Privacy and Cookies Policy

1. Introduction

Anfi Consulting LTDA EPP (hereinafter: "Anfi", "we") operates the website https://anfi.com.br (hereinafter: "the site"). This policy explains how we process your personal data and how we use cookies and other related technologies. By using the site, you acknowledge the practices described here. The processing of personal data follows the Brazilian General Data Protection Law (Law No. 13.709/2018, the LGPD).

2. Which personal data we process

We process the personal data you provide directly and the data collected automatically as you browse the site:

• Data you provide: name, email, phone and the content of messages sent through our contact forms.
• Data collected automatically: IP address, browser and device type, pages visited, browsing time and interaction data collected by cookies (as described in section 7 of this policy).

3. How we use your data

We use your personal data to respond to contacts and requests, provide and improve our services, measure and optimize marketing campaigns, analyze use of the site and comply with legal and regulatory obligations.

4. Legal basis and sharing

The processing of your data is based on consent, performance of a contract or preliminary procedures, compliance with a legal obligation and legitimate interest, as the case may be. We may share data with service providers acting on our behalf (for example, the analytics and marketing tools described in section 7) and with public authorities when required by law. These third parties process the data according to their own privacy policies.

5. How long we keep the data

We keep your personal data only for as long as necessary for the purposes described in this policy or for the period required by legal obligation. After that period, the data is deleted or anonymized.

6. Cookies, scripts and web beacons

A cookie is a small file sent along with the pages of the site and stored by your browser on your device. The stored information may be returned to our servers, or to those of relevant third parties, on a later visit.

A script is a piece of code used to make the site work properly and interactively. It runs on our server or on your device.

A web beacon (or tracking pixel) is an invisible piece of text or image used to monitor site traffic.

7. Cookie categories and cookies placed

We organize cookies into four categories, the same ones you manage in our preferences panel:

Necessary (always on)

Essential for the site to work, such as security and navigation. They cannot be disabled and are placed without the need for your consent. They include the cookie that stores your own cookie consent choices.

Analytics

They help us understand how the site is used so we can improve it.

• Google Analytics: site usage statistics. Privacy statement: https://policies.google.com/privacy. Cookies: _ga (2 years), _ga_* (1 year), _gid (1 day).
• Microsoft Clarity: heatmaps and session recordings. Privacy statement: https://privacy.microsoft.com/en-us/privacystatement. Cookies: _clck (1 year), _clsk (1 day), MUID (1 year).

Marketing

They allow us to show more relevant content and ads and to measure campaigns.

• Google Ads: conversion measurement. Privacy statement: https://policies.google.com/privacy. Cookie: _gcl_au (persistent).
• Meta Pixel (Facebook): campaign measurement. Privacy statement: https://www.facebook.com/privacy/policy. Cookie: _fbp (3 months).
• TikTok Pixel: campaign measurement. Privacy statement: https://www.tiktok.com/legal/privacy-policy. Cookies: _ttp, ttcsid.

Functional

They remember your choices, such as language and preferences, to make the site easier to use.

8. How to manage your cookie preferences

When you first access the site, we show a preferences panel where you choose which categories to allow. Necessary cookies are always on; the other categories (analytics, marketing and functional) start disabled and only operate if you enable them.

In the panel you can:

• Accept all: enables all cookie categories.
• Reject optional: keeps only the necessary cookies and blocks analytics, marketing and functional.
• Save preferences: applies exactly the categories you turned on or off in each section's toggles.

What happens when you manage these preferences:

• Your choice is recorded in a consent cookie (the "necessary" category), so the site remembers your decision on future visits and does not show the panel repeatedly.
• If you disable a category that was active, we stop placing new cookies of that category. Cookies already stored in your browser may remain until they expire or until you delete them manually; they stop being used for the corresponding purposes.
• Disabling analytics means your browsing is not counted in our statistics and session recordings.
• Disabling marketing means you are not included in campaign measurement or ad audiences; you may still see ads, but less relevant ones.
• Disabling functional may prevent the site from remembering choices such as language and preferences, requiring you to set them again on each visit.
• You can change or withdraw your consent at any time by reopening the cookie preferences panel available on the site.
• Refusing optional cookies does not prevent you from using the site, but some features may be limited.

Besides the panel, you can use your browser to delete cookies automatically or manually, or to be warned whenever a cookie is placed. See your browser's help section for these options. If you delete the cookies, the consent panel will be shown again on your next visit.

9. Your rights regarding personal data

You have the following rights regarding your personal data:

• confirmation that processing exists;
• access to the data;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary or excessive data or data processed in breach of the LGPD;
• portability of the data to another service or product provider, upon express request, in accordance with the regulations of the national authority, observing trade and industrial secrets;
• deletion of personal data processed with the data subject's consent, except in the cases provided for in art. 16 of the LGPD;
• information about public and private entities with which the controller has shared data;
• information about the possibility of not giving consent and the consequences of refusal.

To exercise these rights, contact us using the details in section 11. If you have a complaint about how we handle your data, we would like to hear from you, but you also have the right to file a complaint with the National Data Protection Authority (ANPD):

National Data Protection Authority. Esplanada dos Ministérios, Bloco C, 2nd floor, CEP 70297-400, Brasília, DF. Site: https://www.gov.br/anpd/pt-br/canais_atendimento/

10. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in the law. The date at the top indicates the last update. We recommend revisiting this page regularly.

11. Contact details

If you have questions or comments about this Privacy and Cookies Policy, contact us:

Anfi Consulting LTDA EPP. Al. dos Anapurus, Indianópolis, São Paulo, SP. Site: https://anfi.com.br. Email: falemais@anfi.com.br