LGPD · LAW NO. 13,709/2018
Privacy Policy
This policy explains how VaaTech handles personal data on vaatech.com.br and in CRM VAA PRO, under Brazil’s General Data Protection Law (LGPD – Law No. 13,709 of August 14, 2018). The Portuguese version is the official one.
Last updated: October 11, 2026
1. Who we are
VaaTech is a brand of HighCode Soluções Inteligentes Ltda., Brazilian company registration (CNPJ) No. 17.004.688/0001-80. HighCode owns and is responsible for vaatech.com.br and for CRM VAA PRO, a management system for Hawaiian and Polynesian outrigger canoe schools.
Data Protection Officer (DPO): Jorge Luiz Ferreira Dias. For any privacy or personal data matter, email jorgeluizfdias72@gmail.com.
2. Data handled on this site
- No sign-up and no forms: the site does not ask for your name, email or any other data to browse it.
- Google Ads cookies: the site has the Google tag (gtag.js) for our Google Ads account, which is only turned on after you click “Accept” on the privacy notice. Without your acceptance, nothing is sent to Google. Once you accept, the tag stores cookies in your browser and sends Google data about the visit, such as pages viewed, IP address, browser and whether you came from one of our ads. We use this only to measure the results of our ads; we do not identify you by name. See section 3 for more.
- Record of your acceptance: when you click “Accept” on the privacy notice, your browser stores that choice (local storage) so the notice does not show again and the Google Ads tag is turned on. Nothing is sent to us. To withdraw your acceptance, clear the data for vaatech.com.br in your browser settings: the notice shows again and the tag is no longer turned on.
- Access logs: like any website, the hosting server records technical access data such as IP address, date, time and browser, for security and operation. These logs are kept by the hosting company, under its own rules and applicable law.
3. Third-party services
Some buttons take you to services run by other companies, which handle the data you provide there under their own policies:
- Google Ads: Google handles the tag data under its own privacy policy (policies.google.com/privacy) and may use it to show ads. You can limit this at myadcenter.google.com or delete and block cookies in your browser settings.
- Mercado Pago: when a school signs up for the PRO plan, billing may be handled by Mercado Pago. We receive the name, email and payment status from it, used to handle billing.
- WhatsApp: joining the “CRM VAA PRO - GESTÃO” group. In the group, your name and number are visible to the other members.
- Email: the demo and contact buttons open your email app. We only use what you send us to reply and schedule the demo.
4. CRM VAA PRO
In CRM VAA PRO, each school registers data about its prospects, students, guardians, coaches and staff. In this relationship:
- the school is the controller of that data: it decides what it records and why, and answers to its students;
- HighCode (VaaTech) is the processor: it processes the data only to provide the contracted service, following the school’s instructions, and never sells it or uses it for other purposes.
Security measures: servers in Brazil, encrypted connections (HTTPS), daily backups, role-based access and two-step verification. Sensitive data, such as the health declaration, is visible only to those who need it.
5. Why we use data and on what legal basis
- Providing the contracted service and billing: performance of a contract (art. 7, V).
- Site and system security and fraud prevention: legitimate interest (art. 7, IX) and legal obligation (art. 7, II).
- Measuring the results of our ads (Google Ads cookies): consent, given by clicking “Accept” (art. 7, I).
- Replying to contacts and scheduling demos: preliminary steps to a contract, at the data subject’s request (art. 7, V).
6. How long we keep data
We keep data as long as needed for these purposes or as required by law. When a contract ends, the school can ask by email for a copy or the deletion of its data in the CRM; we agree with the school on how and when the request is fulfilled.
7. Your rights
Under art. 18 of the LGPD, you may request at any time:
- confirmation that we process your data and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary data or data processed unlawfully;
- portability of your data to another provider;
- information about whom we share your data with;
- withdrawal of consent, where processing depends on it.
To exercise these rights, email jorgeluizfdias72@gmail.com. If you are a student at a school that uses CRM VAA PRO, contact your school first, as it is the controller of your data; we will help the school fulfill your request. You may also file a complaint with Brazil’s National Data Protection Authority (ANPD).
8. Changes to this policy
We may update this policy to reflect changes to the site, the CRM or the law. The date of the last update is always shown at the top of this page.