Privacy Policy

This is a courtesy translation of the Portuguese version. If there is any difference between the two, the Portuguese version prevails.

1. Who we are

This policy explains how Colégio Ricardo Rodrigues Alves (CoRRA), based at Av. José Xavier de Araújo, 141/151, Butantã, São Paulo (SP), Brazil, postal code 05365-150, handles personal data on this site, in accordance with Brazil's General Data Protection Law (Law No. 13,709/2018, the LGPD). CoRRA is the controller of this data.

2. What data we process

• Visit request (form): parent or guardian's name, student's name (optional), stage of interest and message (optional).
• WhatsApp conversation: when you click to talk to the school, the conversation takes place on WhatsApp, and the school can see your phone number. WhatsApp has its own privacy policy.
• Anonymous site measurement (only if you accept): pages visited, where the visit came from (another site or campaign), type of device (phone, tablet or computer) and clicks on contact buttons. We use an identifier that changes every day and does not allow a person to be recognised. We do not use cookies and we do not store your IP address.

3. What we use the data for

• To reply to your visit request and provide service to families.
• To understand how the site is used, in order to improve it (anonymous measurement).
• To keep the site secure, by limiting abusive access and submission attempts.

4. Legal bases

Consent (art. 7, I of the LGPD), when you tick the agreement box on the form and when you accept measurement in the site notice. Preliminary procedures related to a possible contract (art. 7, V), when a family asks for enrolment information. Legitimate interest (art. 7, IX), for the security of the site. You can withdraw your consent at any time.

5. Data of children and adolescents

The form is intended for parents and guardians. We only ask for the student's name, optionally, to direct the enquiry. We do not collect data directly from children or adolescents and, in any processing, we consider their best interests (art. 14 of the LGPD).

6. Who we share data with

• The site's hosting company, which stores the data on its servers.
• WhatsApp (Meta), only when you choose to start a conversation.
• An email delivery service (Brevo), which notifies the school team that a visit request has been sent.
• Google, if you click to load the map in the footer (Google then receives your IP and may use cookies, according to its own policy).
• Google receives aggregated data about searches and indexing of the site (Google Search Console). No form data goes to Google.

We do not sell personal data.

7. How long we keep data

Visit requests are kept for as long as needed to respond and for up to 12 months after the last contact; they are then deleted or anonymised. Site measurements are kept for up to 14 months, anonymously.

8. Your rights

Under the LGPD (art. 18), you may request: confirmation that we process your data; access; correction; anonymisation, blocking or deletion; portability; information about who we share data with; and withdrawal of consent. To exercise any right, contact the school office by phone on (11) 3735-7125, via WhatsApp (11) 99937-6503 or through the contact page.

9. Security

The site uses a secure connection (HTTPS). The internal panel is password-protected, and data is kept on a server with restricted access. No measure eliminates all risk, but we work to reduce it.

10. Cookies and browser storage

See the Cookie Policy. You can change your choice at any time under "Cookie preferences" in the footer.

11. Changes and contact

We may update this policy; the version in force is always the one on this page. Last updated: 7 October 2026. Questions about privacy? Contact the school office through the channels above.