MORAES DAZEY ADVOCACIA is the institutional name of Moraes Dazey Sociedade Individual de Advocacia, registered with the Brazilian National Register of Legal Entities (CNPJ) under No. 50.141.023/0001-94, based in Florianópolis, Santa Catarina, Brazil. The firm’s principal attorney is Francesca Moraes Dazey, registered with the Santa Catarina section of the Brazilian Bar Association (OAB/SC) under No. 32.764.
The firm acts as controller in processing operations for which it determines the purposes and means of processing personal data. Our privacy and data rights contact is office@moraesdazey.com.
This policy covers use of our institutional website, communications with the firm, and personal data processed when assessing, engaging and providing legal services. Depending on the relationship, it also applies to representatives of organizations, service providers and other people whose data is necessary for the firm’s work. Specific notices and engagement documents may supplement this information for a consultation or legal matter.
Processing is subject to Brazilian Law No. 13,709/2018 (the General Personal Data Protection Law, or LGPD), applicable regulations, and the duties of professional secrecy and confidentiality governing legal practice.
Website use. Hosting and security infrastructure may process technical information needed to deliver and protect the website, such as IP addresses, request dates and times, browser and connection information, and access or error logs. Technologies used for the privacy notice and website measurements are described in section 4.
Initial inquiries. When contacting us by email, telephone or WhatsApp, you may provide your name, contact details, country or city, the organization you represent and a brief description of your inquiry. We use your message to understand the request and respond through an appropriate channel. Share only what is necessary at this stage. Wait for our guidance on the appropriate channel and documents before sending sensitive data, identity documents or confidential information.
Legal services. Depending on the matter, we may process identification data, documents, and contractual, corporate, property, financial, family or immigration information. Data may come from the individual concerned, clients and representatives, professionals assisting with the matter, documents and records, or competent authorities. Assessing or carrying out legal work may also require information about third parties, such as family members, counterparties or witnesses. We assess the relevant necessity, purpose and lawful basis in each case.
Responding to inquiries and assessing a possible engagement. We use relevant information to respond to requests, arrange appointments and assess whether we can assist. Where processing concerns preliminary steps relating to a contract at the individual’s request, the lawful basis is Article 7(V) of the LGPD. For other institutional inquiries, legitimate interests may apply where processing is necessary, compatible with the individual’s expectations and respectful of their rights.
Checking professional restrictions and conflicts of interest. We use only the information necessary to comply with applicable legal or professional duties or, where appropriate, on the basis of legitimate interests after assessing necessity and the impact on individuals.
Providing legal services and administering the engagement. We process data necessary to perform a contract to which the individual is a party. Depending on the operation, we may also process data to comply with legal or regulatory obligations or exercise rights in judicial, administrative or arbitral proceedings under Article 7(II) and (VI). The basis for processing third-party data is determined by its purpose and circumstances.
Meeting the firm’s obligations. We use data necessary to meet tax, accounting, regulatory and professional obligations under Article 7(II), where applicable.
Maintaining the website and protecting communication channels. We may process technical data to diagnose problems, prevent abuse and protect website operations. Where personal data is involved, the basis may be legitimate interests, subject to an assessment of necessity and individual rights, or compliance with a specific legal obligation.
Processing that requires consent. Where consent is the applicable basis, we request a freely given, informed, unambiguous and specific indication of your wishes for the stated purpose. You may withdraw it at any time, free of charge.
Sensitive personal data is processed under the grounds set out in Article 11 of the LGPD, as appropriate to the operation. Legitimate interests are not a lawful basis for processing sensitive personal data. Accessing the website, reading this policy or dismissing the privacy notice does not constitute consent to processing that requires it.
This website is hosted on Framer. In its current configuration, MDA does not use advertising cookies or optional third-party trackers. Framer’s native analytics tool, when used, operates without cookies or persistent visitor identifiers, according to the platform’s documentation.
On pages displaying the privacy notice, dismissing it saves a small record in your browser’s local storage containing the notice version and its expiry date. This prevents the notice from appearing on every visit. The record contains no name, contact details or visitor identifier, and is not sent to the firm. It remains valid for 180 days. You can delete it through your browser’s website data settings. If storage is blocked or cleared, the notice may appear again.
If the firm adopts optional technologies that require consent, this section will be updated before activation. It will explain their purposes, providers, duration, and how to accept, reject, choose by category and change your decision.
MDA does not sell or rent personal data. Sharing is limited to what is necessary for the relevant purpose and is subject to an applicable lawful basis and professional confidentiality duties.
