Privacy Policy

For the purposes of this Policy, the personal data controller is:

• MATTA LEGAL REP LTDA.
• CNPJ (Brazilian corporate ID): 68.005.472/0001-70
• Address: Av. Paulista, 91 – Suite 905, Paulista Tower Building, Bela Vista, São Paulo/SP, ZIP 01311-000, Brazil
• E-mail: info@mattalegalrep.com.br

Matta Legal Rep is a Brazilian company specialized in legal representation and regulatory compliance, focused especially on foreign companies that need representation in Brazil. Its activities include:

• legal representation in Brazil of domestic and foreign legal entities;
• representation before Brazilian public authorities and agencies;
• representation under the ECA Digital (Law No. 15.211/2025);
• resident director services and powers of attorney for foreign shareholders;
• representation before the Federal Revenue, Central Bank, Boards of Trade and other agencies;
• regulatory compliance and corporate services.

This Policy applies to the processing of personal data carried out in the context of the website mattalegalrep.com.br, communications with prospects and clients, commercial proposals and the execution of contracted services.

We collect only the personal data strictly necessary for the purposes described in this Policy. Depending on the service and stage of the relationship, the data processed may include:

4.1. Contact data

• name;
• job title;
• company;
• business e-mail;
• phone;
• country;
• content of messages submitted through our channels.

4.2. Business data collected in proposals and due diligence

During commercial processes, proposals and risk assessment questionnaires, we may collect data about the client company and, to the extent they identify natural persons, related personal data such as:

• legal name and trade name;
• country of incorporation and incorporation date;
• institutional website;
• platforms operated;
• parent company and ownership structure;
• ultimate beneficial owners (UBOs);
• existence of a CNPJ and presence in Brazil;
• number of employees;
• estimated revenue.

4.3. Information about digital platforms

Where applicable to the contracted service, particularly under the ECA Digital and other sectoral regulations, we may collect information regarding:

• type of platform and industry;
• target audience and user volume;
• use of artificial intelligence;
• features and user-generated content;
• monetization model;
• content moderation policies;
• regulatory history;
• policies for the protection of children and adolescents;
• compliance programs;
• specific legal representation needs.

4.4. Documents provided by the client

To enable the provision of services, the client may share, among others:

• corporate documents;
• powers of attorney;
• contracts;
• identification documents of representatives and beneficiaries;
• completed questionnaires;
• regulatory documents.

4.5. Browsing data

When the data subject accesses our website, we may automatically collect:

• IP address;
• browser type and version;
• operating system;
• device type;
• pages accessed and interactions performed;
• date and time of access;
• cookies and similar identifiers.

Personal data may be collected:

• through the contact form available on our website;
• by e-mail;
• during meetings, calls and business interactions;
• in the context of commercial proposals;
• through due diligence and risk assessment questionnaires;
• from documents provided by the client or by third parties authorized by the client;
• automatically, through cookies and similar technologies;
• from public sources, where permitted by applicable law.

Personal data is processed for the following purposes:

• respond to inquiries, questions and requests;
• prepare commercial proposals and quotes;
• assess regulatory risks and perform due diligence;
• deliver the legal representation and compliance services contracted;
• comply with legal, regulatory and contractual obligations;
• represent the client before Brazilian authorities;
• prevent fraud and unlawful acts and protect the rights of Matta Legal Rep and third parties;
• manage contracts, billing and collections;
• send institutional and informative communications, where appropriate;
• improve the website, digital channels and user experience;
• ensure information security and the integrity of our systems.

The processing of personal data by Matta Legal Rep is based, depending on the specific case, on the following legal grounds set out in articles 7 and 11 of the LGPD:

• consent of the data subject;
• performance of a contract or preliminary procedures requested by the data subject;
• compliance with a legal or regulatory obligation;
• exercise of rights in judicial, administrative or arbitration proceedings;
• legitimate interests of the controller or of third parties, subject to the data subject's rights and freedoms.

A significant portion of the information exchanged with Matta Legal Rep relates to the client company and therefore does not necessarily qualify as personal data under the LGPD.

Where such information allows, directly or indirectly, the identification of natural persons – such as shareholders, officers, representatives, ultimate beneficial owners or contact points – it will be processed under the terms of this Policy and applicable law.

Matta Legal Rep does not request sensitive personal data through its website or forms.

