Data Protection Policy

This policy applies to all users of our services, including website visitors, clients who purchase Microsoft licenses or schedule consultations. By using our services, you agree to the practices described here. We update this policy periodically; the current version is dated August 11, 2025.

We collect data only when necessary to provide our services. The types of information include:

• Personal Data: Name, email, phone and billing address when purchasing licenses on the e-commerce (2bc.com.br/datasirius) or scheduling consultations via Microsoft Bookings.
• Scheduling Data: Times and details of consultations via Microsoft Bookings, integrated with Microsoft 365.

We do not collect sensitive data (e.g., health, racial origin) without explicit consent, nor do we track browsing beyond what is necessary for analysis via Microsoft Clarity and Azure Application Insights.

We use your data to:

• Process Microsoft license purchases and provide consulting services in Azure, security and IT governance.
• Improve our services by analyzing usage patterns to optimize infrastructure and security.
• Comply with legal obligations, such as tax reporting or LGPD compliance.

We share data only when necessary:

• With Microsoft partners for licensing and support, sharing only data necessary for product activation (name, email, license number), with legal basis in the service agreement.
• With secure payment processors for e-commerce transactions, as needed to fulfill the contract.
• With legal authorities if required by law, under the legal basis of legal obligation.

We do not sell or rent your data to third parties for marketing purposes.

When using integrated Microsoft services (e.g., Microsoft Bookings, Azure, Microsoft 365), data processing may be carried out directly by Microsoft, according to its own Privacy Policy. Datasirius® TI is not responsible for such processing, acting as a processor in relation to these services.

Security is our priority. In Datasirius® TI services, we use:

• Encryption (TLS/SSL) to protect data in transit.
• Microsoft tools such as Defender for Endpoint and Microsoft Defender for Cloud for 24/7 monitoring in managed environments.
• Automatic backups and access controls to prevent leaks.
• Compliance with international standards such as ISO 27001, LGPD and GDPR, with periodic external audits.

Despite this, no system is infallible; we will notify you in case of a data incident, in accordance with the LGPD.

We use Microsoft Clarity and Azure Application Insights to analyze behavior on the website and improve the user experience. These tools may use browser identifiers (such as cookies or local storage) to track data such as clicks and sessions. We do not use essential cookies beyond this. You can manage these settings in your browser options.

Data processing is based on:

You can revoke consent or object to processing by emailing contato@datasirius.com.br.

In accordance with the LGPD (and the GDPR, for clients in the European Union), you have the right to:

• Access, correction or deletion of data.
• Revocation of consent.
• Data portability.
• Objection to processing.

To exercise these rights, send an email to contato@datasirius.com.br. We will respond within 15 days.

We are transparent about our practices. As Microsoft partners, we adhere to their privacy guidelines. We do not collect data from minors without guardian consent. For international transfers (e.g., Azure servers outside Brazil), we use standard contractual clauses for protection.

We will notify significant changes by email or on the website. Continuing to use our services after changes implies acceptance.

Datasirius Tecnologia Ltda — Company ID (CNPJ) 05.575.437/0001-77. Headquartered in Cuiabá, Mato Grosso, Brazil.

Data Protection Officer (DPO): contato@datasirius.com.br

For questions:

Thank you for trusting Datasirius® TI. Your privacy is essential to us!