Privacy notice

Draft under legal review · version 2027-03

This notice is published as a draft under review by the Moinhos Vieira legal team. Text in square brackets is still to be completed. Every change creates a new version, shown at the top of this page.

Who we are

Vieira Soluções em Moagem LTDA, trading as Moinhos Vieira, CNPJ 43.673.852/0001-52, Avenida Professora Zilah de Aquino, 970, Jardim Nossa Senhora de Fátima, Tatuí/SP, Brazil, ZIP 18276-440, is the controller of the data processed on this site. The factory that serves customers is at Rua Lino Del Fiol, 485, Vila Paulina, Tatuí/SP.

What we collect

• (a) What you enter in our forms: name, email, phone/WhatsApp, company, CNPJ (optional), country, your message and the technical details of your request.
• (b) Request data: the page you sent it from, language, model or product of interest.
• (c) Only if you accept the related cookies: pages visited, landing page, traffic source, campaign parameters and Google ad identifiers (from the ad click, the cookie and the browser or device; see “Marketing and remarketing (Google Ads)”) and, with Statistics, how you use the pages (clicks, scrolling and session recording, without your name or what you type; see “Statistics and session recording (PostHog)”).
• (d) Your IP address is stored only as an irreversible code (hash).

Why we use it and on what legal basis

Brazilian General Data Protection Law (LGPD):

• Answering your request and preparing a quote: pre-contractual steps at your request (art. 7, V).
• Sending the confirmation email: the same basis.
• Linking the pages you visited to your request, and measuring the site and ads (Google Analytics, Google Ads, Plerdy, PostHog), including click maps and session recording, without your name or what you type: consent given in the cookie banner (art. 7, I), which you may withdraw at any time.
• Showing Moinhos Vieira ads to people who have visited the site (remarketing, Google Ads): consent in the Marketing category of the cookie banner (art. 7, I).
• Sending news by email: consent in the optional box (art. 7, I).
• Protecting the site against bots: legitimate interest (art. 7, IX).

Who we share it with

• Providers that process data on our behalf: Microsoft (corporate email), Supabase (database of our customer relationship system), Amazon Web Services (website hosting), Plerdy (usage statistics, only with consent), PostHog (usage statistics and session recording, without your name or what you type, only with consent; data in the European Union) and Cloudflare (bot protection on the forms).
• Google (statistics, ad measurement and remarketing, only with consent): for statistics, Google processes the data for us; for ads, Google also processes the data for its own purposes, under its own policy (see “Marketing and remarketing (Google Ads)”).
• Videos (YouTube, owned by Google): a video only loads when you click to watch it, in privacy-enhanced mode (youtube-nocookie.com). On some pages, video thumbnails come from YouTube’s servers, and your browser connects to Google to show them. In the 3D part viewers, the YouTube video loads when the page opens.

We do not sell data.

International transfers

Some providers store data outside Brazil (for example, in the United States; PostHog, in the European Union), with the safeguards of LGPD art. 33 [to be confirmed].

Retention

Contact and request data: [to be defined]. Browsing history never linked to a request: up to 13 months. Submissions flagged as spam: up to 90 days.

In your browser: mv_consent (your choice in the banner), 1 year; mv_attr_s (visit source in this tab; does not leave your browser without consent), until you close the tab; mv_attr (visit source, only with consent), 90 days; mv_vid (visitor code, only with Statistics), until you withdraw consent or clear your browser data [period to be defined]; Google Analytics cookies (_ga and _ga_*, only with Statistics), up to 2 years; Plerdy cookies (only with Statistics), for the periods set by Plerdy [to be confirmed]; PostHog cookie (ph_*_posthog, only with Statistics), 1 year. Google ad cookies and lists: see “Marketing and remarketing (Google Ads)”.

Your rights

Under LGPD art. 18: confirmation, access, correction, anonymisation, portability, deletion, information about sharing and withdrawal of consent, by writing to administrativo@moinhosvieira.com.br (data protection officer). You may also lodge a complaint with the ANPD (Brazilian National Data Protection Authority).

Data protection officer

Karolline Gargan, administrativo@moinhosvieira.com.br.

Cookies

You choose the categories in the banner and can change them through the “Cookie preferences” link in the footer. Without consent, the site works and you can still send forms, but without your browsing history. When the purpose of a category changes, the banner asks for your choice again.

Manage cookies

Statistics and session recording (PostHog)

Only if you tick Statistics in the banner (or click “Accept all”) does the site load PostHog, a usage analytics tool. It helps us understand how the site is used and find what gets in the way (slow pages, buttons that do not respond, errors), through:

• Usage statistics: pages viewed, clicks (without the text of buttons and links), scrolling, clicks that do nothing, page load times and technical errors.
• Click maps: where people click on each page, across all visits.
• Session recording, without your name or what you type: a reconstruction of what appears on screen during the visit (pages, scrolling, movements and clicks), to see where people have difficulties.

