Privacy Policy
Version: 2026-05-05 · Applicable to: klederson.com
1. Controller
Klederson Bueno, individual, based in São Paulo · SP · Brazil, is the Controller of personal data collected on this site, under the Brazilian General Data Protection Law (LGPD — Law 13.709/2018). For any data-related matter, reach out via the site form or the email shared after first contact.
2. Data we collect
When you submit a form, we collect:
- Full name
- Professional email and/or phone (the latter is required on the CV download form)
- Company (only on the contact form; optional on the download form)
- Intent / reason (e.g., executive role, board advisory, partnership, investment)
- Page language used
- Version of the consent text accepted, with timestamp
- Source channel (contact form vs. CV download form)
- Cryptographic hash of your IP address (not the plaintext IP) for spam prevention
- Browser user-agent and referer (click origin)
Additionally, this site uses Google Analytics 4 with IP anonymization. GA collects: pages visited, time on page, interaction events (scroll depth, CTA clicks, downloads, language switch), traffic source (referrer/UTM), device type and country. No direct personal data is sent to Google. GA cookies can be blocked via browser settings or extensions.
3. Purpose
Form data (name, email, phone, company, intent): used solely to respond to the professional contact you initiated, qualify the interaction (e.g., identifying recruiters or partners) and prevent abuse. We do not run direct marketing, send newsletters or share data with third parties.
Google Analytics data: used in aggregate to understand which CV content drives the most interest, to refine communication and to measure outreach channel effectiveness. Legal basis: legitimate interest (LGPD Art. 7, IX) — compatible with the stated purpose, no sensitive processing.
4. Legal basis
The legal basis is your free, informed and unequivocal consent (LGPD, Art. 7, I), expressed when you submit the form, recorded with the version of the consent text and the timestamp.
5. Storage and security
Data is stored on a private server located in Brazil, accessible only to the Controller. No data is shared with third parties, external processors or marketing services. The infrastructure uses TLS in transit (Let's Encrypt), an internal gateway (Traefik) and network isolation.
6. Retention
Data is kept for up to 24 months from submission. This window matches typical executive search cycles and possible follow-ups on conversations initiated. After 24 months, records are deleted automatically, unless an ongoing conversation justifies a longer retention — in which case you will be informed.
7. Your rights (LGPD)
At any time you may:
- Confirm whether your data is being processed
- Access the data we hold about you
- Correct incomplete, inaccurate or outdated data
- Request anonymization, blocking or deletion of your data
- Withdraw previously granted consent
- Request data portability
- Ask with whom data has been shared (current answer: no one)
To exercise any of these rights, write to the email shared after first contact, identifying yourself with the email used in the form. We respond within 15 days.
8. Cookies
This site uses Google Analytics 4 cookies (_ga,
_ga_<ID>) with anonymized IP, for aggregate traffic
and engagement measurement. No advertising or remarketing cookies are
used. You can block cookies via your browser settings or extensions
(uBlock, Ghostery, Privacy Badger) without losing site functionality.
9. Changes to this Policy
This policy may be updated periodically. Each version is identified by date and hash; the consent you granted is bound to the version in effect at the time of submission.