PRONTO LIVE MARKETING LTDA
Personal Data Privacy and Protection Policy
- Classification
- Public
- Version
- 01
- Updated on
- July 31, 2026
1. What is a Personal Data Privacy and Protection Policy?
The Privacy Policy is the document that sets out, in a clear and accessible manner, the guidelines adopted by PRONTO LIVE MARKETING LTDA for the processing of personal data, in compliance with the Brazilian General Data Protection Law – LGPD (Federal Law No. 13,709/2018), the Brazilian Internet Civil Framework (Law No. 12,965/2014) and other rules applicable to privacy and data protection in Brazil.
The purpose of this Policy is to give data subjects visibility into how their data may be collected, used, stored, shared and protected in the context of the institutional website, contact channels, events, projects, promotional activities and other activities carried out by Pronto, as well as in its relationships with clients, suppliers, partners, candidates and the other audiences with which it interacts.
2. What is the Brazilian General Data Protection Law (LGPD)?
The LGPD establishes rules, principles and rights relating to the processing of personal data, including in digital environments, with the aim of protecting the fundamental rights of freedom and privacy and the free development of the personality of natural persons.
3. Management and version of this Policy
| Version | Date | Description of the main changes |
|---|---|---|
| 00 | June 11, 2026 | Initial issue of Pronto's Personal Data Privacy and Protection Policy for legal review and public availability on the institutional website. |
| 01 | July 31, 2026 | Legal amendments |
4. Definitions and acronyms
The terms used in this Policy shall be interpreted in accordance with the concepts and definitions set out in the Brazilian General Data Protection Law (Law No. 13,709/2018), in particular those relating to personal data, sensitive personal data, data subject, controller, processor, data protection officer, processing, consent and anonymization.
5. Purpose of this Policy
PRONTO LIVE MARKETING LTDA / 08.466.594/0002-13 is a Live Marketing and Brand Experience company operating nationally and internationally, dedicated to the planning, creation, organization, promotion and delivery of brand experiences, in-person and/or virtual events, activations, conventions, trade fairs, festivals, promotional activities and corporate projects.
Pronto recognizes the importance of privacy and personal data protection and undertakes to adopt good practices of security, transparency and accountability in all activities involving the processing of personal data.
This Policy applies, as the case may be, to:
- visitors to Pronto's institutional website;
- individuals interested in our services, content, products, events or projects;
- individuals who contact us through the channels made available by the company;
- applicants for job openings and professional opportunities;
- representatives of clients, suppliers, business partners and other third parties related to Pronto's activities;
- participants, guests, registrants, accredited individuals and other persons involved in events, promotional activities, activations and projects carried out or supported by Pronto;
- data subjects whose information is processed by Pronto in connection with the performance of contracts, projects or activities carried out for clients, partners or third parties.
Pronto may act as controller or processor of personal data, depending on the nature of the activity carried out and the purposes of the processing, in accordance with the provisions of the applicable legislation.
6. Identification of the personal data controller
PRONTO LIVE MARKETING LTDA, operating nationally and internationally, headquartered in São Paulo/SP and with operations in Fortaleza/CE, acts as controller of the personal data processed in the context of its institutional website, its relationship channels and the activities in which it determines the purposes and means of processing personal data, in accordance with the applicable legislation.
In certain operations, particularly in the delivery of events, projects, promotional activities and other activities carried out on behalf of clients, Pronto may act as a personal data processor, carrying out the processing in accordance with the legitimate instructions received and the limits established by contract.
Requests relating to this Policy and to the exercise of data subjects' rights may be submitted through the service channels made available by Pronto on its institutional website.
7. Personal data we process and purposes
Pronto seeks to collect only the data necessary for the purposes disclosed to data subjects. In general terms, the following data may be processed:
| Types of personal data | Category | Method of collection | Purpose |
|---|---|---|---|
| Browsing and log data: IP address, date and time of access, device characteristics, browser, pages accessed, access source, clicks and search terms. | Personal data | Automatic collection while browsing the website. | To comply with legal obligations, ensure security, improve the browsing experience, generate statistics, carry out statistical analyses on the use of the website and protect digital environments. |
| Information shared voluntarily: name, e-mail, telephone number, company, position, message sent, contact information and other data entered into forms. | Personal data | Voluntarily provided by the data subject through contact channels, forms or interactions with Pronto. | To respond to requests, provide clarifications, submit proposals, maintain institutional and commercial relationships and carry out communications relating to Pronto's services and activities. |
| Applicant data: name, e-mail, telephone number, résumé, professional background, portfolio and information relating to selection processes. | Personal data and, where applicable, sensitive data if voluntarily submitted by the data subject. | Voluntarily provided by the applicant or through recruitment platforms used by Pronto. | To assess applications, conduct selection processes, build a talent pool for future professional opportunities, observing the period necessary for that purpose and the data subjects' rights provided for in the applicable legislation. |
| Data of representatives of clients, suppliers and partners: name, position, company, professional contact details, contractual and relationship information. | Professional personal data | Commercial and contractual relations, proposals, briefings, meetings and corporate communications. | To perform contracts, manage projects, maintain commercial relationships, carry out quotations, payments, internal controls and legal obligations. |
| Name, e-mail, telephone number, company, position, image, accreditation data, attendance confirmation, information on participation in events and other data necessary for the delivery of projects, events and promotional activities. | Personal data. | Information provided directly by the data subject, by the contracting client or through systems used in the management of events and projects. | To plan, organize, deliver and manage events, brand experiences, activations, promotional activities and corporate projects, as well as to control access, accreditation, attendance confirmations and other related activities. |
Depending on the nature of the activity carried out and the purposes of the processing, Pronto may act as controller or processor of personal data. When acting on behalf of clients, it will process personal data in accordance with the legitimate instructions received, the limits established by contract and the applicable legislation.
