Updated on July 9, 2026
Privacy Policy
This page is maintained by Lesco to transparently explain how we collect, use and protect the personal data of architects, builders, specifiers and other visitors, in compliance with Brazil's General Data Protection Law (LGPD).
1. Data controller
A Lesco é a controladora dos dados pessoais tratados por meio deste site e dos seus canais de atendimento, nos termos da Lei nº 13.709/2018 (Lei Geral de Proteção de Dados Pessoais, LGPD). Isso significa que somos responsáveis pelas decisões sobre o tratamento dos seus dados e por garantir os seus direitos como titular.
For any privacy-related matter, our Data Protection Officer (DPO) contact is provided at the end of this page.
2. Personal data we collect
Data you provide: name, email, phone/WhatsApp, company, role, city/state and project information (project type, area, line of interest) when you request a quote, catalogs, samples or speak with a representative.
Navigation and usage data: IP address, device identifiers, browser type, pages visited, time on site, traffic source and campaign parameters (UTMs), collected through cookies and similar technologies.
Third-party data: we may receive data from advertising platforms and social networks when you interact with our content or forms outside this site.
3. Purposes and legal bases
We process your data only for specific, legitimate purposes, always supported by a legal basis under the LGPD (arts. 7 and 11):
• Responder a solicitações, elaborar orçamentos e enviar catálogos/amostras: execução de procedimentos preliminares e de contrato a pedido do titular.
• Aprimorar produtos, atendimento e a experiência no site, além de prevenir fraudes: legítimo interesse, sempre respeitando suas expectativas e direitos.
• Enviar comunicações de marketing sobre revestimentos, brises, decks e novidades de arquitetura sustentável: consentimento, que pode ser revogado a qualquer momento.
• Cumprir obrigações legais, regulatórias, fiscais e defender direitos em processos: cumprimento de obrigação legal e exercício regular de direitos.
4. Sharing and processors
We do not sell your personal data. We may share it with processors that support our operations, always under contract and confidentiality and security obligations: hosting and infrastructure providers, email and CRM tools, analytics and advertising platforms, and sales representatives and carriers involved in serving you.
We may also share data with public authorities when required by law, court order or legal request.
5. International transfer
Some tools we use (for example, analytics and hosting) may process data on servers located outside Brazil. In such cases, we adopt safeguards to ensure the transfer complies with the LGPD and with an adequate level of protection.
7. Retention and disposal
We retain personal data only for as long as necessary to fulfill the purposes of this policy or to meet legal and regulatory obligations. After that period, data is securely deleted or anonymized.
8. Information security
Adotamos medidas técnicas e administrativas para proteger os dados contra acessos não autorizados, perda, alteração ou destruição, incluindo controle de acesso, criptografia em trânsito e boas práticas de gestão. Nenhum sistema é 100% inviolável; por isso, atuamos de forma contínua para reduzir riscos.
9. Your rights as a data subject
Under art. 18 of the LGPD, you have the right to:
• Confirmation that processing exists and access to your data; • Correction of incomplete, inaccurate or outdated data; • Anonymization, blocking or deletion of unnecessary or excessive data; • Portability of data to another provider; • Deletion of data processed based on consent; • Information about whom we share your data with; • Withdrawal of consent; • Review of decisions made solely by automated means.
10. How to exercise your rights
To exercise any of these rights, contact our DPO at the email below. We may request additional information to confirm your identity and will respond within the timeframes set by the LGPD.
11. Minors
Our products and channels are intended for professionals and an adult audience. We do not knowingly collect data from children and adolescents. Should we identify such collection without proper legal basis, the data will be deleted.
12. Changes to this policy
This policy may be updated periodically to reflect legal, technical or service changes. The date of the last update is always shown at the top of this page.
13. Data Protection Officer (DPO) and contact
To exercise your rights, ask questions or file complaints about the processing of your data, contact our DPO. You may also reach out to Brazil's National Data Protection Authority (ANPD).
contato@lesco.com.br