Privacy policy

Lu Gold EDC Brazil Ltda, CNPJ 66.385.563/0001-53, Rua Dr. Luiz Migliano, 1986, Morumbi, São Paulo, SP 05711-001, is the controller (controlador) of the personal data described here for the purposes of the Lei Geral de Proteção de Dados, Lei 13.709/2018.

Data protection enquiries and data-subject requests should be sent to the São Paulo office at the address above or through the contact form, marked for the attention of the data protection lead.

Data you give us: name, email address, telephone or WhatsApp number, country of residence, the route you are considering, the amount and origin of capital, and anything you write in a message or readiness assessment.

Data our tools hold locally: the inputs to the cost estimator, the readiness assessment and the document checklists are stored in your own browser. They reach us only when you choose to send them.

Data collected automatically: pages requested, referring URL, campaign parameters (UTM), approximate location derived from IP, browser and device type.

Data required for engagement: if you become a client, we collect identity documents, proof of address, evidence of the source and chain of funds, and beneficial ownership information, as compliance with Lei 9.613/98 requires.

To respond to enquiries and provide advisory services: your consent (Art. 7, I) and the performance of a contract or pre-contractual steps (Art. 7, V).

To meet anti-money-laundering and record-keeping obligations: compliance with a legal or regulatory obligation (Art. 7, II). This basis does not depend on your consent and survives its withdrawal.

To improve the site and measure campaigns: legitimate interest (Art. 7, IX), and, for analytics cookies, your consent given through the cookie bar.

Licensed professionals engaged on your matter: OAB-registered counsel, CRECI-registered brokers, authorised foreign exchange institutions and registered contadores, each of whom receives only what their function requires.

Our customer relationship and email infrastructure providers, acting as operators under contract.

Brazilian authorities, where a filing, a request or a legal obligation requires it.

We do not sell personal data and we do not share it with advertising networks for resale.

Our Lagos and Accra operations and some infrastructure providers are outside Brazil. Transfers are made under contractual clauses providing protection compatible with the LGPD, or on the basis of the performance of a contract with you.

Enquiry data is retained for up to twenty-four months from the last contact unless you ask us to erase it sooner. Client engagement and AML records are retained for the period required by Brazilian law from the end of the relationship, and cannot be erased on request before that period expires.

Under Art. 18 of the LGPD you may request confirmation of processing, access, correction, anonymisation, blocking or erasure of unnecessary or excessive data, portability, information about sharing, and information about the consequences of refusing consent. You may withdraw consent at any time.

We answer requests within the statutory period and may ask you to confirm your identity before acting on one.

Access to personal data is limited to personnel who need it. Files are held in access-controlled systems, transmission is encrypted, and identity and source-of-funds material is segregated from general enquiry data.

Strictly necessary storage keeps your language choice, your tool inputs and your cookie decision. Analytics cookies are set only if you accept them in the cookie bar, and declining them removes no functionality.