your data, in plain language.
Last updated: November 1, 2026
This policy explains, in plain language, what personal data Forest collects on its websites, why, who we share it with and how you stay in control. It follows Brazil's General Data Protection Law (LGPD, Law 13.709/2018).
1. Who is responsible for your data
Forest Comunicação Socioambiental Ltda, trading as Forest Criações, Brazilian company registration (CNPJ) 21.567.273/0001-92, SHCN CL Quadra 309, Bloco C, Sala 216, Asa Norte, Brasília/DF, 70755-530, Brazil, is the controller of the data processed on its two websites:
- forestcom.com.br, ForestCom, our socio-environmental communication label;
- forestcria.com.br, ForestCria, our label for original works.
This policy covers both.
2. Privacy contact
For any request or question about your data, write to forestcom@forestcom.com.br. As a micro-enterprise, Forest is not required to appoint a data protection officer (ANPD Resolution 2/2022). This email is the official channel for data subjects and for Brazil's National Data Protection Authority (ANPD).
3. What data we collect
Data you send us. In the contact form: name, email, organization, phone (optional) and message; on the ForestCria site, also the subject and the work you are interested in. For the Forest Letter, our email newsletter: your email and, if you wish, your name and organization.
Browsing data, only with your permission. Pages visited, time on site, where you came from (for example, an ad), device and browser type and approximate city. This data is collected through cookies and similar technologies, described in section 5.
Technical logs. Our hosting service records the IP address, date and time of each visit, for security and to comply with Brazil's Internet Civil Framework (Law 12.965/2014).
Our websites do not ask for tax IDs, bank details or sensitive personal data.
4. Why we use it and on what legal basis
| Purpose | Data | Legal basis (LGPD) |
|---|---|---|
| Reply to your message and prepare proposals | Contact form data | Legitimate interest in answering your request and steps prior to a contract (art. 7, IX and V) |
| Send the Forest Letter | Email, name and organization | Consent (art. 7, I). Unsubscribe anytime through the link in every email |
| Measure visits and improve the websites | Browsing data | Consent, given in the cookie notice (art. 7, I) |
| Measure ads and show Forest to people who visited the websites | Browsing data | Consent, given in the cookie notice (art. 7, I) |
| Security and access logs | IP, date and time | Legal obligation (art. 7, II) and legitimate interest (art. 7, IX) |
We only send the Forest Letter to people who subscribed or ticked that option in the contact form.
5. Cookies and tools
Cookies are small files a website stores in your browser. On your first visit, a notice asks what you allow. No analytics or advertising runs before you answer, and rejecting changes nothing in how you browse.
| Category | Tools | Purpose | Needs your permission? |
|---|---|---|---|
| Essential | The website itself | Store your cookie choice and keep the site working | No. Always on |
| Analytics | Google Analytics (Google) | Count visits and see which pages matter most, in aggregate | Yes |
| Advertising | Google Ads (Google) and Meta Pixel (Meta, owner of Facebook and Instagram) | Check whether our ads worked and show Forest ads to people who visited the websites | Yes |
Not every tool on this list is switched on at all times. The list shows everything we may use.
Videos. Videos come from YouTube in privacy-enhanced mode and only load when you click to watch. From that click on, YouTube (Google) receives data under its own policy.
Changing your mind. Use the "Cookie preferences" link in the footer of any page. When you withdraw a permission, we delete the cookies in that category. You can also delete cookies in your browser. Your choice lasts 12 months; after that, or when we add a new tool, we ask again.
6. Who we share it with
Forest does not sell personal data. We only share what is needed with the services that run our websites:
- Netlify: website hosting and form submissions;
- Google Workspace: Forest's email, where messages arrive;
- ActiveCampaign: sending the Forest Letter and managing contacts;
- Google and Meta: analytics and advertising, only if you accept.
These services may store data outside Brazil, mainly in the United States. We choose companies that follow recognized security and data protection standards, and transfers follow article 33 of the LGPD. We may also provide data to public authorities when required by law or court order.
7. How long we keep it
- Contact messages: up to 2 years after our last exchange or, if they become a contract, for the contract term and the legal periods after it;
- Forest Letter: while you are subscribed;
- Analytics and advertising cookies: for the period set by each tool, usually up to 2 years, or until you delete them or withdraw permission;
- Access logs: 6 months, as required by the Internet Civil Framework.
After these periods, data is deleted or anonymized.
8. Your rights
Under the LGPD (art. 18) you may, at any time and free of charge:
- confirm whether we process your data and access it;
- correct incomplete, inaccurate or outdated data;
- request anonymization, blocking or deletion of unnecessary data or data processed unlawfully;
- request data portability to another provider;
- request deletion of data processed with your consent;
- know who we share your data with;
- know that you may refuse consent and what happens if you do;
- withdraw consent;
- object to processing based on legitimate interest.
To exercise any of these rights, write to forestcom@forestcom.com.br. We may ask for some information to confirm it is you. We reply within 15 days. If you are not satisfied, you can file a complaint with the ANPD.
9. Security
Our websites use encrypted connections (HTTPS). The data we receive is kept in services with access control, and only team members who need it for their work can see it. If a security incident could cause significant risk or harm, we will notify those affected and the ANPD, as the law requires.
10. Children and teenagers
Forest's websites are aimed at organizations and adults. We do not knowingly collect data from anyone under 18. If you learn of such a case, write to our privacy contact and we will delete the data.
11. Changes to this policy
We may update this policy when our websites, tools or the law change. The date at the top shows the latest version. If a change adds a new analytics or advertising tool, the cookie notice will appear again so you can decide once more.