Brazil LGPD — Law nº 13.709/2018
Privacy Policy
Last updated: May 24, 2026
We at EditorialHub understand that your personal data must be handled with great care and security. For this reason, we have developed and implemented a Privacy and Data Protection Policy based on current legislation and the best practices adopted worldwide.
In this document you will find information about the types of data we collect and their purposes, how data is collected, how it is shared, international transfers, retention and security. We also describe the rights you have as a data subject and the means to exercise them whenever you wish.
1. Definitions
To make this document easier to read, below are some important definitions established in Article 5 of the Brazilian General Data Protection Law (Lei nº 13.709/2018 — LGPD):
Data Subject: you, the natural person to whom the personal data refers.
Personal Data: any information related or relatable to you.
Sensitive Data: data on health, biometrics or genetics, race and ethnicity, religious, philosophical or political beliefs, trade-union membership and sexual life.
Processing: any form of use and processing of personal data.
Controller: us, EditorialHub, a bilingual editorial platform dedicated to producing and distributing journalistic content in finance, politics and entertainment, responsible for the decisions regarding the processing of your data.
Data Subject: you, the natural person to whom the personal data refers.
Personal Data: any information related or relatable to you.
Sensitive Data: data on health, biometrics or genetics, race and ethnicity, religious, philosophical or political beliefs, trade-union membership and sexual life.
Processing: any form of use and processing of personal data.
Controller: us, EditorialHub, a bilingual editorial platform dedicated to producing and distributing journalistic content in finance, politics and entertainment, responsible for the decisions regarding the processing of your data.
2. Types of personal information collected and how we use it
We only collect data that is strictly necessary for the purposes declared in this Policy. The categories of data we may collect include:
a) Data you provide voluntarily
• Email address — when you subscribe to our newsletter or fill in contact forms.
• Name and email — when you apply for a position on our team or take part in editorial surveys, polls and promotions.
• Comments and editorial contributions — when you interact with our articles or take part in journalistic initiatives.
b) Data collected automatically when you access our Services
The data collected from your access to our Services includes: your IP address; information about your device (such as unit identifier, advertising identifier, name and type of operating system); information about your internet connection; type of browser; and the pages and content you access on our Services. Whenever possible, this data is used in an anonymised and aggregated form.
c) Data obtained from third parties
Some of your data may be obtained by us from publicly available sources, service providers and editorial partners, always in accordance with applicable law.
d) Cookies and similar technologies
Detailed in Section 4 of this Policy.
a) Data you provide voluntarily
• Email address — when you subscribe to our newsletter or fill in contact forms.
• Name and email — when you apply for a position on our team or take part in editorial surveys, polls and promotions.
• Comments and editorial contributions — when you interact with our articles or take part in journalistic initiatives.
b) Data collected automatically when you access our Services
The data collected from your access to our Services includes: your IP address; information about your device (such as unit identifier, advertising identifier, name and type of operating system); information about your internet connection; type of browser; and the pages and content you access on our Services. Whenever possible, this data is used in an anonymised and aggregated form.
c) Data obtained from third parties
Some of your data may be obtained by us from publicly available sources, service providers and editorial partners, always in accordance with applicable law.
d) Cookies and similar technologies
Detailed in Section 4 of this Policy.
3. How is this information collected?
We collect your information when you:
• Voluntarily fill in the newsletter subscription form, contact forms or application forms available on our site;
• Access the official EditorialHub website and/or our official communication channels;
• Take part in any survey, vote or poll promoted by EditorialHub;
• Take part in any article or editorial contribution at EditorialHub;
• Browse our pages through cookies and similar technologies.
The accuracy of the information you provide is your responsibility, and the correctness of this data is essential so that EditorialHub can process it in a manner appropriate to your interests. It is through this data that we contact you and deliver our content and services.
• Voluntarily fill in the newsletter subscription form, contact forms or application forms available on our site;
• Access the official EditorialHub website and/or our official communication channels;
• Take part in any survey, vote or poll promoted by EditorialHub;
• Take part in any article or editorial contribution at EditorialHub;
• Browse our pages through cookies and similar technologies.
