Privacy Policy

Lesco is the controller of the personal data processed through this site and its service channels, under Law No. 13,709/2018 (Brazil's General Data Protection Law — LGPD). This means we are responsible for decisions about processing your data and for safeguarding your rights as a data subject.

For any privacy-related matter, our Data Protection Officer (DPO) contact is provided at the end of this page.

Data you provide: name, email, phone/WhatsApp, company, role, city/state and project information (project type, area, line of interest) when you request a quote, catalogs, samples or speak with a representative.

Navigation and usage data: IP address, device identifiers, browser type, pages visited, time on site, traffic source and campaign parameters (UTMs), collected through cookies and similar technologies.

Third-party data: we may receive data from advertising platforms and social networks when you interact with our content or forms outside this site.

We process your data only for specific, legitimate purposes, always supported by a legal basis under the LGPD (arts. 7 and 11):

• Respond to requests, prepare quotes and send catalogs/samples — performance of preliminary steps and a contract at the data subject's request.

• Improve products, service and the site experience, and prevent fraud — legitimate interest, always respecting your expectations and rights.

• Send marketing communications about cladding, brises, decks and sustainable architecture news — consent, which can be withdrawn at any time.

• Comply with legal, regulatory and tax obligations and defend rights in proceedings — compliance with legal obligations and regular exercise of rights.

We do not sell your personal data. We may share it with processors that support our operations, always under contract and confidentiality and security obligations: hosting and infrastructure providers, email and CRM tools, analytics and advertising platforms, and sales representatives and carriers involved in serving you.

We may also share data with public authorities when required by law, court order or legal request.

Some tools we use (for example, analytics and hosting) may process data on servers located outside Brazil. In such cases, we adopt safeguards to ensure the transfer complies with the LGPD and with an adequate level of protection.

We use necessary cookies (essential to the site's operation), performance/analytics cookies (to understand how the site is used) and marketing cookies (to measure campaigns and personalize ads).

You can manage or block cookies in your browser settings. Disabling some cookies may affect site functionality.

We retain personal data only for as long as necessary to fulfill the purposes of this policy or to meet legal and regulatory obligations. After that period, data is securely deleted or anonymized.

We adopt technical and administrative measures to protect data against unauthorized access, loss, alteration or destruction — including access control, encryption in transit and sound management practices. No system is 100% impenetrable; we therefore work continuously to reduce risks.

To exercise any of these rights, contact our DPO at the email below. We may request additional information to confirm your identity and will respond within the timeframes set by the LGPD.

Our products and channels are intended for professionals and an adult audience. We do not knowingly collect data from children and adolescents. Should we identify such collection without proper legal basis, the data will be deleted.

This policy may be updated periodically to reflect legal, technical or service changes. The date of the last update is always shown at the top of this page.