Draft. This policy is pending legal review and may change before the official launch.
Last updated: October 22, 2026
This policy covers datafrontiertech.com. Our product websites (the IoT platform, Data Frontier CAM and STL Prime) have accounts and features of their own and are governed by their own privacy policies.
1. Who is responsible for your data
The controller of the personal data collected on this website is [US COMPANY NAME], [ADDRESS] (“Data Frontier”, “we”).
Our engineering team, servers and workshop are operated by our Brazilian company, Data Frontier Tecnologia e Desenvolvimento LTDA, Belo Horizonte, Minas Gerais, Brazil, which processes the data described here on our behalf.
For any privacy question or request, write to contact@datafrontiertech.com.
EU representative (GDPR art. 27): [EU REPRESENTATIVE NAME AND ADDRESS].
2. What we collect
When you use the contact form or e-mail us
Your name and e-mail address, and, if you choose to give them, your company, country, phone number, the topic you selected and your message. We also record the date of the message and that it came from this website and in which language.
On every visit
Like any web server, ours records technical data in its logs: IP address, browser and device type, the page requested, the date and time, and the referring page. We use these logs only to keep the site secure and working.
In your browser
We store a single item in your browser's local storage to remember that you have seen the cookie notice. It contains no personal data and is never sent to us.
We do not ask for payment data, government identifiers or sensitive data on this website, and we do not buy personal data from third parties.
3. Why we use it (legal bases)
- To answer your message and follow up on the conversation, including sending you a confirmation e-mail. Under the GDPR this is processing to take steps at your request before entering into a contract (art. 6(1)(b)) or, for general questions, our legitimate interest in answering people who contact us (art. 6(1)(f)).
- To keep the website secure and investigate abuse: our legitimate interest (art. 6(1)(f)).
- To comply with legal obligations when they apply (art. 6(1)(c)).
We do not use your data for automated decision-making or profiling, and we do not send marketing e-mails from this form.
4. Cookies and similar technologies
This website uses no analytics, advertising or social-media cookies, and it loads no third-party scripts or fonts. The only item stored in your browser is the cookie-notice choice described above, which is strictly necessary. You can clear it at any time with the “Cookie notice” link in the footer or in your browser settings.
If we ever add measurement tools, we will update this section first and load them only with your consent.
5. Who we share it with
We do not sell or rent personal data. We share it only with service providers that help us run the website:
| Provider | What it does | Location |
|---|---|---|
| Data Frontier Tecnologia e Desenvolvimento LTDA | Operates the servers and the database that store contact messages, and the engineering team that answers them | Brazil |
| Brevo (Sendinblue SAS) | Delivers the e-mails sent by our mail server: the notice to our inbox and the confirmation to you | France / EU |
We may also disclose data when required by law or to protect our rights.
6. International transfers
Our servers are in Brazil. If you are in the European Economic Area, the United Kingdom or Switzerland, your data is transferred to Brazil. We protect these transfers with [TRANSFER MECHANISM, E.G. EU STANDARD CONTRACTUAL CLAUSES OR ADEQUACY DECISION]. You can ask us for a copy of the safeguards at the address above.
7. How long we keep it
- Contact messages: for as long as the conversation lasts and up to 12 months after it ends, unless it turns into a contract (then we keep what the law requires) or you ask us to delete it earlier.
- Server logs: [LOG RETENTION PERIOD], unless needed longer to investigate a specific security incident.
- Cookie-notice choice: in your browser until you clear it.
8. Your rights (GDPR / UK GDPR)
If you are in the EEA, the UK or Switzerland, you have the right to access your data, correct it, have it erased, restrict or object to its processing, and receive it in a portable format. Where we rely on consent you can withdraw it at any time. You also have the right to lodge a complaint with your local data protection authority.
Write to contact@datafrontiertech.com. We answer within one month.
9. California residents (CCPA/CPRA)
In the last 12 months, through this website, we have collected the following categories of personal information:
- Identifiers: name, e-mail address, phone number, IP address.
- Professional information: company name, if you provide it.
- Internet or network activity: server logs described in section 2.
- General location: the country you type in the form, if any.
Sources: you, and your device when you visit the site. Purposes: those in section 3. We disclose these categories only to the service providers in section 5, for those business purposes.
We do not sell your personal information and do not share it for cross-context behavioral advertising, and we have not done so in the last 12 months. We do not collect sensitive personal information and do not knowingly collect data of anyone under 16. We honor Global Privacy Control signals; since we neither sell nor share data, there is nothing further to opt out of.
You have the right to know what personal information we collect, use and disclose; to access, correct and delete it; and not to be discriminated against for exercising these rights. Send your request to contact@datafrontiertech.com. We will verify it by confirming that you control the e-mail address involved, and answer within 45 days. An authorized agent may submit a request on your behalf with your signed permission.
10. Security
The site is served only over HTTPS, the database is not reachable from the internet, and access to contact messages is restricted to our team behind authentication. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
11. Children
This website is meant for businesses and professionals and is not directed at children under 16.
12. Changes to this policy
If anything changes, such as a new tool or a new purpose, we update this page and the date at the top before the change takes effect.