# Privacy and cookies

> How Tog Lab handles the data of people who visit the site, contact us or apply for a job. Choose your region to see the rights and deadlines that apply to you.

URL: https://www.toglab.co/en/privacidade.html

[Português do Brasil](https://www.toglab.co/pt-br/privacidade.html.md) · [Português de Portugal](https://www.toglab.co/pt-pt/privacidade.html.md) · [Español](https://www.toglab.co/es/privacidade.html.md) · [Italiano](https://www.toglab.co/it/privacidade.html.md)

Version

2026.10

Effective from

October 20, 2026

Controller

Tog Lab, Dois Vizinhos, Brazil

## The rules for your region

The site applies the rules of the region you are browsing from. When we do not know your region, the most protective rule applies.

Cookies and measurement

Deadline to respond to your request

Data protection authority

Your rights

## What data we process and why

Only what each purpose requires, kept for as long as that purpose needs it.

ContextDataPurposeHow long

We do not sell personal data and we do not use visitor data for advertising.

## Cookie preferences

Necessary cookies are always on. Everything else turns on only with your permission, and you can change your mind at any time.

Cookies the site stores

## Request access, correction or deletion

You will receive an email to confirm the request. After that, the deadline for your region starts to run.

Data protection officer (LGPD)

Rafael Daron

Privacy contact

[privacy@toglab.co](mailto:privacy@toglab.co)

What you want to request

Name

Email

Tell us what you need

## More on this page

- Brazil — General Data Protection Law (LGPD, Law No. 13,709/2018) — Only with your permission. Until you choose, only what is necessary is on. — 15 days — National Data Protection Authority (ANPD) — Confirm whether we process your data and access it — Correct incomplete or outdated data — Request anonymization, blocking or deletion — Move your data to another provider — Know who we share it with — Withdraw consent at any time — We respond within 15 days from the confirmation of your request.
- European Union and Portugal — General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) — Only with your permission. Rejecting is as easy as accepting. — 1 month — In Portugal, the National Data Protection Commission (CNPD). In other countries, the national authority. — Access to your data — Restriction of processing — Objection, including to automated decisions — The 1-month period can be extended by 2 more months for complex requests, always with notice and a justification.
- Italy — GDPR and the Italian Codice in materia di protezione dei dati personali — Only with your permission. Closing the notice with the X counts as a rejection. — 1 month — Garante per la protezione dei dati personali — Access to your data — Restriction of processing — Objection, including to automated decisions — If you reject, we will not ask again for 6 months, unless the policy changes in a material way.
- United States — CCPA and CPRA in California, and state privacy laws — Measurement stays on until you opt out. If your browser sends the Global Privacy Control (GPC) signal, we honor it without asking. — 45 days — California Privacy Protection Agency and state attorneys general — Know what data we collect and access it — Request deletion — Correct data — Opt out of the sale or sharing of data — Limit the use of sensitive data — Not be discriminated against for exercising these rights — The 45-day period can be extended by 45 more days, with notice. Tog Lab does not sell or share personal data.
- United Arab Emirates — Federal Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) — Only with your permission. — 30 days — UAE Data Office — Access to your data — Restriction of and objection to processing — Deadlines follow the UAE federal data protection law. If your request involves another jurisdiction, we apply the most protective rule.
- Other countries — We apply the most protective of the rules we follow — Only with your permission. — 15 days — The data protection authority in your country — Access to your data — Objection to processing — When we cannot identify your region, we use the prior-permission model and the shortest deadline.

- Name, email, company and the message you wrote — To reply and prepare a proposal — 12 months after the last contact
- Pages viewed and where the visit came from, in aggregate — To learn which pages are useful — Aggregated data that does not identify you
- Résumé and contact details — To evaluate the application for current and future openings — 12 months
- Your cookie choice, the policy version and the date — To prove the choice you made — 5 years
- Name, email, country and the request — To handle and record the request — 5 years after it is closed

- Necessary — They store your language, region and cookie choice. The site does not work without them. — Tog Lab
- Audience measurement — Counts visits and pages without identifying you. — Plausible Analytics
- Google Analytics — Off today. If it is turned on in the future, only with your permission.

- tl_consent — Your cookie choice — 6 months in Italy, 12 months in other regions
- tl_consent_meta — Policy version and date of your choice — Same as above
- tl_locale — Chosen language — 12 months
- tl_market — Region chosen in the footer — 12 months