Technology providers, including Framer for website hosting and providers of email, storage, security and communication services for the firm’s operations. Each provider’s role as a processor or independent controller depends on its functions.
Professionals involved in legal work, such as local counsel, translators, experts and accountants, where their involvement is necessary and sharing is legally permitted.
Competent authorities and entities, including courts, administrative, tax or immigration authorities and public registries, where necessary to meet an obligation, comply with a lawful order or take steps connected with a legal matter.
Links to WhatsApp, LinkedIn, Instagram and other external services lead to environments governed by their respective operators’ terms and policies. If you start a WhatsApp conversation, that service processes communication information under its own practices. The firm handles the information it receives under this policy.
Technology providers may process information outside Brazil. A legal matter may also require data to be sent to professionals, institutions or authorities in another country. Accessing the website from abroad does not, by itself, constitute an international transfer between processing agents.
Where an international transfer is subject to the LGPD, MDA will observe Articles 33 to 36 and the regulations of Brazil’s data protection authority, the ANPD. In addition to a lawful basis for processing, a valid transfer mechanism must apply to the operation. Available mechanisms include adequacy decisions, ANPD standard contractual clauses and other statutory grounds. MDA limits transfers to necessary data and provides required information about purposes, destinations, recipients and safeguards through the applicable channels, including this policy or a supplementary notice where required. Questions about specific transfers may be sent to office@moraesdazey.com.
Inquiries that do not lead to an engagement. Our standard retention period is up to 90 days after the final response closing the inquiry or, if the inquiry is not pursued, the last substantive contact. Sensitive material received for an initial assessment is deleted earlier when it is no longer needed. Limited information may be retained for a documented legal or professional purpose, such as conflict checks or the exercise of rights.
Client and legal service records. We retain records during the professional relationship and afterwards as necessary to meet legal, tax, regulatory or professional obligations and to establish, exercise or defend rights. We review closed files five years after closure to assess whether continued retention remains necessary. This is a review point, not an automatic deletion deadline. A consultation actually provided forms part of the service record even if it does not lead to a further engagement.
Technical records. Retention depends on the purpose of each record, the provider’s configuration and any applicable statutory retention duty. The local privacy notice record has the 180-day validity described in section 4.
When data is no longer necessary and there is no lawful basis for keeping it, it is deleted or anonymized, as appropriate. Any minimal record retained for conflict checks or the exercise of rights is limited to the information necessary for that purpose.
MDA adopts technical and organizational measures proportionate to the nature of the data and the risks of each operation. Depending on the channel and processing activity, these may include access controls, credential protection and secure document management. Information relating to legal work is also subject to professional secrecy and confidentiality duties. These duties inform our choice of communication channels and sharing with professionals and service providers.
If a security incident occurs, MDA will take the applicable measures and, where required, notify the ANPD and affected individuals in accordance with regulatory requirements and deadlines.
Under the LGPD, you may request, as applicable:
Confirmation that we process your personal data and access to it.
Correction of incomplete, inaccurate or outdated data.
Anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of the LGPD.
Portability, subject to applicable regulations and protection of trade and industrial secrets.
Information about the public and private entities with which we share your data.
Information about the possibility of refusing consent and the consequences of doing so.
Withdrawal of consent and deletion of data processed on that basis, subject to lawful retention exceptions.
Objection to processing based on a ground that does not require consent where the processing breaches the LGPD.
Review of decisions based solely on automated processing that affect your interests, where applicable, and information about the criteria and procedures used, within legal limits.
To exercise your rights free of charge or ask a question, write to office@moraesdazey.com. Requests may be made by you or a duly authorized representative. We may request only the information needed to verify identity and authority and protect the data concerned.
We respond within applicable deadlines. If we cannot fulfill a request, we will explain the relevant factual or legal reasons, subject to legal limits and professional confidentiality. You may also submit a petition to the ANPD, subject to the applicable requirements.
The website is intended for people seeking institutional information and professional contact. The firm may process children’s and adolescents’ data where necessary for matters such as family law, succession and immigration, observing their best interests, the applicable lawful basis, and any required parental or guardian consent or involvement.
This policy will be updated when there are relevant changes to the firm’s activities, communication channels, technologies or legal requirements. The current version will remain available on the website. Where a change requires specific information to be provided to an individual or renewed consent, the appropriate steps will be taken under applicable law.
This policy follows Brazilian law, particularly the LGPD, the Brazilian Civil Rights Framework for the Internet (Marco Civil da Internet) and relevant ANPD regulations, without prejudice to other mandatory rules.
Last updated: November 5, 2026