Legal document
Privacy Policy
Last updated:
1. Who we are
This policy explains how Amplexo Educação processes personal data when you visit amplexoedu.com and when you contact us. Amplexo Educação is the controller of this data, that is, the party that decides how and why it is used.
- Company legal name: AMPLEXO EDUCACAO LTDA (Amplexo Educação)
- CNPJ (Brazilian company registration number): 58.706.937/0001-67
- Address: Rua José Versolato, 111, Bloco B, Sala 3320, Centro, São Bernardo do Campo/SP, CEP 09750-730, Brazil
- Privacy Channel / Data Protection Officer (DPO; "Encarregado" under Brazilian law): by email at pedagogico@amplexoedu.com or WhatsApp +55 11 91100-9793
2. Who this policy applies to
Amplexo Educação serves students and families in several countries, so this policy was written to comply with:
- in Brazil, Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018), the Brazilian Civil Rights Framework for the Internet (Marco Civil da Internet, Law No. 12,965/2014) and the Statute of Children and Adolescents (ECA);
- in the other countries of South America, local data protection laws, such as those of Argentina (Law No. 25,326), Chile (Law No. 19,628, as amended by Law No. 21,719), Colombia (Law 1581 of 2012), Peru (Law No. 29733) and Uruguay (Law No. 18,331);
- in the European Union, the European Economic Area and the United Kingdom, the General Data Protection Regulation (GDPR) and the UK GDPR;
- in the United States, the Children's Online Privacy Protection Act (COPPA) and state privacy laws, such as California's (CCPA/CPRA).
Where any of these laws gives you more protection than what is described here, the law prevails.
3. What data we process
3.1 When you browse the site
The site is hosted by GitHub Pages (GitHub, Inc.). To keep the service secure, GitHub automatically logs technical data about each visit, such as IP address, date and time, page visited and browser type. We do not use these logs to identify visitors or to create profiles.
We do not use audience analytics tools, such as Google Analytics. The site's only advertising tool is the Meta Pixel, which only works if you accept it (section 3.3).
3.2 Preferences stored in your browser
When you choose a language in the selector (or the light/dark theme, on some pages) or answer the cookie notice, that choice is stored in your browser's local storage (localStorage). This information stays only on your device, is not sent to us and is used only to remember your choice. You can delete it by clearing the site's data in your browser.
3.3 Meta Pixel (Facebook and Instagram)
On your first visit, a notice asks whether you accept Meta's advertising cookies. Only if you click “Accept” does the site load the Meta Pixel, a tool provided by Meta Platforms. From then on, the Pixel sends Meta information such as the pages you visit on the site, the buttons you click (including the WhatsApp ones), your IP address, your browser and device type and an identifier stored in a cookie. If you use Facebook or Instagram in the same browser, Meta may link this information to your account.
We use it to find out whether our Facebook and Instagram ads bring in visits and conversations, and to show Amplexo ads to people who have visited the site and to people with similar interests. We only receive reports with aggregate numbers from Meta, which do not identify anyone. Meta also processes this data as an independent controller, in accordance with its own privacy policy.
If you click “Decline”, or if your browser sends the Global Privacy Control signal, the Pixel is not loaded and no data is sent to Meta. You can change your choice at any time (section 12).
3.4 When you contact us or sign up
When you reach out to us via WhatsApp, email, Instagram or forms (for example, the waitlist on Google Forms), we receive the data you choose to send, such as name, phone number, email address and message. When needed to guide an enrollment, we also receive student data provided by the parent or guardian, such as name, age, school grade and interests.
We ask only for what is necessary. We do not request sensitive data through the site; if we need to know about a specific need of the student (for example, related to health or learning) in order to welcome them properly, this is handled directly with the family, with the care and the legal basis required.
3.5 YouTube videos
Some pages show YouTube videos. They are only loaded when you click to watch, in YouTube's privacy-enhanced mode (youtube-nocookie.com). From that click onward, YouTube (Google) may collect data in accordance with its own privacy policy.
3.6 Links to other sites
The site has links to third-party services, such as WhatsApp, Instagram, YouTube, LinkedIn, Google Forms and Google Drive, our blog and our class platform. When you access them, each service's privacy policy applies.
4. What we use data for and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Responding to inquiries and questions | Contact details and message | Preliminary procedures related to a contract, at your request, and legitimate interest (LGPD, art. 7º, V and IX; GDPR, art. 6(1)(b) and (f)) |
| Waitlist, enrollment and provision of services | Parent/guardian and student data | Performance of a contract and preliminary procedures (LGPD, art. 7º, V; GDPR, art. 6(1)(b)); data of children and adolescents always processed in their best interest (LGPD, art. 14) |
| Showcasing activities and achievements with students' photos and names | Image and name | Image use authorization given by the legal guardian (Brazilian Civil Code, art. 20) and specific consent for the processing of the data (LGPD, arts. 7º, I, and 14, § 1º; GDPR, arts. 6(1)(a) and 8) |
| Measuring our Facebook and Instagram ads and showing them to people who have visited the site | Browsing data collected by the Meta Pixel (section 3.3) | Consent, which may be withdrawn at any time (LGPD, arts. 7º, I, and 8º, § 5º; GDPR, art. 6(1)(a)) |
| Security and operation of the site | Technical access logs | Legitimate interest (LGPD, art. 7º, IX; GDPR, art. 6(1)(f)) |
| Complying with legal obligations and defending rights | The data needed in each case | Legal obligation and regular exercise of rights (LGPD, art. 7º, II and VI; GDPR, art. 6(1)(c) and (f)) |
We do not make automated decisions about you and do not create behavioral profiles. If you accept the Pixel, Meta may use the browsing data in the profiles it maintains itself to choose the ads you see (section 3.3).