The accuracy of the information you provide is your responsibility, and the correctness of this data is essential so that EditorialHub can process it in a manner appropriate to your interests. It is through this data that we contact you and deliver our content and services.
4. Use of cookies
Cookies are small text files sent to and stored on your computer or device. They serve to recognise, track and store your browsing activity as a user on the Internet.
The use of cookies to track and store information allows EditorialHub to offer a more personalised service, in line with the characteristics and interests of our readers, enhancing your editorial experience.
The cookies we use may be classified in several ways:
a) By duration
• Session: temporary cookies that remain until the page or browser is closed. They may be used to analyse traffic patterns and provide a better reading experience and contextualised content.
• Persistent: remain even after the browser is closed. They may be used, for example, to remember your language and theme preferences across sessions.
b) By ownership
• First-party: owned by EditorialHub, which has full control over them.
• Third-party: owned by third parties but placed on your device through the websites, applications and services offered by EditorialHub.
c) By purpose
• Strictly necessary: indispensable for the site to function, enabling basic features such as navigation and access to secure areas. The site cannot work properly without them. They include session management and CSRF security tokens. Legal basis: legitimate interest.
• Preferences: allow the site to remember information that changes its behaviour or appearance, such as the language you chose or the theme (light/dark).
• Statistics: help us understand how visitors interact with the site by collecting and reporting information anonymously and in aggregate form.
• Marketing: used to track visitors and display relevant advertising for the individual reader, more valuable for publishers and third-party advertisers.
• Others: cookies not yet classified, which we are categorising together with the respective providers.
Most browsers are set to automatically accept cookies. You can, however, change the settings to block cookies or alert you when a cookie is being sent to your device. Blocking all cookies may affect your experience, as we will not be able to identify your preferences or recommend relevant content.
You can manage or withdraw your consent at any time by clicking "Manage cookies" in the site footer. Also consult your browser's instructions to learn more about adjusting your settings across all devices you use.
EditorialHub may use analytics tools such as Google Analytics, subject to Google's policies available at:
• https://policies.google.com/privacy
• https://www.google.com/intl/en/policies/privacy/partners/
Any use made by Google or partners of the data collected through these tools shall be the sole and exclusive responsibility of such partners.
The use of cookies to track and store information allows EditorialHub to offer a more personalised service, in line with the characteristics and interests of our readers, enhancing your editorial experience.
The cookies we use may be classified in several ways:
a) By duration
• Session: temporary cookies that remain until the page or browser is closed. They may be used to analyse traffic patterns and provide a better reading experience and contextualised content.
• Persistent: remain even after the browser is closed. They may be used, for example, to remember your language and theme preferences across sessions.
b) By ownership
• First-party: owned by EditorialHub, which has full control over them.
• Third-party: owned by third parties but placed on your device through the websites, applications and services offered by EditorialHub.
c) By purpose
• Strictly necessary: indispensable for the site to function, enabling basic features such as navigation and access to secure areas. The site cannot work properly without them. They include session management and CSRF security tokens. Legal basis: legitimate interest.
• Preferences: allow the site to remember information that changes its behaviour or appearance, such as the language you chose or the theme (light/dark).
• Statistics: help us understand how visitors interact with the site by collecting and reporting information anonymously and in aggregate form.
• Marketing: used to track visitors and display relevant advertising for the individual reader, more valuable for publishers and third-party advertisers.
• Others: cookies not yet classified, which we are categorising together with the respective providers.
Most browsers are set to automatically accept cookies. You can, however, change the settings to block cookies or alert you when a cookie is being sent to your device. Blocking all cookies may affect your experience, as we will not be able to identify your preferences or recommend relevant content.
You can manage or withdraw your consent at any time by clicking "Manage cookies" in the site footer. Also consult your browser's instructions to learn more about adjusting your settings across all devices you use.
EditorialHub may use analytics tools such as Google Analytics, subject to Google's policies available at:
• https://policies.google.com/privacy
• https://www.google.com/intl/en/policies/privacy/partners/
Any use made by Google or partners of the data collected through these tools shall be the sole and exclusive responsibility of such partners.
