Privacy Policy

1. Introduction

Soulstem values the privacy and data protection of its visitors, clients, and partners. This Privacy Policy explains how we collect, use, store, and share personal information in compliance with the Brazilian General Data Protection Law (LGPD), the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Data collected

Soulstem may collect the following personal data:

• Full name
• Email
• Phone/WhatsApp
• Company and position
• Location/country
• Browsing data such as IP address, device type, and website behavior

3. Methods of collection

Personal data may be collected through:

• Contact forms on the website
• Newsletter sign-up forms
• Material downloads (e-books, presentations, case studies)
• Advertising campaigns (Meta Ads, LinkedIn Ads, Google Ads)
• Other communication channels such as WhatsApp, CRM systems, and external landing pages

4. Purpose of processing

The collected data are used to:

• Respond to inquiries and contact forms
• Send marketing communications and newsletters
• Analyze campaign performance and browsing behavior
• Conduct audience segmentation and content personalization
• Comply with legal or contractual obligations

Processing is carried out under the legal bases established by the LGPD, GDPR, and CCPA, including user consent, the legitimate interest and the compliance with legal obligations.

5. Data sharing

Soulstem may share personal data with partners and service providers that support its operations, such as:

• Google (Analytics, Ads, Workspace)
• Meta Platforms (Facebook, Instagram, WhatsApp)
• LinkedIn
• RD Station or other CRM and marketing automation tools

These third parties process data according to their own privacy policies and in compliance with applicable data protection laws.

6. Data retention and security

Personal data are retained for as long as necessary to fulfill their purpose or until deletion is requested by the data subject.

Soulstem implements appropriate technical and organizational measures to safeguard information, including:

• Encryption and secure authentication
• Restricted access control
• Storage on secure servers
• Continuous system monitoring and updates

7. International data transfers

Certain data may be stored or processed on servers located outside Brazil, particularly in the United States and European Union, through platforms such as Google, Meta, LinkedIn, and RD Station.

Soulstem ensures that such transfers occur in compliance with legally recognized data protection mechanisms under applicable laws.

8. Data subject rights

Under LGPD, GDPR, and CCPA, data subjects have the right to:

• Confirm whether data is being processed and access personal data
• Correct incomplete, inaccurate, or outdated data
• Request anonymization, blocking, or deletion of data
• Withdraw consent at any time
• Request data portability to another service provider
• Object to processing based on legitimate interest
• Request information about third-party data sharing

Requests can be made at any time via the contact email provided in this policy.

9. Use of cookies

Soulstem’s website uses cookies to enhance the browsing experience, as detailed in the Cookie Policy.

10. Updates to this policy

Soulstem reserves the right to modify this Privacy Policy at any time by publishing an updated version on its website, indicating the revision date.

11. Data controller and contact

To exercise your rights or ask any questions about this policy, please contact us at the email address above.

Last update: October 2025