Vidigal Neto Advogados undertakes, under Brazilian Federal Law No. 13,709 of August 14, 2018 (“LGPD”), and regulations in force, to respect your privacy and protect your personal data.

This privacy policy (“Policy”) explains, clearly and objectively, how we process the personal data of all individuals who interact with us — including clients, client representatives, suppliers and service providers, job applicants, parties to proceedings, correspondents and visitors to our website (“Data Subject”).

For the purposes of this Policy, Vidigal Neto Advogados acts as the controller of personal data, being responsible for decisions relating to its processing, under the terms of the LGPD.

1. Personal data processed

We process only the personal data necessary to interact with you and provide our services. Depending on your type of relationship with us, we may process:

• identification and contact data: name, e-mail, telephone, address, RG (ID card), CPF (individual taxpayer ID), CNPJ (individual entrepreneur/MEI), nationality, marital status and profession;
• professional data: company, position and education;
• financial data: bank details and billing and payment information;
• résumé: academic and professional data provided by job applicants;
• data contained in proceedings and documents: information appearing in judicial, administrative or arbitration proceedings and in documents to which we have access in the practice of law; and
• browsing data: IP address, date and time of access and data collected through cookies when you use our website.

We collect this data directly from you, from third parties related to you (for example, the company you represent) or from public sources.

2. Purposes of processing

We use your personal data for the following purposes:

• providing legal services (litigation and advisory), including drafting and reviewing contracts and documents, acting in judicial, administrative and arbitration proceedings, due diligence and preparing legal opinions;
• formalizing and managing the contractual relationship, issuing invoices and carrying out collections and payments;
• conducting selection processes and evaluating job applicants;
• sending notices, reminders and information related to our services;
• sending institutional communications and informational materials (such as newsletters and invitations to events), with the option to unsubscribe at any time ensured;
• operating and improving our website; and
• complying with legal and regulatory obligations and regularly exercising our rights.

We always process data based on one of the legal bases provided for in the LGPD, such as the performance of a contract, compliance with a legal or regulatory obligation, the regular exercise of rights, legitimate interest or your consent, where applicable.

3. Sharing of personal data

We may share your personal data, to the extent necessary for the purposes above, with:

• service providers that support us, such as technology providers, cloud hosting and management systems, accountants, auditors, experts, legal opinion providers, translators and correspondent or partner law firms, in Brazil and abroad;
• bodies of the Judiciary, authorities, regulatory agencies and other public entities, in the exercise of their functions and for compliance with legal obligations;
• third parties involved in any corporate transactions (such as restructurings, mergers and acquisitions); and
• third parties, when necessary for the regular exercise of our rights or for fraud prevention and security.

When engaging the services or support of third parties and in accordance with the scope of each engagement, we seek to assess whether these providers undertake to process personal data in accordance with the applicable legislation and adopt adequate security and confidentiality measures.

4. International data transfer

Some of the service providers we use may be located, or may store data, outside Brazil. In such cases, we adopt the measures required by the LGPD to ensure that your data remains protected, including entering into specific contractual clauses with the recipients.

5. Data retention period

We retain your personal data only for as long as necessary to fulfill the purposes described in this Policy, observing the legal retention periods and the need for the regular exercise of our rights.

6. Main rights of the data subject

Under the terms of the LGPD, you have the right to:

• confirm the existence of processing of your data;
• access your data;
• correct incomplete, inaccurate or outdated data;
• request the anonymization, blocking or deletion of unnecessary or excessive data, or data processed in non-compliance with the LGPD;
• request the portability of your data to another service or product provider;
• request the deletion of data processed based on your consent, except in the cases of retention provided for by law;
• obtain information about the entities with which we share your data;
• obtain information about the possibility of not providing consent and the consequences of refusal;
• withdraw consent, when processing is based on it;
• object to processing carried out in non-compliance with the LGPD and petition the National Data Protection Authority (ANPD).

To exercise these rights, contact our Data Protection Officer through the channels indicated in item 10 below. We may request additional information to confirm your identity. In some cases, service may be limited in order to preserve professional secrets and the confidentiality inherent to the practice of law, or to comply with legal obligations.

7. Information security

We adopt appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration and any form of inappropriate or unlawful processing. Although no system is completely secure, we are committed to adopting good practices to mitigate risks and to promptly taking the appropriate measures in the event of an incident.

8. Cookies

Our website uses cookies to improve your browsing experience. Cookies are small files stored on your device that may collect information such as the IP address, browsing data and access preferences, helping us to make our website more efficient.

On your first visit, you are informed about the use of cookies by means of a notice (banner). You can manage or disable cookies at any time in your browser settings, aware that this may affect the functioning of our website.

9. Changes to this Policy

We may update this Policy at any time. The version in force will always be published on this page, indicating the date of the last update. We recommend that you consult it periodically.

10. Data Protection Officer and contact

If you have any questions, requests or complaints about this Policy or the processing of your personal data, contact our data protection officer (“Data Protection Officer”):

Data Protection Officer: Valquíria Patrícia Garrido
E-mail: dpo@vidigalneto.com.br
Address: Av. Brigadeiro Faria Lima, 2055, 5th floor, Ed. San Paolo, CEP 01452-001, São Paulo SP

Last updated on June 9, 2026.