KSFLORESTAL

Legal document

Privacy Policy

Last updated: May 13, 2026

1. About this document

This Privacy Policy explains how the website ksflorestal.com handles information from its visitors. It is written plainly, without legal jargon, but in compliance with Brazil's General Data Protection Law (LGPD — Law 13.709/2018).

Data controller: KLEBER SCHREIBER LTDA (trading as KSFlorestal), headquartered in Mato Grosso do Sul, Brazil. Privacy-related contact: kleber@ksflorestal.com.

2. What data we collect

This site is, today, predominantly static and institutional. It has no forms, no public login, no comment systems and no advertising-tracking tools. The information handled is:

  • —Technical access data: IP address, browser type, operating system, pages visited and timestamps. Generated automatically by the infrastructure provider (Cloudflare) for security, abuse prevention and aggregate statistics.
  • —Data you voluntarily send us: when you reach out via email, phone, WhatsApp or LinkedIn. This data is handled by the respective services (Google Workspace, telecom carrier, WhatsApp, LinkedIn) and retained by KSFlorestal for as long as the relationship requires.
  • —Strictly technical cookies: only those required for the site to function (page language, for instance). We do not use marketing, advertising or cross-site tracking cookies.

When the Client Area becomes operational (planned for a future version of the site), a specific section of this Policy will be published describing the data processed in that context — including authentication, shared documents and access logs. Until then, no additional data is collected in this environment.

3. What we use the data for

  • —Site operation and security — availability, attack prevention, fraud and abuse mitigation.
  • —Aggregate statistics — understanding how many visits occur, where they come from, and which pages draw most interest. No individual identification.
  • —Responding to your contact — when you write to us, we use your email/phone to reply and follow up on the conversation.

4. With whom we share

We do not sell, rent or transfer your data to third parties for commercial purposes. The only sharing in place is operational and necessary for the site to function:

  • —Cloudflare, Inc. — site hosting, CDN and network security provider.
  • —Google LLC (Google Fonts) — typography (Inter font family) loading.
  • —Communication providers you choose to use to reach out (Google Workspace, WhatsApp, LinkedIn, etc.) — each under its own privacy policy.

5. How long we keep it

  • —Technical logs: per the infrastructure provider's (Cloudflare) default retention period, normally up to 30 days.
  • —Email communications: as long as necessary for the purpose of the contact and to meet legal or contractual obligations.

6. Your rights as data subject

The LGPD grants you, at any time, the following rights over your personal data:

  • —Confirmation of the existence of data processing
  • —Access to your data
  • —Correction of incomplete, inaccurate or outdated data
  • —Anonymization, blocking or deletion of unnecessary or non-compliantly processed data
  • —Portability to another service or product provider
  • —Deletion of data processed on the basis of your consent
  • —Information about public and private entities with which your data has been shared
  • —Withdrawal of consent

To exercise any of these rights, write to kleber@ksflorestal.com. We respond within 15 days.

7. Security

We treat security as an orienting principle, not an isolated feature. The site operates exclusively over HTTPS (with HSTS preload), applies restrictive security headers on all routes, and runs on Cloudflare infrastructure — which includes denial-of-service protection and a web application firewall.

Honesty here matters: no website on the internet is "immune". What we commit to is a consistent defensive posture across all technical layers we control, timely security updates, and process discipline in maintenance. For the future Client Area, we will apply additional protection layers — passwordless authentication, strict per-client isolation, encryption at rest and access auditing — described in a dedicated section of this Policy once the feature goes live.

8. Changes to this policy

This Policy may be updated to reflect changes to the site, to operational partners or to applicable law. The date of the last update is always shown at the top of this page. Material changes will be communicated with reasonable notice to affected data subjects.

9. Contact

Data Protection Officer (DPO): Kleber Schreiber

Email: kleber@ksflorestal.com