Privacy Policy

1) Scope

This Policy applies to the use of the Kronos Experience website and to interactions through forms, email, social media, WhatsApp, meetings and other communication channels associated with the company.

2) Key concepts

• Personal data: information that identifies or can identify a person (e.g., name, email, phone number, job title, company).
• Processing: any operation involving data (collection, access, storage, analysis, sharing, deletion).
• Controller: Kronos Experience, which is responsible for decisions about processing.
• Processors: suppliers that process data on our behalf (e.g., hosting, CRM, analytics).

3) What data we collect

a) Data you provide directly

• Name, email, phone number, job title, company, industry, city/state
• Messages sent through forms, email or contact channels
• Information needed for proposals, contracts and service delivery

b) Data collected automatically on the website

• IP address, device/browser identifiers, pages visited, date/time, traffic source, interactions (clicks, scrolling)
• Cookies and similar technologies (when enabled)

c) Business relationship and service delivery data

• History of conversations, proposals, meetings and documents exchanged
• Information related to the sales funnel, needs and contracted scope

Note on sensitive data: we do not request sensitive data (e.g., health, biometrics, beliefs). If you share such data, we will process it only when essential and with the applicable legal safeguards.

4) How we use your data

• Handle requests and respond to inquiries
• Assess needs and develop proposals and assessments of the business context
• Provide contracted services, carry out projects and fulfill deliverables
• Manage relationships (operational and business communications)
• Improve the website and its content, maintain security and prevent fraud
• Comply with legal, tax and regulatory obligations
• Defend rights in administrative or judicial proceedings

5) Legal bases (LGPD)

• Performance of a contract and preliminary procedures (proposals/negotiations)
• Legitimate interest, with an impact assessment and protective measures (e.g., website improvements, security, B2B relationships)
• Consent, where applicable (e.g., nonessential cookies, specific communications)
• Compliance with legal/regulatory obligations
• Lawful exercise of rights

6) Data sharing

Kronos Experience does not sell personal data. We may share data with:

• Vendors and data processors essential to website operations and service delivery (e.g., hosting, email, CRM, analytics, marketing automation, meeting and productivity tools), always subject to contractual confidentiality and security obligations
• Public authorities, when required by a legal or regulatory obligation, court order or valid request
• Project partners, only when necessary to carry out the work and within a clearly defined scope

7) International transfers

Some vendors may store or process data outside Brazil. When this occurs, we adopt appropriate mechanisms and security measures to ensure a level of protection consistent with the LGPD and industry standards.

8) Retention and disposal

We retain personal data only for as long as necessary to:

• fulfill the purposes described in this Policy
• meet legal, tax, contractual and audit requirements
• protect the rights of Kronos Experience

After this period, data is deleted or anonymized, where possible and applicable.

9) Information security

• access controls based on need
• internal policies and operational best practices
• incident monitoring and management
• use of secure connections (e.g., TLS/SSL) where applicable
• data minimization and segregation by purpose

No system is 100% invulnerable, but we work to reduce risks and respond quickly to incidents.

10) Your rights as a data subject

• confirmation of processing and access to data
• correction of incomplete, inaccurate or outdated data
• anonymization, blocking or deletion of unnecessary or excessive data
• data portability, where applicable
• information about data sharing
• withdrawal of consent, when consent is the legal basis
• review of automated decisions, where applicable

To submit a request, email hello@kronosexperience.com.br. We may ask for additional information to verify your identity and protect your data.

11) Cookies, analytics and digital paid media

• website functionality and security (essential)
• browsing analysis and performance improvement — Google Analytics (analytics)
• paid media campaign measurement and ad optimization — Meta pixel (Facebook Business Tools)

When enabled, these technologies collect data such as device and browser identifiers, IP addresses, pages visited and interactions with content. Google Analytics is operated by Google Ireland Ltd. and the Meta pixel by Meta Platforms Ireland Ltd. (data may also be processed in the United States).

In regions where consent is required, these technologies are loaded only after you accept them in the preferences notice displayed on the website — and declining is recorded just as easily. You can change or withdraw your choice at any time through the "Cookie preferences" link in the website footer, and you can also manage cookies in your browser. Disabling cookies may affect functionality.

12) Communications

• responses to requests
• project progress and business relationships
• content and materials relevant to your professional context

You may request changes to your preferences or opt out of nonessential communications at any time by emailing hello@kronosexperience.com.br.

13) Changes to this Policy

We may update this Policy periodically to reflect improvements and legal requirements. The current version will always be available on the website, along with its update date.

Last updated: August 2026