What the recording leaves out: what you type in forms, in the chat and in the search box is masked in your browser before it leaves: PostHog receives only asterisks. The text of the chat conversation and of the WhatsApp step is also masked, and the notice shown when a form fails to send (which repeats your request) is not recorded. For the site’s communication with our system, the recording keeps only the address and response time, never the content sent.

Without your name: PostHog stores a random code in your browser to recognise the same visit and later ones; the site does not send PostHog your name, email, phone number, company or message. When you send a request, PostHog receives only the form type, language, sales area and model of interest, with nothing that links the visit to the request in our system (the request code shown on screen is also masked in the recording). Your IP address is not stored: before discarding it, PostHog uses it only to estimate your approximate location (country, state and city). Without Marketing consent, the ad click ID is not sent to PostHog either.

Legal basis: consent (LGPD, art. 7, I). Without Statistics consent, PostHog does not load and nothing is sent to it. Refusing does not stop you from using the site or sending forms.

Who and where: PostHog Inc., which processes the data on our behalf. The data is stored in PostHog’s European Union cloud (Frankfurt, Germany).

Retention: recordings are kept for 30 days. Other usage data: up to 7 years (the limit of the plan contracted with PostHog). In your browser, the ph_<project code>_posthog cookie stays for 1 year, PostHog’s default (PostHog documentation); PostHog keeps the same information and the session code in browser storage.

How to withdraw consent: at any time, under “Cookie preferences” in the footer of any page (or the “Manage cookies” button above), by unticking Statistics. PostHog stops sending and recording, and the site deletes the ph_* cookies and keys from your browser and reloads the page without it. Withdrawal applies from then on: anything already sent follows the periods above.

Marketing and remarketing (Google Ads)

Only if you tick Marketing in the banner (or click “Accept all”) does the site load the Google Ads tag. It is used to:

• Measure campaigns: know whether a visit came from a Moinhos Vieira ad and whether it ended in a request (quote, grinding test, screen, parts and hammers).
• Remarketing (personalized ads): show Moinhos Vieira ads to people who have visited the site while they use Google sites and apps (such as Search and YouTube) and Google partner sites and apps. To do this, Google may add your browser to audience lists based on the pages you viewed.

If you also accept Statistics, the Google Analytics data from your visit may be used in the same way. With Statistics but not Marketing, Google Analytics data is not used for personalized ads.

Data involved: identifiers stored in cookies and browser storage (such as _gcl_au and, if you arrive through an ad, the click identifier), browser or device identifiers, pages visited, interactions on the site (such as sending a request, identified only by an internal code) and technical access data that Google receives when the tag loads (browser, language, IP address). The site does not send Google your name, email, phone number, company or the message in our forms. If you are signed in to a Google account, Google may link this data to your account, according to that account’s ad settings.

Legal basis: consent (LGPD, art. 7, I). Without Marketing consent, the Google Ads tag does not load, no ad cookie is stored, the ad click ID does not go with your request or to Google Analytics, and your visit data is not used for personalized ads. Refusing does not stop you from using the site or sending forms.

Sharing: with Google, which processes this data under its own policy: how Google uses information from sites that use its services.

Retention: Google Ads cookies (_gcl_*) stay in your browser for up to 90 days. A browser stays on a remarketing list for up to 540 days from the last visit. Google may also set its own cookies on its domains (such as doubleclick.net and googleadservices.com), for periods it defines: how Google uses cookies.

How to withdraw consent: at any time, under “Cookie preferences” in the footer of any page (or the “Manage cookies” button above), by unticking Marketing. The tag stops loading and the site deletes the _gcl_* and _gac_* cookies stored on the site’s domain. The site cannot read or delete the cookies Google stores on its own domains: to delete them, use your browser settings or My Ad Center (below). Withdrawal applies from then on: an existing list membership ends within the period above. To review and turn off Google’s personalized ads on all sites, use Google My Ad Center (formerly adssettings.google.com).

Changes

The current version and date are shown at the top of this page.

• 9 November 2026: Google Ads remarketing added to the Marketing category (section “Marketing and remarketing (Google Ads)”). The banner asks for a new choice from people who had already chosen.
• 9 November 2026 (afternoon): PostHog added to the Statistics category (section “Statistics and session recording (PostHog)”), with click maps and session recording, without your name or what you type. The banner asks for a new choice from people who had already chosen.
• 9 November 2026 (evening): controller (Vieira Soluções em Moagem LTDA, CNPJ 43.673.852/0001-52) and data protection officer (Karolline Gargan) identified. Nothing changed in what we collect.