5. Why is this information collected?
The information collected is used to ensure the quality of EditorialHub's services, with the following purposes:
• Identification, authentication and authorisation of users;
• Adequately responding to requests and questions and providing support to our readers;
• Keeping records up to date for the purposes of contact by email and other authorised means of communication;
• Improving the use and interactive experience while browsing the site and the services provided by EditorialHub;
• Producing statistics, studies, research, editorial planning and surveys relevant to the activities and behaviour of our readers;
• Promoting EditorialHub's content and that of its partners, and informing about news, features and other relevant information to maintain the relationship;
• Sending newsletters and emails you have authorised;
• Evaluating applications for open positions on our team;
• Managing risks and detecting, preventing and/or remedying fraud, abuse or other potentially illegal or prohibited activities, as well as violations of applicable policies or terms of use;
• Safeguarding EditorialHub regarding rights and obligations related to the use of its services.
Your data may also be necessary for us to comply with legal and regulatory determinations and measures, whether judicial or administrative. Where data is obtained from third parties, it will be used in accordance with the applicable law and the terms of this Policy.
Legal bases (LGPD):
• Art. 7, I — Consent: newsletter, analytics, preference and marketing cookies.
• Art. 7, V — Contract performance: recruitment of applicants.
• Art. 7, IX — Legitimate interest: platform security, anonymised audience analytics and fraud prevention.
• Art. 7, II — Compliance with a legal or regulatory obligation, where applicable.
• Identification, authentication and authorisation of users;
• Adequately responding to requests and questions and providing support to our readers;
• Keeping records up to date for the purposes of contact by email and other authorised means of communication;
• Improving the use and interactive experience while browsing the site and the services provided by EditorialHub;
• Producing statistics, studies, research, editorial planning and surveys relevant to the activities and behaviour of our readers;
• Promoting EditorialHub's content and that of its partners, and informing about news, features and other relevant information to maintain the relationship;
• Sending newsletters and emails you have authorised;
• Evaluating applications for open positions on our team;
• Managing risks and detecting, preventing and/or remedying fraud, abuse or other potentially illegal or prohibited activities, as well as violations of applicable policies or terms of use;
• Safeguarding EditorialHub regarding rights and obligations related to the use of its services.
Your data may also be necessary for us to comply with legal and regulatory determinations and measures, whether judicial or administrative. Where data is obtained from third parties, it will be used in accordance with the applicable law and the terms of this Policy.
Legal bases (LGPD):
• Art. 7, I — Consent: newsletter, analytics, preference and marketing cookies.
• Art. 7, V — Contract performance: recruitment of applicants.
• Art. 7, IX — Legitimate interest: platform security, anonymised audience analytics and fraud prevention.
• Art. 7, II — Compliance with a legal or regulatory obligation, where applicable.
6. Information sharing
We may share your data with third parties that follow our security and confidentiality standards. We do not sell, rent or trade your personal data.
Your information will only be disclosed in the following cases:
• For legal obligation, which may include requests or orders from police authorities, the Public Prosecutor's Office and judicial or administrative authorities;
• With infrastructure service providers — such as Supabase Inc. (United States), responsible for hosting our database, under appropriate contractual clauses (DPA/SCCs);
• With email and newsletter delivery providers, solely for the delivery of the content you subscribed to;
• With audience analytics providers, on an anonymised basis;
• With payment management platforms, where applicable to the execution of any contracts;
• With reader relationship and support companies.
EditorialHub carefully selects its suppliers and adopts the measures necessary to ensure that personal data is processed in line with the purpose of the sharing and with due regard for the security of your information.
The use, access and sharing of the database formed under this Policy will be carried out within the limits and purposes of EditorialHub's activities, and may be made available to business partners, suppliers, service providers, subcontractors, authorities or third parties in general, provided that the terms of this Policy, the applicable legislation or a judicial order are observed.
