Updated July 27, 2026
1. Privacy Statement
CORPSERVICES PARTICIPAÇÕES E SERVIÇOS LTDA. (“CORPSERVICES GROUP”) understands how important it is to know and feel secure about the use of the personal data it holds. Therefore, we are committed to clarifying and explaining our Privacy Notice.
We recognize the need for protection and proper management of personal information collected on our website, as well as information shared with us by our customers. This Privacy Notice will help you understand what types of information we may collect, how that information may be used, with whom the information may be shared, and what rights data subjects have regarding the protection of their personal data.
CORPSERVICES GROUP is comprised of the following companies: ASSESSOR-BORDIN CONSULTORES EMPRESARIAIS LTDA. and ABORDIN BPO PROCESSAMENTO DE DADOS LTDA (“ABORDIN”) – www.abordin.com.br2G CONSULTORIA TRIBUTÁRIA LTDA. (“QUALITY TAX”) – www.qualitytax.com.br; 3L BUSINESS CONSULTING LTDA – ME (“ASAP DOCUMENTS”) – www.asapcorp.com.br; IGNIS CONTÁBIL S/S (“IGNIS CONTÁBIL”) – www.igniscontabil.com.br; INFOBANC SISTEMAS LTDA (“INFOBANC”) – https://infobanc.com.br/sobre/; GAAP CONSULTORIA EMPRESARIAL LTDA (“GAAP”), GAAP BPO PROCESSAMENTO DE DADOS LTDA (“GAAP BPO”) and EQUITA ASSESSORIA CONTABIL LTDA (“EQUITA”) – https://gaap.com.br/; CENTRAL DE CUSTODIA LTDA (“CENTRAL DE CUSTODIA”) – https://centraldecustodia.com.br/; B2R ___ (“B2R CORP”) – https://b2rcapital.com.br and JF Granja ___ (“JF Granja”) – https://jfgranja.com.br.
For more information on the collection, use, and storage of personal data by each of the Group’s companies, please consult the Privacy Notices available on their respective websites.
2. What personal information do we collect?
The personal information we obtain may be collected in the following ways:
Site: Personal information is collected when a user interacts with our website through a contact form. This personal information includes full name, corporate email, and phone number. Collection of basic data is only necessary when the user requests a response. All personal information is collected fairly and non-invasively, with your voluntary consent. The personal information collected is accessible only to those who need to know it to perform relevant activities, respecting the purpose for which it was provided.
Customer service channels: The user may contact us by phone, email, and in person at our offices. Personal data is collected for the purpose of identifying the user, as well as to fulfill their request. This may include, among other things, full name, corporate email, and phone number. In addition to these, we collect any personal data that is voluntarily provided by the user.
Cookies: Personal data may be collected through cookies. For more information, please see our Cookie Policy.
Data related to the provision of services: To enable the performance of our activities, “CORPSERVICES GROUP” may collect personal information and data, including sensitive personal data, in order to ensure the proper provision of its services and in compliance with legal and contractual obligations. In general, the personal data processed by the Group’s companies includes, among others: Name, ID, CPF (Brazilian tax identification number), personal telephone number, personal email, business address, business telephone number, corporate email, job title, bank account and payment details, social media registration data, photos, images, videos, audio recordings, criminal records, bank statements, income tax information, accounting, tax, corporate and management documents.
