Privacy Policy

Last Updated: March 10, 2026

The Alta Renda portal establishes this Privacy Policy with the aim of reaffirming its commitment to security, transparency, and respect in the handling of its users’ data. This document details how data is processed, in strict compliance with the General Data Protection Law (Law No. 13.709/18 – LGPD) and Google’s global Publisher Policy guidelines .

1. TRANSPARENCY: WHO MANAGES THIS PORTAL?

1.1. Controller Identification: This news and financial education portal is owned and operated by SPUN MIDIA LTDA , registered under CNPJ number 43.629.487/0001-89 , with its administrative headquarters in Rio Grande do Sul, Brazil. For legal purposes, this company is the “Controller” of the collected data. 

1.2. Communication Channel (DPO): In compliance with Article 41 of the LGPD (Brazilian General Data Protection Law), we have appointed a Data Protection Officer (DPO) to be the liaison between the portal, users, and the National Data Protection Authority (ANPD). Requests can be sent to: [email protected] .

2. TARGET AUDIENCE AND AGE RESTRICTION

2.1. Scope: This Privacy Policy applies to all individuals who access any website, portal, or digital platform owned by SPUN MIDIA LTDA or companies belonging to its holding company and economic group.

2.2. Exclusively for Adults: The financial education and news content on this portal is planned and intended exclusively for individuals over 18 (eighteen) years of age . 

2.3. Protection of Minors: We do not intentionally collect or solicit data from children or adolescents. If the system identifies the registration of a minor, all associated data will be summarily deleted from our databases, without prior notice, to guarantee the best interests of the minor, in accordance with Article 14 of the LGPD (Brazilian General Data Protection Law).

3. DATA CATEGORIES AND PROCESSING PURPOSES

We only process the data strictly necessary for the portal’s operation, divided as follows:

3.1. Personal Data Provided:

  • Data: 
    • Full name; and 
    • Email address.
  • Purpose: Registration on our mailing list for receiving newsletters, market alerts, educational materials, and general email marketing.
  • Legal Basis: Free and Unequivocal Consent (Article 7, I, LGPD).

3.2. Data Collected Automatically:

  • IP address
  • Browser used
  • Operating system
  • Pages accessed
  • Length of stay
  • Interactions with the website
  • Cookies and online identifiers information

  • Purpose: Identification of access for cybersecurity purposes, prevention of fraudulent attacks, and compliance with legal obligations regarding log retention.
  • Legal Basis: Legal Obligation (Article 15 of the Brazilian Internet Law) and Fraud Prevention (Article 11, II, ‘g’ of the Brazilian General Data Protection Law).

3.3. Navigation and Profiling Data (Cookies):

  • Data: 
    • Page view history; 
    • Interaction with banners; and 
    • Time spent on the website.
  • Purpose: Statistical analysis of audience data and personalization of advertising through interest-based targeting.
  • Legal Basis: Legitimate Interest (Art. 7, IX, LGPD).

4. ADVERTISING, GOOGLE ADS AND THIRD PARTIES

To ensure our content is free, we use third-party advertising technologies: 

4.1. Third-Party Providers: We inform you that Google, as an advertising provider, uses cookies to deliver advertising on our portal based on the user’s previous visits. 

4.2. Advertising Cookies: The use of these cookies allows Google and its partners to display relevant ads to you, based on your interests and browsing history. 

4.3. User Control: You have the right to disable personalized advertising. To do this, simply access your Google Ads Settings .

5. SHARING DATA WITH THIRD PARTIES AND COLLABORATORS

5.1. Employees and Staff: Access to your information is restricted to employees and staff of the Controller who have a legitimate need for access to perform their technical and administrative functions. All our employees are subject to strict confidentiality clauses and data protection training.

5.2. Limitation of Use: We require all service providers to use the shared data exclusively for the purposes set forth in this Policy, and it is prohibited to use it for their own purposes or to sell this information to third parties.

5.3. Judicial Request: We reserve the right to share data with police, judicial or administrative authorities if required by law or by a specific court order.

6. DATA RETENTION PERIOD AND DATA LIFECYCLE

We respect the principle of necessity, retaining data only for the time necessary. 

6.1. Personal Data: Name and email remain in our active database as long as the user maintains an interest in our content. They are removed after a request to be deleted ( opt-out ), which is processed as quickly as possible.

6.2. Connection Logs: Kept rigorously for a minimum of 06 (six) months , in accordance with the Brazilian Civil Rights Framework for the Internet. 

6.3. Tracking Data: Cookies have variable validity periods, which can be up to 24 months . 

6.4. Exceptional Retention: We may retain information beyond the stated periods only to comply with legal obligations, court orders, or for defense in administrative proceedings.

7. INTERNATIONAL TRANSFER AND SECURITY

7.1. Global Infrastructure: Because we use international cloud services and analytics tools (such as Google servers), your personal data may be processed outside of Brazil. We guarantee that these providers adhere to international security and privacy standards. 

7.2. Security Protocols: We have implemented robust technical measures, such as the use of HTTPS (SSL/TLS) protocol with high-layer encryption, to ensure that communications between your device and our server are private and secure.

8. DISCLAIMER AND AFFILIATE LINKS

8.1. External Navigation: Our portal is educational and informative. By clicking on links to banks or financial institutions, you will be redirected to external websites. 

8.2. Limitation of Liability: We have no control over the privacy practices of third-party websites. From the moment a user leaves our domain, the responsibility for the handling of their data rests exclusively with the destination website. We recommend that you always pay attention to the Privacy Policies of the websites you visit. 

9. DATA SUBJECT RIGHTS

In accordance with Article 18 of the LGPD (Brazilian General Data Protection Law), the user (or their legal representative) has the following rights:

  1. Confirmation and Access: To know what data we process and to request a copy of it.
  2. Correction: Request the updating of incomplete or incorrect information.
  3. Deletion: Request the deletion of data collected with your consent.
  4. Revocation: Cancel your authorization to receive email marketing at any time.

To exercise any of these rights, please use the official channel of our DPO: [email protected] . To revoke consent, you can directly use the opt-out option in the emails.