Your information will only be disclosed in the following cases:
• For legal obligation, which may include requests or orders from police authorities, the Public Prosecutor's Office and judicial or administrative authorities;
• With infrastructure service providers — such as Supabase Inc. (United States), responsible for hosting our database, under appropriate contractual clauses (DPA/SCCs);
• With email and newsletter delivery providers, solely for the delivery of the content you subscribed to;
• With audience analytics providers, on an anonymised basis;
• With payment management platforms, where applicable to the execution of any contracts;
• With reader relationship and support companies.
EditorialHub carefully selects its suppliers and adopts the measures necessary to ensure that personal data is processed in line with the purpose of the sharing and with due regard for the security of your information.
The use, access and sharing of the database formed under this Policy will be carried out within the limits and purposes of EditorialHub's activities, and may be made available to business partners, suppliers, service providers, subcontractors, authorities or third parties in general, provided that the terms of this Policy, the applicable legislation or a judicial order are observed.
7. International data transfers
Because some platforms and redundancy systems have servers in other countries, we carry out international transfers of data. In these cases, we ensure that service providers adopt security measures at least equivalent to those required in Brazil, through Standard Contractual Clauses (SCCs) and Data Processing Agreements (DPAs), in accordance with Article 33 of the LGPD.
8. Protection and storage
EditorialHub implements physical, technical and administrative security measures designed to protect your personal data against loss, misuse, alteration, destruction or damage. The measures adopted include: encryption in transit (TLS 1.2+), role-based access control (RBAC), Row Level Security (RLS) at the database layer and continuous incident monitoring.
We also implement access controls to ensure that personal data is made available only to authorised people who need it to perform their tasks.
We make every effort to ensure that the level of security is appropriate to the risks of processing personal data, but, unfortunately, we cannot guarantee absolute security. External factors beyond our control — such as hardware failures or the unauthorised use of credentials by third parties — may compromise the security of your data.
For this reason, if you identify or become aware of any factor that compromises the security of your data in your relationship with EditorialHub, please contact us through the channels indicated at the end of this document. In the event of an incident that may create relevant risk or harm, we will notify the Brazilian National Data Protection Authority (ANPD) and affected data subjects as provided in Article 48 of the LGPD.
We also implement access controls to ensure that personal data is made available only to authorised people who need it to perform their tasks.
We make every effort to ensure that the level of security is appropriate to the risks of processing personal data, but, unfortunately, we cannot guarantee absolute security. External factors beyond our control — such as hardware failures or the unauthorised use of credentials by third parties — may compromise the security of your data.
For this reason, if you identify or become aware of any factor that compromises the security of your data in your relationship with EditorialHub, please contact us through the channels indicated at the end of this document. In the event of an incident that may create relevant risk or harm, we will notify the Brazilian National Data Protection Authority (ANPD) and affected data subjects as provided in Article 48 of the LGPD.
9. Data retention period
EditorialHub undertakes not to keep user data for a period longer than strictly necessary for the intended purposes. We retain your personal data for as long as necessary to fulfil the purpose for which it was collected. In certain cases, legal or regulatory requirements determine that we retain specific data for a defined period.
By way of example, we observe the following periods:
• Newsletter data: while you remain subscribed, plus 30 days after cancellation.
• Application data: up to 2 years after the recruitment process closes.
• Anonymised analytics data: up to 24 months.
• Cookie consent records: up to 5 years (audit requirement).
• Security data: up to 6 months.
Even after the cessation of the service, EditorialHub may retain the data for up to 3 (three) years for civil-liability purposes or up to 5 (five) years for any collection of unpaid contractual credits, under Article 206 of the Brazilian Civil Code.
By way of example, we observe the following periods:
• Newsletter data: while you remain subscribed, plus 30 days after cancellation.
• Application data: up to 2 years after the recruitment process closes.
• Anonymised analytics data: up to 24 months.
• Cookie consent records: up to 5 years (audit requirement).
• Security data: up to 6 months.
Even after the cessation of the service, EditorialHub may retain the data for up to 3 (three) years for civil-liability purposes or up to 5 (five) years for any collection of unpaid contractual credits, under Article 206 of the Brazilian Civil Code.