Considering the diversity of services provided by the Group’s companies, the specific personal data processed may vary according to the type of service contracted by client companies, as detailed below:
- Accounting, Tax and Corporate Law: Name, ID number, CPF (Brazilian tax identification number), address, phone number, email, bank details, bank statements, income tax information, and accounting, tax, corporate, and management documents;
- Personnel Department, Payroll and Human Resources: Name, ID, CPF (Brazilian tax ID), PIS (Brazilian social security number), CTPS (Brazilian work and social security card), dependent information, bank details for salary and benefits payments, position, hiring and termination dates;
- Tax Consulting: Name, ID number, CPF (Brazilian tax identification number), address, phone number, email address, and tax and fiscal documents related to the consulting processes;
- Paralegal, Corporate Law, Certificates and Legal Representation: Name, identification documents (ID/CPF), telephone number, email address, and information voluntarily provided for issuing certificates, conducting corporate acts, and legal representation before public bodies;
- Financial BPO: Bank and payment details, as well as information related to accounts payable, accounts receivable, and invoices involving individuals;
- Document Custody and Independent Verification of Reverse Logistics for Packaging: Email and password for accessing the platform, as well as registration data of representatives of entities and operators of reverse logistics systems for packaging, necessary for the reading, custody and independent verification of invoices and other documents that these entities and operators report to the Custody Center;
- Consulting, Expertise and Arbitration: Name, CPF (Brazilian tax identification number), professional details, and documents related to the subject of the consulting, expert opinion, or arbitration proceeding;
- Mergers, Acquisitions and Valuation: Name, CPF (Brazilian tax identification number), position, and financial details of representatives and administrators of the companies involved in the transaction;
- Estate Planning, Succession Planning, Family Office, Offshore and Personal Income Tax (solutions for individuals from CORPSERVICES): Name, ID number, CPF (Brazilian tax identification number), bank and asset details, income tax information, and documents relating to assets and rights abroad.
Sharing: CORPSERVICES GROUP may share or receive personal data from companies within the group and strategic partners when necessary for the operation of services, fulfillment of requests, compliance with legal obligations, or support of corporate activities. Data sharing will occur in a manner consistent with the purposes stated in this Notice and will observe appropriate data protection measures.
Events: Personal information, such as name, phone number, and contact email, may also be collected physically or digitally by our employees at fairs, exhibitions, and events promoted by “CORPSERVICES GROUP”.
Geolocation: Geolocation data may be collected if the User authorizes its collection from their device. Therefore, when using our platform, we may collect information about your location, which helps us improve planning and strategic logistics actions. Your location is subject to the settings adjusted on your device and may be determined by GPS, IP address, sensor data from your device, or through information transmitted by items near the device, such as Wi-Fi access points, devices with Bluetooth enabled, and cell towers.
Job applicants: We may have access to personal information of job applicants, such as full name, phone number, email, field of study, city of interest, desired position, and any other information voluntarily provided by the applicant.
Employees: Regarding the personal data collected from our employees, this data is necessary for employee registration, in compliance with labor laws and the execution of the employment contract.
Security camera monitoring: We collect images of employees moving around the company premises using security cameras installed at strategic points.
Monitoring wired and Wi-Fi networks: We collect personal data from all users of the wired and Wi-Fi network provided by “CORPSERVICES GROUP”, based on our legitimate interests, for the purpose of internal and/or external monitoring of the artificial environment we provide.
Reporting Channel: This serves to investigate misconduct, fraud, or ethical violations. Reports can be received anonymously; that is, you do not need to identify yourself unless you wish to. If you choose to identify yourself, we will collect the personal data of the individuals involved, such as name, email, and phone number, and any additional information you wish to share. Access to records will be restricted to authorized individuals, and the information will be used exclusively for the analysis, investigation, and handling of complaints, observing the principles of necessity, adequacy, and information security.
Exceptionally, “CORPSERVICES GROUP” will process sensitive personal data, in which case the provisions of the LGPD (Brazilian General Data Protection Law) will be duly observed.
3. Social Media
CORPSERVICES GROUP also uses social media to communicate and interact with its clients and consumers through third-party websites such as YouTube, Instagram, or LinkedIn. These third-party websites are internet-based technologies that are not operated or controlled by CORPSERVICES GROUP. By interacting with, sharing, or “Liking” a CORPSERVICES GROUP page on YouTube, Instagram, LinkedIn, or other social media, you may disclose certain personal information to CORPSERVICES GROUP or third parties.
We use “social buttons” to allow our users to share or bookmark web pages. These are buttons from third-party social media sites that may record information about your online activities, including on this website. Please review the respective Terms of Use and Privacy Notices of these platforms to understand exactly how they use your information, and to opt out of receiving or deleting such information.
The amount of personal information visible will depend on your own privacy settings on YouTube, Instagram, LinkedIn, and other social media platforms.
