Privacy
Privacy Policy
How Corebanx handles the personal data you send us through this site, in plain language and without fine print.
Last updated 17 August 2026.
Controller
COREBANX S.A.
CNPJ 40.975.238/0001-57
Address
Rua Geraldo Flausino Gomes, 78 · Conj. 101 e 102 · Cidade Monções · São Paulo, SP · 04575-903
Data protection officer
What we collect
Only what you type into the contact form. Nothing is collected while you simply browse the site.
- Name and e-mail, the only required fields.
- Company, role, phone and segment, if you choose to fill them in.
- Whatever message you write.
- The language of the page the form was sent from.
About the IP address
We record the IP address of whoever submits the form. It does not appear in the e-mail our team receives and is never used to identify you commercially.
It serves one purpose: limiting automated submissions and abuse of the form. It is discarded after 90 days.
What we use it for
To answer your enquiry and carry on the commercial conversation you started.
We do not use your data for advertising, we do not build behavioural profiles, and we do not sell, rent or otherwise pass your information to third parties.
Our legal basis
The form fields are processed as preliminary steps relating to a contract, at the data subject’s request, under article 7, V of the LGPD. You wrote to us about business, and we use the data to reply.
The IP address is processed under legitimate interest, article 7, IX, strictly for the security of the form.
Who we share it with
Only with the providers that run the infrastructure needed for your message to reach us, always on our instruction, as processors:
- Google, which hosts the corporate mailbox that receives enquiries.
- Hostinger, which hosts the site and the server where the form is processed.
International transfer
The providers above run infrastructure outside Brazil, which means your message may be processed and stored abroad. We choose providers offering contractual safeguards compatible with the LGPD.
How long we keep it
We keep data for as long as the purpose requires, and no longer:
- Form messages: up to 24 months after the last contact, or sooner if you ask us to delete them.
- Security record containing the IP address: 90 days.
Your rights
Article 18 of the LGPD grants you, at any time and free of charge:
- Confirmation that we process your data, and access to it.
- Correction of incomplete, inaccurate or outdated data.
- Anonymisation, blocking or deletion of unnecessary or excessive data.
- Portability of your data to another provider.
- Information about who we share your data with.
- Objection to a given processing activity, where grounds exist.
How to exercise them
Write to our data protection officer at the address shown at the top of this page. We reply within 15 days.
To have your data deleted, simply say so in the message. We ask for no justification.
Minors
This site and Corebanx services are aimed at companies and the professionals who represent them. We do not knowingly collect data from anyone under 18.
If you believe a minor has sent us personal data, write to our data protection officer and we will delete the record.
Security incidents
Should an incident occur that may cause you relevant risk or harm, we will notify the Brazilian data protection authority and the affected data subjects, as required by article 48 of the LGPD.
Complaints to the authority
If you believe we have not handled your data properly, you may complain to the Brazilian National Data Protection Authority (ANPD) at gov.br/anpd. We only ask that you talk to us first: it is almost always quicker to settle directly.
How we protect it
The site is served over HTTPS. The form is delivered to our mailbox over an authenticated, encrypted connection.
Sending credentials live outside the server’s public area, and the contact record is not reachable from the web.
Changes to this policy
If we change how we handle personal data, we update this page and the date at the top. Material changes will be flagged prominently.