The processing of personal data may be based on the legal bases provided for in the applicable legislation, including, as the case may be, compliance with a legal or regulatory obligation, the performance of contracts and preliminary procedures relating to contracts, the regular exercise of rights, legitimate interest and the data subject's consent.
8. Sharing of personal data
Pronto does not sell personal data. Data may be shared only where necessary, adequate and compatible with the purposes disclosed, including in the following cases:
- the provision of services relating to the activities contracted or requested by the data subject or by the company they represent;
- the use of tools, platforms, systems and providers of technology, communication, cloud storage, hosting, e-mail, CRM, project management, recruitment, analytics or information security;
- compliance with legal, regulatory, judicial or administrative obligations;
- the performance of contracts, delivery of events, promotional activities and corporate projects, proposals, quotations, projects, payments and other corporate routines;
- the protection of the rights of Pronto, its clients, employees, partners, suppliers and data subjects;
- the delivery of events, brand experiences, activations, promotional activities and projects developed for clients, in which case data may be shared with clients, suppliers, partners, service providers and other third parties involved in carrying out the activity, always in accordance with the purposes disclosed and the applicable legislation.
Where data is shared with third parties, Pronto will seek to adopt contractual, technical and administrative measures compatible with the LGPD and with information security best practices.
Whenever applicable, Pronto will require third parties that process personal data on its behalf to adopt security and privacy measures compatible with the applicable legislation and with the nature of the activities carried out.
9. International data transfers
Pronto may use tools, platforms and service providers located outside Brazil or that store data on international servers, in particular cloud, communication, productivity, analytics and security solutions. In such cases, Pronto will adopt technical, administrative and contractual measures compatible with the applicable legislation, seeking to ensure an adequate level of protection for personal data during the international transfer and the related processing, in accordance with the Brazilian General Data Protection Law and other applicable rules.
10. Personal data retention period
Personal data will be retained for as long as necessary to fulfil the purposes disclosed in this Policy, to perform contracts, respond to requests, comply with legal and regulatory obligations, exercise rights in judicial, administrative or arbitration proceedings, and in the other retention situations provided for in the applicable legislation.
Where it is no longer necessary to retain personal data, such data may be deleted, anonymized or retained, where permitted or required by the applicable legislation, in accordance with the legal bases provided for in the LGPD.
11. Rights of personal data subjects
Under the terms of the LGPD, data subjects may request, as applicable:
- confirmation of the existence of personal data processing;
- access to their personal data;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of the LGPD;
- data portability, subject to trade and industrial secrets and the applicable regulations;
- deletion of data processed on the basis of consent, subject to the legal retention situations;
- information on sharing with public and private entities;
- information on the possibility of withholding consent and the consequences thereof;
- withdrawal of consent, where this is the legal basis used;
- objection to processing carried out in breach of the LGPD;
- review of decisions taken solely on the basis of automated processing, where applicable.
Channel for exercising data subjects' rights
Data subjects' rights may be exercised free of charge, by means of an express request submitted to the official channel made available by Pronto on its institutional website.
Whenever necessary to safeguard the security of personal data and prevent improper access, Pronto may request additional information to confirm the identity of the requester and the legitimacy of the request.
Requests will be reviewed and answered within the time frames and under the conditions provided for in the applicable legislation. If it is not possible to fully or immediately meet a request, the data subject will be informed, with reasons, of the grounds for the total or partial impossibility, where applicable.
12. Protection measures and risk mitigation
Pronto adopts appropriate technical, administrative and organizational measures compatible with the nature of the activities carried out and with the risks involved in the processing of personal data, intended to protect such data against unauthorized access and accidental or unlawful destruction, loss, alteration, communication, dissemination or any other form of improper or unlawful processing.
These measures may include access controls, permission management, internal policies, contractual clauses, information security best practices, employee guidance and procedures for preventing, identifying and responding to incidents.
13. Processing of personal data of children and adolescents
As a rule, Pronto's institutional services and content are not directed at children or adolescents. Pronto does not intentionally request personal data of children and adolescents through its institutional website.
Should parents or legal guardians identify any processing of children's or adolescents' data without appropriate authorization, they may contact the official channel indicated on Pronto's institutional website so that the matter can be reviewed and the appropriate measures taken.
14. General provisions and amendments to this Policy
Pronto may review and update this Policy whenever necessary to reflect legal, regulatory, operational, technological or governance changes, as well as to improve its privacy and personal data protection processes.
The version of this Policy in force will be made available on Pronto's institutional website, indicating the update date and the version history, where applicable, and will take effect as from its publication.
This Policy should be read together with the other privacy notices, policies, terms of use and other institutional documents that Pronto may make available, where applicable.
15. Applicable law
This Policy shall be governed by and interpreted in accordance with the laws of the Federative Republic of Brazil, in particular Federal Law No. 13,709/2018 (Brazilian General Data Protection Law – LGPD) and other rules applicable to the protection of personal data.