Privacy and data protection
This policy explains how McNaughton Advogados handles the personal data of those who visit this website, subscribe to our briefing or contact us, in compliance with Brazil’s General Data Protection Law (Law 13,709/2018, the LGPD).
Who we are and how to reach us
McNaughton Advogados, at Av. Brig. Faria Lima, 2639, suite 92, Jardim Paulistano, São Paulo – SP, 01452-000, Brazil, is the controller of the personal data processed through this website. For any matter concerning personal data, including contacting our data protection officer, write to contato@mcnaughton.adv.br.
What data we process
We only process: (a) the email address of those who subscribe to the briefing, with the date and time of subscription, the page language and the version of the consent text accepted; (b) the data you send us through the "Contact us" form (name, email, message and, if you wish, company and phone) or when you write to us by email or through other contact channels; (c) technical access logs, such as IP address, date and time, kept by the hosting provider for security reasons and for the period required by Brazil’s Internet Civil Framework (Marco Civil da Internet); and (d) your acknowledgement of the privacy notice, stored in your own browser. We do not use audience measurement or advertising tools.
Why we use it and on what legal basis
The briefing email address is used solely to send the briefing and related communications, based on your consent (article 7, I, of the LGPD), which you may withdraw at any time. Data received by email or other channels is used to reply to you and, where applicable, for steps prior to engagement and for providing our services (article 7, V and IX). Access logs are kept to comply with a legal obligation and to protect the website (article 7, II and IX). All communications we receive are handled under attorney–client confidentiality.
Who we share it with
We do not sell, rent or transfer personal data. It is stored with the website’s hosting provider and, for contact messages, also in the firm’s email service (Microsoft 365); and, once the briefing is sent through a specialised email service, also with that service, solely for that purpose and under confidentiality and security obligations. If any of these suppliers keeps data outside Brazil, the transfer will follow the rules of the LGPD. We may also disclose data where required by court order or by law.
How long we keep it
The briefing email address is kept for as long as you are subscribed and deleted after you unsubscribe, except for the minimum record needed to evidence consent and the cancellation itself. Contact messages are kept for as long as needed to handle them and, if they lead to an engagement, for the period required by the professional relationship and by law. Access logs are kept for the legal period.
How we protect it
The website only works over a secure connection (HTTPS). Briefing data and contact form messages are kept in an area of the server that cannot be reached from the internet, with access restricted to the firm. We adopt reasonable technical and administrative measures to protect data against unauthorised access, loss or alteration.
Your rights and how to exercise them
You may at any time confirm whether we process your data, access it, correct it, ask for it to be anonymised, blocked or deleted, obtain information about sharing and withdraw your consent (article 18 of the LGPD) by writing to contato@mcnaughton.adv.br. To stop receiving the briefing, simply ask at the same address. You may also lodge a complaint with Brazil’s National Data Protection Authority (ANPD).
Cookies and browser storage
We only use the storage essential to the website’s operation: a record that you have seen the privacy notice, kept in your own browser. We do not use audience measurement or advertising cookies, and no third-party content is loaded on our pages. The footer map is an image; Google Maps opens only if you click on it.
Links to other websites
The website contains links to third-party pages, such as LinkedIn, Instagram, Google Maps, publishers, bookshops and the portals where our articles were published. When you follow them, the privacy policies of those websites apply, and we are not responsible for them.
Updates to this policy
This policy may be updated to reflect changes to the website, our services or the law. If we start using measurement tools or other features that depend on your consent, this will be stated here and in the website notice before any collection. The date of the current version appears at the end.
Version of October 2026.