Privacy notice

Last updated · November 9, 2026

What reaches us, and what never does.

This site has no database, no login and no tracking of its own. Personal data reaches us only when you write to us or book a call. This notice explains what happens to it.

Data routes

Three routes. There are no others.

  1. Route 01

    Reading this site

    1. You
    2. Cloudflare
    3. Stops here
    What travels
    IP address, browser details and the page requested.
    Worth knowing
    Cloudflare needs this to deliver the page and block attacks. We run no server or visitor log of our own.
  2. Route 02

    Sending a brief

    1. You
    2. Your email app
    3. Google Workspace
    4. DILAGO
    What travels
    Your name, email address and whatever you write.
    Worth knowing
    The form transmits nothing by itself. It opens a draft in your email app, and nothing leaves until you press send.
  3. Route 03

    Booking a call

    1. You
    2. Cal.com
    3. Google Calendar and Meet
    4. DILAGO
    What travels
    Name, work email, company, preferred language and your note, plus your website, guests and how you found us if you add them.
    Worth knowing
    Booking happens on cal.com, in a new tab, under Cal.com’s own privacy policy and cookies.

Not connected to this site

  • Analytics
  • Advertising pixels
  • Tracking cookies
  • Visitor database
  • Data sales
In this notice
  1. Who is responsible
  2. What we use it for, and on what basis
  3. Who handles it for us
  4. Data leaving your country
  5. How long we keep it
  6. Cookies
  7. Your rights
  8. Changes to this notice

Who is responsible

The controller of your personal data is Juan Jose Lopez Martinez Ltda (CNPJ 67.034.974/0001-67), operating as DILAGO, with its registered address at Av. Brigadeiro Faria Lima, 1811, Conj. 115, Jardim Paulistano, São Paulo, SP, 01452-001, Brazil.

For anything about this notice or your data, write to contact@dilago.io. That address is also our data-protection channel.

This notice covers this website and first contact with us. Client work is governed by its own contract and confidentiality agreement.

What we use it for, and on what basis

Delivering and protecting the site
Connection data, handled by Cloudflare.Legal basis: legitimate interest (LGPD Art. 7, IX; GDPR Art. 6(1)(f)).
Answering your message
Your name, email address and what you tell us.Legal basis: steps you ask for before a contract (LGPD Art. 7, V; GDPR Art. 6(1)(b)), or legitimate interest for general enquiries.
Scheduling and holding the call
The details you enter when booking, and those of any guests you add.Legal basis: steps you ask for before a contract (LGPD Art. 7, V; GDPR Art. 6(1)(b)).
Knowing how people find us
Your answer to that optional question when you book.Legal basis: legitimate interest (LGPD Art. 7, IX; GDPR Art. 6(1)(f)).

You can read this site without giving us anything. Without a name and an email address, we can’t reply to you.

We don’t profile you or make automated decisions about you. Our services are for businesses and aren’t directed at anyone under 18.

Who handles it for us

We share personal data only with these providers, each for the job described, or when the law requires it. We don’t sell it or use it for advertising.

Cloudflare
Hosts and protects this site.United States and Cloudflare’s global network.Privacy policy ↗
Google
Business email, calendar and video calls (Google Workspace).United States and other countries.Privacy policy ↗
Cal.com
Booking page and its confirmations.United States.Privacy policy ↗

Data leaving your country

We operate from Brazil, and our providers process data in the United States and other countries, so your data may be handled outside your own.

These transfers are needed to carry out the steps you ask for, such as replying to you or holding a call, and they rely on the contractual safeguards our providers offer.

How long we keep it

Emails and bookings stay with us while we are in conversation and for as long as we need them to follow up. If no work comes of it, we delete them once they are no longer needed, or sooner if you ask.

If we work together, contract and billing records stay for the periods Brazilian tax and commercial law require. Connection data stays with Cloudflare under its own retention rules.

Cookies

dilago.io sets no cookies of its own and stores nothing in your browser, which is why there is no cookie banner.

If Cloudflare detects suspicious traffic, it may set a strictly necessary security cookie. Cal.com uses its own cookies on its own site.

Your rights

Under Brazil’s LGPD (Art. 18) and, where it applies to you, the GDPR, you can ask us to:

  • Confirm whether we hold your data and give you a copy
  • Correct anything inaccurate or out of date
  • Delete, anonymize or block it
  • Pass it to another provider
  • Stop or limit how we use it
  • Tell you who we have shared it with

Write to contact@dilago.io. It’s free, and we answer within 15 days.

You can also complain to Brazil’s data protection authority (ANPD) or, in the European Union, to your local supervisory authority.

Changes to this notice

If what this site does changes, for example if we add analytics, we update this page first and change the date at the top.