Privacy Policy

The company responsible for Iskola Cursos acts as controller of personal data used for its own support, commercial relationship management and handling of website requests.

This policy covers visitors, demonstration requests, questions, commercial inquiries, expressions of professional interest and partnership proposals. Data about students and guardians entered by institutions into the management platform is covered by specific SaaS and institutional documentation; this website policy does not replace those documents.

Depending on the form or contact channel, we may receive:

• The name, email address, phone and WhatsApp number you provide.
• Institution name, city/state and information about the size of your operation, when requested in a demonstration form.
• Your message, chosen subject and professional or partnership information you choose to share.
• Request context, such as the originating page and language.
• Technical data related to access and service protection, such as IP address, browser information, date and time and submission records.

Our website forms do not request passwords, card details, personal identification documents or student records. Avoid including sensitive data, children's data or unnecessary information about other people.

We use information relevant to each request to:

• Answer questions and provide the assistance requested.
• Arrange and prepare demonstrations, develop proposals and discuss a potential subscription.
• Assess professional interest and partnership proposals; making contact does not guarantee a position or contract.
• Organize contact history and follow up on requests and negotiations.
• Protect forms and the service against abusive submissions, fraud and unauthorized access.
• Meet legal obligations and exercise rights, where applicable.

Sending a message does not provide blanket permission for any use of your data. New purposes, including promotional campaigns, require their own assessment, appropriate information and a relevant legal basis.

The basis for processing depends on its purpose and context. Proposal, demonstration and negotiation requests you initiate may involve pre-contractual steps requested by the data subject or contractual performance.

Relationship management, following up on requests and service protection may rely on legitimate interests, taking necessity, the data subject's expectations and their rights into account. Legal obligations and the regular exercise of rights have their own bases when the legal requirements are met.

Where consent is the applicable basis, it must be specific to the stated purpose and can be withdrawn as provided by law. Browsing the website or acknowledging this policy does not amount to consent to every processing activity.

Requests may be recorded in Iskola's relationship management system and sent by email to the responsible team. Access should be limited to people who need the information to handle the request.

Hosting, infrastructure, storage and communications providers may participate in processing necessary to deliver these services. Sharing must reflect the purpose, necessity and responsibilities of each participant. Information may also be provided to meet legal obligations or exercise rights, where appropriate.

If you choose WhatsApp or another external service, that service's privacy practices also apply. You can request information about recipients of your data and any international transfers through the privacy contact provided at the end of this page.

Cookies and similar technologies may record browsing information or support technical features. Website forms use validation and protection against automated submissions, involving technical information needed for that purpose.

We do not treat form submission as permission for advertising tracking. Introducing additional analytics or advertising features must be accompanied by information about their purposes and applicable choices, according to the relevant legal basis.

You can manage cookies through your browser settings. Restricting necessary technologies may affect certain features. To clarify which technologies are used during your visit, contact us through the channel provided in this policy.

Contacts submitted through our forms are recorded in our contact management system. Personal data in these records is anonymized after 24 months without activity. This period applies to the contact record in the system; messages, documents subject to legal obligations and backups follow the applicable criteria described below.

Data is retained according to support needs, the status of requests or negotiations, any contractual relationship and applicable legal obligations or requirements for the regular exercise of rights.

Ending a conversation does not mean immediate deletion of every record, but it does not authorize retention without a purpose either. Assessment should cover contact history, messages, technical records and backups, with deletion or anonymization when the need ends, subject to lawful grounds for retention.

You can request clarification about retention of your data or exercise applicable rights through our privacy contact.

Subject to legal conditions, you can request confirmation of processing, access, correction and information about sharing, as well as anonymization, blocking, deletion, portability, objection or withdrawal of consent where those rights apply.

To protect data against improper disclosure, we may request proportionate information strictly necessary to verify your identity. Requests will be handled according to applicable legal requirements and deadlines. You may also contact Brazil's ANPD through its official channels.

If a request concerns data held by an institution in the SaaS, we will consider that institution's and Iskola's roles in processing to guide the response. This does not remove Iskola's own responsibilities for activities in which it acts as controller.

Information protection involves technical and organizational measures appropriate to the context, such as access controls and protection of transmission channels. Avoid sharing passwords or unnecessary information through contact channels.

No service is entirely free of risk. If an incident occurs, containment measures and notifications required by applicable law will be assessed.

This policy may be updated to reflect changes to the website, processing practices or legislation. The update date appears at the top of the page. Significant changes will be communicated in a way appropriate to their impact.