Legal

Privacy Policy

Last updated:

1. Who we are

Flow Prime is a production company specialized in real estate audiovisual, active in Rio Grande do Sul and Santa Catarina and serving all of Brazil remotely.

Personal data controller:

  • Legal name: IG ESTRATÉGIAS DIGITAIS LTDA
  • CNPJ (Brazilian tax ID): 45.356.671/0001-28
  • Brand: Flow Prime
  • Operating locations: São Leopoldo/RS and Garopaba/SC (Brazil)
  • Privacy and Data Protection Contact: gestao@flowprime.ia.br
  • Instagram: @flowprime.ia

2. What data we collect

We collect the data you provide when filling in the contact form on our website:

  • Name
  • WhatsApp number
  • E-mail (optional)
  • Company or developer (optional)
  • City and state
  • Type of service of interest
  • Project stage
  • Estimated timeline
  • Free-text project description (optional)

We do not collect sensitive data as defined by Brazil's General Data Protection Law (Law 13,709/2018).

We also record technical browsing data, described in section 5.

To send editorial content by e-mail (section 3.1), we only use professional contact data: name, business e-mail, company and, where available, job title or area of work.

3. How and why we collect it

The form data listed above is collected through the contact form on this website, filled in by users who want to start a conversation about a project.

When you click “Continue” on the first step of the form, your name, WhatsApp and e-mail (if provided) may already be recorded in our CRM to follow up on your request, even if the second step is not completed.

Purpose: to respond to the business contact request and follow up on the project described.

Legal basis (LGPD, Art. 7): the controller's legitimate interest in responding to business contacts voluntarily initiated by the data subject (Art. 7, IX), within the limits of the stated purpose.

3.1 Editorial content by e-mail

Flow Prime may send its own editorial content by e-mail about innovation, technology, launches and the presentation of real estate developments (for example, articles published in our Content section). These e-mails do not copy the whole article: they bring a summary and a link to read it on the website.

Who may receive it:

  • clients and former clients, and people with whom there has been a business relationship (proposal, meeting or project);
  • people who contacted Flow Prime through the website, WhatsApp or social media;
  • people who expressly asked to receive our content;
  • real estate professionals (developers, builders, architecture firms and real estate agencies) whose professional contact was made public by the company itself or by the professional, when the content is directly related to their work. In these cases, the first e-mail states where we found the contact.

Purpose: to share content that is useful for the recipient’s professional work and to present Flow Prime’s work.

Legal basis (LGPD, Art. 7): when you expressly asked to receive it, sending is based on your consent (Art. 7, I). In all other cases, sending is based on Flow Prime’s legitimate interest in sharing its activities with professionals in the same market (Art. 7, IX, and Art. 10), assessed in a documented balancing test. We do not treat these cases as consent.

Frequency: at most one e-mail every ten days.

How to stop receiving it: every e-mail includes an unsubscribe link. You can also ask through the Privacy and Data Protection Contact (section 9). Unsubscribing stops content e-mails and does not affect any ongoing business service.

We do not send these e-mails to personal contacts, job applicants, suppliers with no business relationship or people unrelated to the real estate market.

4. Who we share it with

The data collected is stored on the GoHighLevel platform (processor), used as our business relationship CRM. GoHighLevel processes the data in accordance with its own privacy policy.

We do not sell, rent or share your data with third parties for marketing or advertising purposes.

5. Cookies, local storage and usage metrics

Besides the form, the website records some technical browsing information. It is split into three categories, and you choose which ones to allow under “Cookie preferences”, in the footer of every page:

  • Essential (always on): data kept in your browser’s local storage so the website works: your cookie choice, the language, which notices were already shown (so the conversation prompt is not repeated on an article) and where the visit came from.
  • Analytics (only with your consent): Google Analytics 4, loaded through Google Tag Manager, to measure in aggregate which pages and content are viewed and which buttons are used.
  • Marketing (only with your consent): reserved for advertising tools. None is active at the moment.

Visit source (UTM and click IDs): when you arrive through a link with campaign parameters (utm_source, utm_campaign and similar) or click IDs (gclid, fbclid and similar), the website keeps these values in your browser’s local storage for up to 90 days and sends them with the form, if you fill it in, so we know which channel the contact came from.

Visit summary in the contact request: when you submit the form, we attach to the request a short summary of that visit (entry page, up to three projects or contents viewed, a video started and the button used to start the contact), to understand the context of the request. The summary stays in your browser only during the visit (session storage), includes no other personal data and is not sent to Google Analytics.

Google Consent Mode: before any choice, Google’s consent signals are set to “denied” for analytics and ads, and no Google tool is loaded. They only load after you accept the matching category.

What never goes into metrics: your name, phone, e-mail and the free text of the form are not sent to Google Analytics or Google Tag Manager.

Purpose and legal basis: usage metrics are used to improve the website’s content and navigation and are processed based on your consent (LGPD, Art. 7, I), which can be withdrawn at any time.

How to change or withdraw: use “Cookie preferences” in the footer, or clear the website’s data in your browser settings. Refusing analytics does not affect the form, WhatsApp, the language switch or the videos.

Google as a provider: Google Analytics and Google Tag Manager are provided by Google LLC, which may process data outside Brazil, under Google’s privacy policy.

6. How long we keep it

We keep the data while the contact is active or while there is a legitimate interest in the business relationship. After the relationship ends, the data is deleted within a reasonable period, unless there is a legal obligation to retain it.

If you unsubscribe from content e-mails, we keep only the minimum record needed (e-mail and date of the request) to make sure you do not receive them again.

7. Your rights

Under Law 13,709/2018 (LGPD), you have the following rights regarding your personal data:

  • Confirmation that processing exists
  • Access to the data
  • Correction of incomplete, inaccurate or outdated data
  • Anonymization, blocking or deletion of unnecessary or excessive data
  • Data portability
  • Deletion of data processed on the basis of consent
  • Information about sharing
  • Withdrawal of consent (where applicable)
  • Objection to processing, including to receiving content by e-mail, at any time (unsubscribe link in every e-mail)

To exercise any of these rights, contact us through the Privacy and Data Protection Contact (gestao@flowprime.ia.br) or on the WhatsApp number shown on this website.

8. Security

We adopt technical and organizational measures to protect your data against unauthorized access, destruction or improper disclosure. Traffic between your browser and our website is encrypted via HTTPS.

9. Contact

Questions about this policy or about the processing of your data can be sent to:

10. Changes to this policy

This policy may be updated periodically. In case of relevant changes, the "Last updated" date above will be changed. We recommend checking this page periodically.