Privacy Policy

Who is responsible for your data.

TargPoint acts as a controller when it determines the purposes and means of processing personal data. The legal entity responsible for this policy is:

Isaac Andrade oversees the privacy contact channel. Identifying him as the contact does not, in itself, constitute a formal appointment as a data protection officer.

A policy for our relationship with you.

This document covers browsing on targpoint.com.br, messages sent to TargPoint, relationships with representatives of businesses and partners, and recruitment and professional referral processes.

When providing SAP consulting services, we may access data for which a client is responsible. Where we act as a processor, we follow the controller's documented instructions and the agreements applicable to the project. This policy does not replace service contracts, confidentiality agreements, or the client's privacy notices.

Our corporate channels are intended for professional relationships. They are not intended to collect children's data. If you become aware of such a submission, please contact us so that we can assess and address it appropriately.

What data we may receive.

• Business inquiries: name, email, company, subject, and a description of your situation. Phone or WhatsApp number and job title or role are optional in the contact form.
• Relationship history: messages, referrals, proposals, service records, and information needed to manage contracts.
• Job applications: contact details, résumé, experience, education, skills, and information relevant to the opportunity.
• Browsing and website security: technical data, such as IP address, browser, pages visited, and interaction records, depending on the tools actually used and the applicable privacy choices.
• Rights requests: identification, the content of the request, and only the information necessary to confirm that the request is legitimate.

Data may be provided directly by you or by an authorized representative of the company with which we have a relationship. Receiving a résumé through a referral does not automatically authorize us to distribute it to other organizations.

The reason for using data depends on the circumstances.

We do not treat a general authorization as justification for every activity. The applicable legal basis depends on the purpose, your role in the relationship, and the circumstances of the processing.

Where legitimate interests apply, TargPoint must limit processing to what is necessary and assess the expectations and rights of the individuals concerned. Refusing optional consent should not prevent us from handling a request supported by another valid legal basis.

Your résumé has a defined purpose.

TargPoint receives résumés for internal recruitment and opportunities with clients or partners. This does not mean that profiles are forwarded indiscriminately.

• Internal recruitment: your résumé is assessed against the stated role or professional scope.
• Client or partner opportunities: before forwarding an identifiable résumé, we will tell you which organization will receive it and explain the opportunity, requesting your specific authorization. We will share only the professional information needed.
• Talent pool: keeping your profile for future opportunities will require a separate choice and a defined retention period. It will not be a condition of participating in the current selection process.

The organization receiving your résumé may conduct its own selection process and will be responsible for the processing it determines. You may ask TargPoint for information about referrals and their recipients.

Do not include sensitive data or other people's personal information in your résumé unnecessarily. Accessibility, inclusion, or legal requirements must be addressed specifically; sending a résumé should not be treated as authorization for any use.

You choose whether to receive our content.

TargPoint plans to offer a newsletter in the future. When available, subscription will be offered separately, with information about the content and an unsubscribe option.

The mailing list will not be created automatically from résumés, business inquiries, or existing contacts. The subscription will be based on your consent, which you may withdraw without affecting other legitimate relationships with the company.

Replies to your requests, recruitment communications, and messages needed to perform a contract are not newsletters. A minimal unsubscribe record may be retained to prevent inappropriate re-subscription.

Cookies need a clear purpose too.

The website may use cookies and similar technologies for functionality, security, usage measurement, and tool integration. Each category must be described in line with the site's actual inventory, its purpose, and the applicable legal basis.

You can choose optional categories in the consent panel and revisit your decision at any time. Refusing these technologies does not prevent you from making a business inquiry through our contact channels.

See the Cookie Policy for the services and choices available.

Who may receive your data.

We use hosting, email, storage, backup, and relationship management services to operate our channels and handle inquiries. WPForms manages the form in WordPress; contacts and their business context may be recorded in HubSpot.

Recipients may also include clients or partners for authorized professional referrals; accounting or legal service providers where needed; and authorities where disclosure is required or otherwise legally justified.

Access and sharing must be limited to the relevant purpose. Agreements with service providers and partners must establish appropriate responsibilities and safeguards for the processing involved.

Processing outside Brazil

Business contacts and their history may be stored in HubSpot CRM. TargPoint's account uses the US East hosting region. Google services and other providers may also involve processing or access outside Brazil. Processing is limited to the purposes described in this policy and the periods in the retention section.

Keeping data only as long as needed.

The limits below set operational limits for the main activities. These are TargPoint governance choices, not universal retention periods required by Brazil's General Data Protection Law (LGPD). Data with no current purpose should be deleted or anonymized before these limits if there is no other valid reason to retain it.

Contractual, tax, and other data subject to specific obligations will have separate retention periods, documented according to the applicable requirements. Retention to defend legal rights will also be assessed by data category and circumstances, rather than used to justify keeping the entire record indefinitely.

Deletion must cover the systems used to handle inquiries. Backups follow their own replacement cycles; retained data must remain protected and must not be returned to routine processing after a valid deletion request. If a restoration is necessary, the applicable deletions must be reapplied.

Safeguards proportionate to the risk.

Data management requires proportionate measures, including access restrictions, system updates, account protection, guidance for those involved in processing, and careful file sharing.

These measures do not eliminate all risk. If an incident is identified, it must be assessed and appropriate steps taken, including notification to Brazil's data protection authority (ANPD) and affected individuals where required by law.

If you receive a suspicious request in TargPoint's name, verify its origin through an official company channel before providing data or documents.

You can ask, correct, and make requests.

Subject to the conditions set out in law, you may request confirmation of processing and access to your data, correction, information on sharing, deletion, anonymization or blocking, portability, and review of decisions based solely on automated processing that affect your interests. You may also withdraw consent and object where provided by law.

Some requests may be subject to limits, for example where an obligation requires certain records to be retained. In such cases, the response must explain the basis for the decision.

• Describe your request and, if possible, how you have interacted with TargPoint.
• Do not send identification documents in advance. If further verification is necessary, we will request only a proportionate minimum.
• Requests are handled free of charge and within the legal deadlines applicable to the type of request.
• You may also contact the ANPD and other competent authorities, as appropriate.

A policy that reflects how we operate.

This document may be updated when our activities, tools, or applicable requirements change. The published version will state its update date. Significant changes will be communicated in a manner proportionate to their impact and will not replace a new authorization where one is required.

Last updated and effective: September 13, 2026.