10. What are your rights?
EditorialHub is committed to ensuring the protection of your rights under applicable laws, which may be exercised by sending a request to our Data Protection Officer (DPO) at [email protected].
Under Article 18 of the LGPD, your rights as a data subject are:
• Confirmation of the existence of processing and access to the data;
• Correction of incomplete, inaccurate or out-of-date data;
• Anonymisation, blocking or deletion of unnecessary, excessive or unlawfully processed data;
• Data portability to another service or product provider;
• Deletion of personal data processed on the basis of consent;
• Information about the public and private entities with which the controller has shared the data;
• Information about the possibility of not providing consent and the consequences of refusal;
• Withdrawal of consent at any time, free of charge;
• Review of decisions taken solely on the basis of automated processing.
You may not prevent the processing of personal data we carry out under contract performance or to comply with a legal obligation, as such data is essential to the provision of the contracted service and will therefore be processed by us for as long as the obligation persists.
The data subject acknowledges that, if you withdraw consent previously given or object to a specific processing carried out by us, we may not be able to provide some services or address specific requests. We will respond to your request within 15 (fifteen) business days.
Under Article 18 of the LGPD, your rights as a data subject are:
• Confirmation of the existence of processing and access to the data;
• Correction of incomplete, inaccurate or out-of-date data;
• Anonymisation, blocking or deletion of unnecessary, excessive or unlawfully processed data;
• Data portability to another service or product provider;
• Deletion of personal data processed on the basis of consent;
• Information about the public and private entities with which the controller has shared the data;
• Information about the possibility of not providing consent and the consequences of refusal;
• Withdrawal of consent at any time, free of charge;
• Review of decisions taken solely on the basis of automated processing.
You may not prevent the processing of personal data we carry out under contract performance or to comply with a legal obligation, as such data is essential to the provision of the contracted service and will therefore be processed by us for as long as the obligation persists.
The data subject acknowledges that, if you withdraw consent previously given or object to a specific processing carried out by us, we may not be able to provide some services or address specific requests. We will respond to your request within 15 (fifteen) business days.
11. Scope of this policy
This policy applies to all data processed by EditorialHub. Once you leave our domain or are redirected to a third-party application or website, you will no longer be governed by this Privacy Policy.
The user acknowledges that this Policy applies solely to EditorialHub and does not cover data collected and/or processed by third-party websites or external sources accessed through links displayed on our site. We recommend reading the privacy policies of any third-party website you may access.
Our site is not directed at persons under 18 years of age. We do not intentionally collect data from children or adolescents. If you become aware that we have collected data from a minor without guardian consent, please contact us immediately so the data can be deleted.
The user acknowledges that this Policy applies solely to EditorialHub and does not cover data collected and/or processed by third-party websites or external sources accessed through links displayed on our site. We recommend reading the privacy policies of any third-party website you may access.
Our site is not directed at persons under 18 years of age. We do not intentionally collect data from children or adolescents. If you become aware that we have collected data from a minor without guardian consent, please contact us immediately so the data can be deleted.
12. Changes to this Privacy Policy
This Privacy Policy will be reviewed periodically, but we will not make any changes that remove or reduce the rights of the user without prior notice. The most up-to-date version of the Privacy Policy will always be available through the EditorialHub website.
Any updates will become effective on the date they are published, and material changes will be communicated by email to newsletter subscribers. Any questions about this Privacy Policy may be addressed by email to [email protected].
Any updates will become effective on the date they are published, and material changes will be communicated by email to newsletter subscribers. Any questions about this Privacy Policy may be addressed by email to [email protected].
13. Contact and data subject support channel
EditorialHub — Data Protection Officer (DPO)
Email: [email protected]
Response time: up to 15 business days
You may also lodge a complaint with the Brazilian National Data Protection Authority (ANPD) at gov.br/anpd.
Email: [email protected]
Response time: up to 15 business days
You may also lodge a complaint with the Brazilian National Data Protection Authority (ANPD) at gov.br/anpd.
This policy complies with Brazilian Law nº 13.709/2018 (LGPD) and the guidelines of the Brazilian National Data Protection Authority (ANPD).