Mandatory whenever personal data is processed (website, bookings, Wi-Fi, loyalty programs). Small businesses (agentes de pequeno porte, Resolução CD/ANPD nº 2/2022) may skip a formal DPO but still need a contact channel and doubled response deadlines.
⚠️ This is a blank template, not legal advice: check the wording with a lawyer and adapt it to your jurisdiction and your case.
This template has no optional clauses: the text is the same for everyone.
Required fields not filled: 9. The PDF will have blank lines in their place to fill in by hand.
Click a field label in the text and type, or use the form. Empty fields become blank lines in the PDF.
PRIVACY POLICY (POLÍTICA DE PRIVACIDADE) — LGPD (LEI 13.709/2018)
Data controller (controlador): (CNPJ: ) Effective date:
1. DATA CONTROLLER AND TRANSPARENCY 1.1. is the data controller (controlador), as defined by the Lei Geral de Proteção de Dados Pessoais (LGPD, Lei 13.709/2018), Article 9 (dever de transparência), for the personal data described below.
2. PURPOSES AND LEGAL BASES 2.1. Purposes of processing (finalidades): 2.2. Legal basis (base legal):
3. SHARING 3.1.
4. DATA SUBJECT RIGHTS 4.1. — including the rights of confirmation, access, correction, anonymisation, portability, deletion and revocation of consent under Article 18 LGPD. 4.2. Contact channel (encarregado/canal de contato): . 4.3. Data subjects may also lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD).
5. ⚠️ SMALL-BUSINESS REGIME (AGENTE DE PEQUENO PORTE) 5.1. Status: . 5.2. Under Resolução CD/ANPD nº 2/2022, small businesses classified as agentes de pequeno porte may DISPENSE WITH a formally designated encarregado (DPO) — while still keeping a functioning contact channel — and benefit from DOUBLED statutory response deadlines to data-subject requests. A simplified processing register (registro simplificado das operações de tratamento) is nonetheless required under Article 37 LGPD.
This is a boilerplate template, not legal advice. Brazilian labour, data-protection, consumer- protection and sanitary law (the Consolidação das Leis do Trabalho — CLT, Decreto-Lei 5.452/1943, as reformed by Lei 13.467/2017; the eSocial digital reporting system, under which the admission event must be filed no later than the day before work starts and the CTPS Digital record is updated automatically; Lei 12.506/2011 on proportional notice periods; Lei 13.352/2016, the Lei do Salão Parceiro; the LGPD — Lei 13.709/2018 — supervised by the ANPD, including the simplified regime for agentes de pequeno porte under Resolução CD/ANPD nº 2/2022; the Código de Defesa do Consumidor — CDC, Lei 8.078/1990 — and Decreto 7.962/2013 for e-commerce; and ANVISA's RDC 216/2004 on food-service good practices, as supplemented by state/municipal vigilância sanitária rules) is highly procedural, tied to fixed statutory deadlines (e.g. eSocial admission BEFORE the first working day, a 3-calendar-day minimum notice for each intermittent-work shift, a 10-day TRCT settlement deadline, a 30-day advance vacation notice) and to significant penalties for missed deadlines or missing documentation. ⚠️ ADDITIONAL CONTEXT TO VERIFY WITH YOUR ADVISORS: (1) NR-1/PGR — psychosocial risk factors (fatores de risco psicossociais, Portaria MTE 1.419/2024) became subject to PUNITIVE fiscalização from 26 May 2026 — confirm your current Programa de Gerenciamento de Riscos (PGR) status (MEI is exempt; low-risk ME/EPP may qualify for a simplified declaration at pgr.trabalho.gov.br); (2) the "pejotização" question (STF Tema 1389) — whether an "autônomo"/"PJ" services arrangement may be reclassified as employment — remained UNRESOLVED by the Supreme Court (STF) as of mid-2026; any PJ/autônomo arrangement carries this litigation risk; (3) NFC-e/NF-e/CF-e-SAT/MFE/NFS-e fiscal documents are issued through your accountant's (contador) authorised system and are OUT OF SCOPE for this template; (4) almost every small business in this segment operates under Simples Nacional (MEI/ME/EPP) — a contador is a de facto mandatory partner for payroll, tax and eSocial compliance. This English text is a DRAFTING AID ONLY. It must be reviewed, translated into Portuguese where required for validity/ enforceability, and adapted by a Brazilian labour/commercial lawyer (advogado) and accountant (contador) — and checked against current guidance from the Ministério do Trabalho e Emprego (MTE), ANPD, ANVISA, Procon and local vigilância sanitária — before use.
Documents that are usually drawn up in the same process.
Article 49 CDC gives a 7-day right of withdrawal for distance/off-premises purchases (refunding delivery too). In-store "changed my mind" exchanges are not a legal requirement, but an announced polic…
Mandatory written form + ratification (homologação) before the trade union (or an MTE office), with two witnesses — otherwise the arrangement risks reclassification as an ordinary employment relation…
Mandatory WRITTEN manual for every food-service establishment, individually prepared per unit, accompanied by the 4 mandatory POPs. Must be available to staff and to sanitary inspectors (vigilância s…
0 of 9 fields are taken from the company, employee or counterparty record, the questionnaire can be dictated to the AI, and the finished document comes with a number, a PDF and an acknowledgement record.