Privacy Notice for Brazil (LGPD)

This Privacy Notice supplements the information contained in the Privacy Policy of Metric Might and applies solely to individuals who reside in Brazil. We adopt this statement to comply with the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados Pessoais – Law No. 13,709/2018 or “LGPD”).

Under the LGPD, we must have a valid legal basis for each processing activity. We process your personal data based on the following legal bases:

  • Contractual Execution: To fulfill our obligations under our Terms of Service (e.g., providing the service, billing).
  • Legitimate Interest: For our business purposes, such as direct marketing, improving our products, and managing customer relationships, provided these interests are not overridden by your fundamental rights.
  • Legal Obligation: To comply with applicable accounting, tax, and legal retention obligations.
  • Consent: When you actively agree to specific processing, such as non-essential cookies, recording of sales calls, or processing of health data (e.g., allergies for events).

2. Your Rights under the LGPD

As a data subject in Brazil, Article 18 of the LGPD grants you specific rights regarding your personal data. At any time, and upon request, you have the right to obtain:

  1. Confirmation of the existence of processing of your personal data.
  2. Access to your personal data.
  3. Correction of incomplete, inaccurate, or out-of-date data.
  4. Anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in noncompliance with the provisions of the LGPD.
  5. Portability of your data to another service or product provider, subject to commercial and industrial secrecy.
  6. Deletion of personal data processed with your consent (except in scenarios where the law permits data retention).
  7. Information about public and private entities with which we have shared your data.
  8. Information about the possibility of denying consent and the consequences of such denial.
  9. Revocation of your consent at any time.

3. International Data Transfers

Metric Might is based in the United Kingdom. Personal data collected in Brazil may be transferred to and processed in the UK, the European Union, or other regions where our sub-processors operate. We ensure that international data transfers comply with the requirements of the LGPD, utilizing appropriate safeguards such as Standard Contractual Clauses or ensuring the destination country provides an adequate degree of data protection as evaluated by the Brazilian authority.

4. How to Exercise Your Rights

To exercise any of your rights under the LGPD, please contact our Data Protection team at privacy@metricmight.com. We will respond to your requests within the timeframes stipulated by the LGPD and the Brazilian National Data Protection Authority (ANPD).

If you believe that your personal data has been processed in violation of the LGPD, you also have the right to petition the Autoridade Nacional de Proteção de Dados (ANPD).

5. Contact Us

If you have questions about this supplementary notice or the privacy practices of Metric Might, please contact us at privacy@metricmight.com.