Should the client voluntarily submit sensitive personal data through documents, messages or attachments, such data will be processed solely when strictly necessary for the performance of the contracted service, compliance with a legal or regulatory obligation, or the regular exercise of rights, with appropriate technical and organizational measures in place.

Our website and services are not directed to individuals under 18. We do not knowingly collect personal data of children or adolescents through our digital channels.

Where services related to the ECA Digital or to digital platforms involve information regarding the protection of children and adolescents, processing will observe the best interests of the data subject and applicable specific legislation.

Matta Legal Rep may share personal data, always within the limits of the purposes of this Policy and subject to contractual confidentiality obligations, with:

• public authorities and regulators, when required by law or by a competent authority;
• legal partners and correspondent firms;
• accountants and tax advisors;
• technology, hosting and cloud computing providers;
• e-mail and corporate communication providers;
• information security providers;
• other service providers necessary for the performance of our activities;
• third parties, in the event of corporate reorganization, merger, acquisition, assignment or restructuring.

Given its activity focused on representing foreign companies, Matta Legal Rep may carry out international transfers of personal data.

Such transfers will comply with the requirements of articles 33 and following of the LGPD, including, where applicable, adequate safeguards, specific contractual clauses, specific data subject consent or other applicable legal grounds, always aiming to ensure a level of protection compatible with Brazilian law.

We use cookies and similar technologies to ensure the website's operation, evaluate its performance and improve the browsing experience. Cookies may be classified as:

• Strictly necessary: essential for the basic functioning of the site and browsing security.
• Performance: allow aggregate measurement and analysis of how visitors use the site.
• Analytics: help understand usage patterns and continuously improve content.
• Functional: allow the site to remember user preferences, such as language and display settings.
• Marketing: if adopted in the future, will serve for delivering targeted institutional content, always in compliance with the LGPD.

The data subject may, at any time, manage preferences directly through the browser settings, including by blocking or deleting cookies. Disabling certain cookies may affect site functionality.

Matta Legal Rep adopts technical, administrative and organizational measures appropriate to the nature of the data processed and the state of the art, including:

• encryption, where applicable;
• access controls based on the least-privilege principle;
• authentication mechanisms;
• backup routines;
• system monitoring and access logging;
• contractual confidentiality obligations with staff and providers;
• internal training on privacy and information security.

Even with best practices in place, Matta Legal Rep cannot guarantee absolute security. In the event of a security incident that may cause significant risk or harm to data subjects, we will take the measures required by the LGPD, including notification of the ANPD and affected data subjects when applicable.

Personal data will be retained:

• for the period necessary to fulfill the purposes for which they were collected;
• during compliance with legal, contractual and regulatory obligations;
• for the regular exercise of rights in judicial, administrative or arbitration proceedings;
• within the periods set out in applicable legislation.

Once the legal bases authorizing processing cease to apply, data will be deleted, anonymized or securely archived, except where retention is authorized or required by law.

Under article 18 of the LGPD, the data subject may, at any time and upon request, exercise the following rights:

• confirmation of the existence of processing;
• access to data;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary or excessive data or data processed in breach of the law;
• data portability to another service or product provider, subject to commercial and industrial secrecy;
• deletion of data processed on the basis of consent;
• information about public and private entities with which the controller has shared data;
• information about the option not to provide consent and the consequences of refusal;
• withdrawal of consent;
• objection to processing carried out on one of the grounds that waive consent, in case of non-compliance with the LGPD.

Requests may be sent to info@mattalegalrep.com.br. The data subject may also file a complaint with the National Data Protection Authority (ANPD).

The contact channel with the Data Protection Officer of Matta Legal Rep is the e-mail info@mattalegalrep.com.br, through which questions, requests, complaints and requirements related to this Policy and to the processing of personal data may be submitted.

Our website may contain links to third-party pages and services. Matta Legal Rep is not responsible for the privacy practices or content of external sites. We recommend reading the privacy policies of such third parties before providing any personal data.

This Privacy Policy may be updated at any time by publishing the revised version on this page, indicating the date of the latest update. We recommend checking back periodically for changes.

For questions, requests or complaints related to this Policy or to the processing of personal data, the data subject may contact:

• MATTA LEGAL REP LTDA.
• CNPJ: 68.005.472/0001-70
• Av. Paulista, 91 – Suite 905, Paulista Tower Building, Bela Vista, São Paulo/SP, ZIP 01311-000, Brazil
• E-mail: info@mattalegalrep.com.br