5. Children and adolescents
This site is intended for parents and guardians. We do not knowingly collect personal data from children through the site. In the United States, this includes children under 13, in accordance with COPPA. Our ads are aimed at parents and guardians: we do not use the Meta Pixel to target ads to children or adolescents.
Student data is received from the legal guardian and processed in the best interest of the child and adolescent, with the specific consent of one of the parents or the legal guardian where required by law (LGPD, art. 14; GDPR, art. 8). If you believe a child has sent us data without authorization, write to pedagogico@amplexoedu.com and we will delete it.
6. Student images
Photos and videos of students published on the site and on our social media are used with the authorization of their legal guardians, to show activities, projects and achievements. This authorization may be revoked at any time: to request the removal of an image, write to pedagogico@amplexoedu.com and we will remove it as soon as possible.
7. Who we share data with
We do not sell personal data (what California laws call sale). We only share data for behavioral advertising (what these laws call sharing) through the Meta Pixel, and only if you accept it (section 3.3). Data may be processed by service providers that help us operate. Some act as processors, following only our instructions; others also process data as independent controllers, in accordance with their own privacy policies, such as GitHub (with respect to access logs) and Meta (on WhatsApp, Instagram and the Pixel):
- GitHub, Inc. — website hosting;
- Google LLC — email, forms and file storage;
- Meta Platforms — WhatsApp and Instagram, when you contact us through these channels, and the Meta Pixel, if you accept advertising cookies.
We may also share data with public authorities when required by law or by a court order.
8. International transfers
Some of these providers store data outside the country of origin, mainly in the United States. In these cases, depending on the provider, the transfer relies on the mechanisms provided for in each law: in Brazil, the standard contractual clauses approved by Brazil's National Data Protection Authority (ANPD) or another safeguard under art. 33 of the LGPD; for data of people in the European Union and the European Economic Area, the EU-U.S. Data Privacy Framework (when the provider is certified) or the European Commission Standard Contractual Clauses; for data of people in the United Kingdom, the UK Extension to the EU-U.S. Data Privacy Framework or the UK International Data Transfer Addendum; and, for the other South American countries, the safeguards required by local law.
9. How long we keep data
- Messages and contacts: for as long as needed to handle your request and for up to 2 years after the last contact, if there is no enrollment.
- Waitlist: until the end of the registration period it refers to, or earlier, if you request deletion.
- Enrollment and service data: for the duration of the relationship and, afterwards, for the period required by law (for example, tax obligations) or for our defense in any legal proceedings.
- Student images: for as long as the authorization remains valid.
- Hosting technical logs: in accordance with GitHub's policy.
- Meta Pixel cookies: up to 90 days, renewed on each visit, for as long as your consent is valid. Data received by Meta is subject to its own privacy policy.
- Your answer to the cookie notice: 12 months in your browser; after that, we ask again.
At the end of these periods, the data is deleted or anonymized.
10. Your rights
Whatever country you live in, you may request:
- confirmation that we process your data and access to it;
- correction of incomplete, inaccurate or outdated data;
- deletion, anonymization or blocking of data that is unnecessary or processed in violation of the law;
- erasure of data processed on the basis of your consent, except where the law requires us to retain it;
- portability of your data to another provider;
- information about who we share your data with;
- withdrawal of consent and information about the consequences of not giving consent;
- objection to processing based on legitimate interest, and restriction of processing.
Brazil
These rights are set out in art. 18 of the LGPD. You may also file a complaint with Brazil's National Data Protection Authority (ANPD).
Other South American countries
You may exercise the rights of access, rectification, updating and deletion provided for in your country's law and turn to the local authority, such as the Agencia de Acceso a la Información Pública (Argentina), the Superintendencia de Industria y Comercio (Colombia), the Autoridad Nacional de Protección de Datos Personales (Peru), the Unidad Reguladora y de Control de Datos Personales (Uruguay) or Chile's data protection authority.
European Union, European Economic Area and United Kingdom
You have the rights set out in arts. 15 to 22 of the GDPR and may lodge a complaint with the data protection authority of the country where you live or work.
United States
If you live in California or another state with a privacy law (such as Colorado, Connecticut, Texas or Virginia), you have the right to know what data we process, to access, correct and delete it, and to opt out of its sale or sharing for advertising. We do not sell data, and the only sharing for advertising is through the Meta Pixel, which only happens if you accept it: to opt out, just click “Decline” in the cookie notice or change your choice in section 12. We also honor your browser's Global Privacy Control signal: when it is on, the Pixel is not loaded. You will not be treated differently for exercising your rights, and you may submit a request through an authorized agent.
11. How to exercise your rights
Write to pedagogico@amplexoedu.com with the subject line "Privacy". To protect you, we may ask for information confirming your identity before fulfilling the request. We respond within 15 calendar days, or sooner if the law applicable to you requires it. This service is free of charge.
13. Security
The site works only over an encrypted connection (HTTPS), has no login area and does not store visitor data. The data you send us is kept in protected accounts, with access restricted to the team members who need it. If a security incident occurs that may pose a risk to you, we will notify you and the competent authorities within the legal deadlines.
14. Changes to this policy
We may update this policy to reflect changes to the site, our services or the law. The date of the last update is always shown at the top of the page. Significant changes will be highlighted on the site.
15. Contact
Questions about privacy: pedagogico@amplexoedu.com or WhatsApp +55 (11) 91100-9793.
See also the Terms of Use and the Accessibility Statement.