Privacy Policy

1. Information we receive

The quote form asks for your name, email address, business name and type, city, whether you already have a website, and the kind of project you need. The Brazilian version also asks for a WhatsApp number. You may add an optional message. Please do not include identity documents, passwords, financial information or sensitive personal information in that field.

The server and hosting infrastructure may process technical information such as IP address, access date and time, browser and requests. The website uses country and language information to suggest the US or Brazilian version; it does not request precise device location.

2. How we use information

We use the information to understand your request, prepare a quote, answer questions and contact you about your project. Technical information also supports website operation, security and prevention of form abuse.

Submitting a quote request does not automatically subscribe you to marketing campaigns. Handling your request does not depend on permission for Analytics or Marketing. If you no longer want follow-up about your request, please let us know using the contact below.

3. Campaign and request attribution

When present in the arrival URL, we keep campaign parameters named utm_* — including source, medium, campaign, content and term — and click identifiers such as fbclid, gclid, dclid, gbraid, wbraid and msclkid for the browser tab session. We also record the entry page, first identified source and most recent source.

This information helps relate your request to the channel that brought you to the website. When you submit the form, it may be linked to your quote details in an internal email to Altus. This existing first-party attribution is separate from permission for future external Analytics and Marketing services; selecting “Necessary only” does not erase the source of the request.

The code does not add form names, email addresses, phone numbers or messages to URLs, campaign parameters or analytics events. Do not put personal information in UTMs. Click identifiers may themselves be personal information when linked to an individual.

4. Cookies and browser storage

• Market preference: the functional altus_market cookie remembers BR or US for up to one year. It maintains your selected market and does not activate advertising.
• Privacy preferences: altus_consent_v1 in browser local storage records your Analytics and Marketing choices, version and choice date/time. It remains until changed or cleared; a new configuration version may ask you to choose again.
• Request attribution: altus_campaign_session_v1 in tab session storage holds the parameters described above. Ending the session or clearing browser data normally removes it; browser tab restoration features may preserve it.
• Form retries: altus_pending_submission_v1 holds a random identifier and a cryptographic digest of a submission attempt, without storing the form fields as text. It helps recognize retries and is removed after a confirmed submission.

Necessary features remain active. Analytics and Marketing start disabled and can be selected independently under “Cookie preferences” in the footer. Rejecting or withdrawing these permissions does not prevent navigation, market selection, quote requests or opening WhatsApp. If your browser blocks storage, some preferences may apply only on the current page.

5. External services and providers

The website is prepared to use Google Tag Manager to manage tags, Google Analytics 4 for audience measurement, and Meta Pixel and Conversions API (CAPI) for campaign measurement. These integrations require technical activation. The tag manager loads when the page opens with permissions initially denied; measurement events depend on permission for the corresponding category. Google Analytics requires Analytics permission; Meta Pixel and CAPI require Marketing permission. Both categories start disabled and can be changed in the footer.

Browser events contain only technical submission identifiers, market, a page path without parameters and button identifiers. They do not contain form names, email addresses, phone numbers, business names or messages. For accepted quote requests, when CAPI is enabled and Marketing is allowed, the server may send Meta a Lead event sharing the browser event identifier. Available email addresses and international phone numbers are normalized and SHA-256 hashed exclusively on the server. These hashes remain personal information used for matching, not anonymous data. Existing Meta cookies (_fbp and _fbc), browser information and, if enabled, the IP obtained by the server may also be sent. Missing identifiers are not invented.

Analytics or Marketing cookies, when the corresponding tools are enabled, depend on permission for that category. Withdrawal stops new events and does not undo earlier transmissions. Google and Meta may process information in other countries. Browser deduplication stores only emitted conversion UUIDs in sessionStorage until the session ends.

The website uses Hostinger hosting infrastructure. The configured email service receives and transports quote requests. These providers may process information needed for hosting, security and message delivery, including in other countries depending on their infrastructure.

The WhatsApp link opens an external Meta service when you choose to use it. That service has its own terms and privacy policy; displaying the link does not load a Pixel.

6. Security and retention

The website uses HTTPS, input validation and measures against abuse and repeated submissions. No system can guarantee absolute security. Quote details are sent to the configured mailbox; this version does not keep a separate lead database.

We retain information for as long as necessary to handle your request, follow up on business inquiries and meet applicable obligations, without a fixed retention period. Information may be deleted when it is no longer needed or upon request, where applicable.

The technical retry control keeps identifiers and results in memory for up to 24 hours and may lose them when the process restarts. This is not the retention period for emails. Hosting logs and backups follow the respective providers' controls.

7. Your choices and rights

You may contact us to ask about our information practices or request access, correction or deletion of your information. Depending on your location and applicable law, additional rights or exceptions may apply. We may need to retain some information to meet obligations or exercise rights. We may request only the information needed to verify your identity and protect your data when handling a request.

You can change or withdraw Analytics and Marketing permission at any time through the footer. Withdrawal applies to future use and does not automatically delete a quote you already submitted. Use our privacy contact to ask about information in an existing request.

8. Contact and updates

For privacy questions or requests, contact Altus Web Studio: WhatsApp +55 (17) 99667-9894. Please identify your message as a privacy matter and avoid sending identity documents or sensitive information in your first message.

We may update this policy to reflect changes to the website and its services. The date at the top identifies this version.