Privacy policy
Last updated: August 20, 2026
1. Who is the data controller
XMA Capital S.A., a Brazilian company registered under CNPJ (Brazilian corporate tax ID) no. 24.261.825/0001-28, e-mail contato@mariodealencar.com.br, phone (48) 99106-7972.
For any matter related to personal data, including the requests described in section 7, write to contato@mariodealencar.com.br.
2. What data we collect and why
Print book purchase: name, e-mail, CPF (Brazilian tax ID), phone number, and full address. Purpose: process payment, generate the shipping label, and enable tracking. Legal basis: contract performance (art. 7, V of the LGPD). The CPF is required because the carrier demands it to issue the label and the electronic contents declaration.
E-book purchase: name, e-mail, and CPF. Purpose: process payment and deliver the file via an individual link. Legal basis: contract performance.
Application to the Strategic Council: name, company, e-mail, WhatsApp, industry, number of partners and employees, annual revenue range, main challenge, urgency, and the context you describe. Purpose: assess the fit of the advisory and contact you. Legal basis: consent (art. 7, I), recorded with date, time, and IP address at the moment the form is submitted.
Browsing: access and usage data, when you accept measurement cookies. Purpose: measure audience and ad performance. Legal basis: consent, collected in the cookie banner and revocable at any time.
We do not collect data from children or adolescents, do not process sensitive data, and do not use your data for automated decisions.
3. Order lookup
The Track order page requires both e-mail and CPF, which must match those of the purchase. Requiring both exists precisely so that no one can see another person's address by knowing only an e-mail. Attempts are rate-limited.
4. With whom data is shared
We share the minimum necessary, only with parties that perform a step of the service:
- InfinitePay — payment processing by PIX and credit card. Card details are provided directly to it and never pass through this site.
- Melhor Envio and the chosen carrier (Correios, Jadlog, Loggi, JeT, Buslog, Azul Cargo, or LATAM Cargo): label issuance, delivery, and tracking.
- Resend — sending transactional e-mails: order confirmation and e-book delivery.
- Cloudflare — hosting of the e-book file in a private bucket and delivery of the site's content.
- Google (Analytics and Tag Manager) and Meta — audience and conversion measurement, only if you accept measurement cookies.
We do not sell, rent, or transfer personal data to third parties for their own advertising purposes. Some of these providers operate servers outside Brazil, an international transfer permitted by art. 33 of the LGPD for contract performance.
5. Cookies
We use necessary cookies, which make the bag and the session work and cannot be disabled, and measurement cookies (Google Analytics and Meta Pixel), which only fire after your acceptance in the banner. Until you accept, no measurement script is loaded. To change your choice, clear this site's cookies and the banner reappears.
6. How long we keep data
- Order data: 5 years after purchase, a retention period related to the Brazilian Consumer Protection Code and tax obligations.
- Applications: 2 years from submission, or until you request deletion.
- Measurement data: according to the retention configured in Google's and Meta's tools.
7. Your rights
You may request, at any time: confirmation that we process your data; access to the data; correction of incomplete or outdated data; anonymization, blocking, or deletion of data that is unnecessary or processed in violation of the law; portability; information about with whom we share it; revocation of consent; and objection to a processing activity.
Simply write to contato@mariodealencar.com.br. The response comes within 15 days. We may ask for identity confirmation before fulfilling a request, so your data is not handed to someone else. Deletion of data tied to a paid order may be limited by the legal tax retention period.
8. Security
The site travels exclusively over an encrypted connection (HTTPS). The e-book file sits in a private bucket, accessible only via an individual, temporary link. Administrative access is protected by password and signed session. No system is immune to incidents: in case of a breach with relevant risk to your rights, we will notify you and the Brazilian National Data Protection Authority (ANPD).
9. Changes
This policy may be updated. The date of the latest update appears at the top of the page. Changes that expand the purposes of processing require new consent.