Privacy policy
Last updated: September 30, 2026.
This page describes how Zmolak Technology handles personal data sent through the contact form on zmolak.com. Bracketed items, such as [CNPJ], still need to be filled in by the controller. The rest describes what this site does today.
Who is responsible
The controller for this processing is Zmolak Technology.
[LEGAL NAME]
[CNPJ]
[REGISTERED ADDRESS]
For questions about this policy, or to exercise a right, email contact@zmolak.com.
What the form collects
The form asks only for what we need in order to reply:
- Name
- Project description
To deliver the message and limit abuse, we also process the connection’s IP address and the result of the Cloudflare Turnstile security check. We do not ask for a phone number, identity documents or payment details, and we do not create an account.
This site does not use analytics or advertising cookies. Cloudflare’s check may process technical browser data, including the IP address, to tell a person from an automated submission.
Why we use it
We use your name, email and project description to reply and to talk about a possible project. The IP address and the security check are used to limit repeated attempts and block automated submissions.
Under Brazil’s LGPD (Law 13,709/2018), the bases are steps taken at your request before entering into a contract (art. 7, V) and our legitimate interest in answering requests and protecting the site (art. 7, IX).
Under the UK GDPR and the EU GDPR, the corresponding bases are steps taken at your request before entering into a contract (art. 6(1)(b)) and legitimate interests (art. 6(1)(f)).
How long it is kept
The message is emailed to the Zmolak team. This site does not keep a copy in a database.
The email stays with the team for as long as needed to reply and, if the conversation continues, to discuss the project. A maximum period has not been set yet: [RETENTION PERIOD]. After that period, the message should be deleted.
Rate limiting uses the IP address only for the short window of that protection. It does not create a visitor record.
Who we share it with
The message reaches the team that answers contacts. We do not sell personal data or use it for third-party advertising.
Cloudflare hosts the site, runs the Turnstile check and forwards the email. Its processing is described at https://www.cloudflare.com/privacypolicy/
International transfers
Cloudflare may process data outside Brazil, the United Kingdom and the European Economic Area. The safeguard for that transfer still needs to be stated by the controller: [TRANSFER SAFEGUARD].
Your rights
Under the LGPD, you can ask for confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary or excessive data, portability, information about who the data was shared with, and withdrawal of consent where consent is the basis.
Under the UK GDPR and the EU GDPR, you can ask for access, rectification, erasure, restriction and portability, you can object to processing based on legitimate interests, and you can withdraw consent where consent is the basis. You can also complain to a supervisory authority: the ANPD in Brazil, the ICO in the United Kingdom, or the data protection authority of your country in the European Union.
Send the request to contact@zmolak.com. We will reply within the time the applicable law requires. We may ask for one further detail only to confirm the request is yours.
Children
This site is not directed at children, and the form does not ask for a child’s data. If we believe we have received a child’s data, we will delete the message.
Changes to this policy
When this text changes, the date at the top of the page will be updated.