Legal

Privacy Policy

Last updated: July 2026

The short version

This site exists to publish our catalog and sell our reports. We collect only what a purchase requires, we use no third-party analytics, advertising pixels or tracking scripts, and we never sell personal data.

What we collect and why

• Order data — when you order a report by e-mail, we collect your organization's name and billing address, VAT/tax ID, and the buyer's name and e-mail address, to issue the invoice and deliver the file. Payment is made by bank wire transfer between your bank and ours; we never see or store card details. We keep the order, invoice and payment-confirmation details as our record of sale (including for Brazilian tax and export-documentation purposes).
• Delivery emails — your email address is used to send the download link for your purchase, notices about corrected files, and — only if you asked — notifications about new editions.
• Technical logs — our hosting provider (Cloudflare) processes IP addresses and request logs to serve and secure the site, as any web host does.

What we do not do

No analytics trackers, no advertising pixels, no social-media embeds, no marketing cookies. This site sets no cookies at all — orders are placed by e-mail, not through an on-site checkout.

Sharing

Order data is shared only with the processors needed to run the operation: Cloudflare (hosting and file delivery), the banks processing the wire transfer, and our e-mail provider (order correspondence and delivery e-mails). Each acts under its own contractual data-protection obligations. We disclose data beyond that only if legally required.

Retention

Records of sale are retained for as long as Brazilian tax and commercial law requires. Notification-list emails are kept until you ask to be removed.

Your rights

Carmelo Research LTDA is the data controller, subject to the Brazilian Lei Geral de Proteção de Dados (LGPD, Law 13.709/2018). You may request access, correction or deletion of your personal data, and object to or restrict processing, by writing to research@carmeloresearch.com.br. If you are in a jurisdiction with its own data-protection regime (e.g. GDPR), we honor equivalent requests.