Transparency
Privacy
and cookies.
How we process your data and the features this site uses.
Last updated: .
01 · Privacy
Privacy Policy
Who is responsible for your data
Zamai Sociedade Individual de Advocacia, registered with OAB/SP under no. 25.790 and presented on this site as Zamai Advogados, is the controller of personal data processed through zamai.xyz. This policy covers browsing and requests submitted through the site’s form.
What data is processed
The form requests your name, email and phone number to identify you and enable the firm to respond. Your request is forwarded to the firm’s email inbox with the submission date and a reference code.
The operation and security of the site also involve technical data, such as IP addresses and access dates and times. To protect the form against abusive submissions, identifiers derived from IP addresses and the times of attempts are recorded.
If you consent to optional analytics, Google Analytics 4 will process technical browsing information, pages visited and cookie identifiers. We do not send the form fields or their contents to this tool.
Reception assistant and scheduling
The assistant provides information about the firm and answers brief FAQ questions using local rules in your browser, without generative AI. Text you enter is not sent to the firm or stored persistently. Only the displayed answers remain in page memory and are cleared when you close the assistant. To provide your name, email and phone number, use the existing contact form. Avoid entering details of your case in the assistant.
Google Calendar loads only after you click to open scheduling. Google processes the information you provide when booking under its services and Privacy Policy. The booking page requests first name, last name and email; a phone number is requested only if that field is enabled. Bookings, invitations and confirmations have their own processing and retention arrangements. The contact form’s 30-day retention period does not automatically apply to them.
Purposes and legal bases
- Responding to contact requests: identifying the requester and responding by email or phone. Where the request concerns a possible engagement, processing is based on preliminary procedures requested by the data subject, under Article 7(V) of Brazil’s General Data Protection Law (LGPD).
- Protecting the site and form: preventing spam, fraud and abuse on the basis of legitimate interest, taking into account the necessity of processing and safeguards for data subjects’ rights, under Articles 7(IX) and 10 of the LGPD.
- Optional analytics: understanding visits and improving the site’s content, only with your consent, which may be withdrawn in cookie preferences.
- Meeting obligations and protecting rights: complying with legal obligations and responding to data subjects’ requests; where applicable, retaining information for the lawful exercise of rights, under Article 7(II) and (VI) of the LGPD.
Limited use and technical service providers
Form data is used exclusively to respond to your contact request. We do not sell this information. We do not provide or transfer it to third parties for advertising, commercial mailing lists or purposes unrelated to the requested response.
Hostinger provides the hosting and email service used by the site and performs the technical processing necessary to deliver messages and operate those services.
Google processes the analytics data you have authorized. This service may involve data processing outside Brazil. See Google’s Privacy Policy and information about data use on sites that use its services.
These services may involve processing outside Brazil. International transfers must comply with the grounds and safeguards provided by the LGPD. Information about infrastructure and service providers is available in Hostinger’s Privacy Policy.
Submitting the form does not subscribe you to marketing lists. Communications required by law or by a competent authority follow the applicable legal provisions.
Retention and security
Data provided through the contact form is stored for up to 30 days from submission in order to provide the requested response. At the end of that period, the firm arranges for deletion of the contact records under its control, subject to legal retention requirements.
This period applies to the initial contact. Any subsequent engagement involves its own purposes and obligations, which will be explained to the person concerned.
Retention of user and event data in Analytics is set to 2 months, without resetting for new activity. This limit does not apply to standard aggregated reports and is separate from the 30-day retention of contact data.
The site uses an HTTPS connection. Form submissions use an encrypted connection to the email service, together with access controls and measures to prevent abuse. Security measures are intended to reduce the risks of unauthorized access, use or disclosure.
Contact regarding personal data
You may request confirmation, access, correction and deletion of your data, as well as the other rights provided by the LGPD, subject to the applicable legal conditions. For privacy questions and requests, request a response through the form and explain your request when the firm contacts you.