4. Purposes and legal basis
Below are the purposes and legal bases for data processing by “CORPSERVICES GROUP”:
| Purposes |
Legal basis |
| To fulfill the contract established with our clients. |
It will be determined by our client, in their capacity as controller of personal data. |
| Comply with the terms and conditions established in the contract. |
Necessary for the execution of a contract to which the holder of personal data is a party. |
| Recruitment and assessment of suitability for the job opening. |
Justified on the basis of our legitimate interests to ensure that we recruit the right employees. |
| Administering employee benefits. |
It is justified based on the employee’s consent, if it is in their interest to receive a certain benefit, and on compliance with a legal obligation, when the benefit arises from a Collective Agreement or Convention. |
| Communication with you (including in emergencies and to provide you with requested information). |
This is justified based on our legitimate interests in ensuring adequate communication and emergency management within the organization. |
| Compliance with legal requirements. |
Necessary for compliance with a legal obligation to which we are subject. |
| Monitoring your use of our systems and networks (including monitoring your use of our website and any applications and tools you use). |
This is justified based on our legitimate interests in avoiding non-compliance and protecting our reputation. |
| Social listening (identifying and analyzing what is being said about “CORPSERVICES GROUP” on social media) [somente conteúdo acessível publicamente] in order to understand market sentiment, intentions, dispositions and trends, as well as the needs of our stakeholders, and thereby improve our services. |
This is justified based on our legitimate interests in protecting our assets and our brand on social media. |
| Improving the security and functionality of our website, app, networks, and information. |
This is justified based on our legitimate interests in ensuring that you have an excellent user experience and that our networks and information are secure. |
| Offering our services to you (unless you have objected to such treatment). |
This is justified based on our legitimate interests in promoting our business. |
| Identification and authentication for access to the premises of “CORPSERVICES GROUP” units through images and recordings of third parties, employees, and visitors. |
It is justified by the need to protect the life or physical safety of the holders or third parties. |
| Internal monitoring via security cameras |
It is justified by the legitimate interest of the data controller or third parties. |
| Providing necessary information to government agencies. |
To fulfill a legal obligation. |
We only act based on our legitimate interest for specific purposes. This processing of personal data does not in any way override the interests, rights, and freedoms of the data subjects.
5. Regarding the sharing and transfer of information
CORPSERVICES GROUP does not, as a matter of practice, disclose information that could identify the user and never shares, sells, or rents this personal data to third parties. This data is for the exclusive internal use of the group’s companies, to achieve the purposes expressed in the previous item.
The data may be shared with third parties only under the following conditions:
- By court order or at the request of government oversight bodies;
- Data transferred to public bodies to comply with current legislation, for example personal data contained in electronic invoices and their respective XML files, or data from our employees necessary for the payment of INSS (Brazilian Social Security) or FGTS (Brazilian Severance Indemnity Fund);
- Data transferred to financial institutions to enable payment options for our customers, or for the payment of salaries to our employees and service providers;
- Data shared with the subsidiaries of “CORPSERVICES GROUP” in order to enable the proper provision of services;
- Data shared with partner companies, operators, and service providers that participate, directly or indirectly, in the development of the commercial activities of “CORPSERVICES GROUP”, such as: collections, payment processes, customer service, recruitment and selection platforms, insurance brokers, health and dental plan operators, insurance companies (life insurance), email sending, advertising and marketing, security and performance monitoring, order and transaction processing and fulfillment, consumer registration information verification services, data research, storage and processing, expert and arbitrator services, independent verification and auditing services, translation services, notary services/issuance of certificates;
- Data transferred for the purpose of executing the contract, as well as for protecting the interests of “CORPSERVICES GROUP” in any type of dispute, including legal actions;
- In the event of corporate transactions such as mergers, acquisitions, transformations, spin-offs, or a partial or total sale of assets, we may share, disclose, or transfer all data of the data subjects to the successor organization.
Some of the service providers mentioned above may be located abroad, and in that case, “CORPSERVICES GROUP” adopts additional safeguards to guarantee an adequate level of protection of personal data, in accordance with the provisions of the relevant Brazilian legislation.
In operations involving the sharing of your personal data with Data Processors, we will require that it be processed in accordance with our instructions, in our capacity as the Controller of this information, including with respect to other processing agents involved in the data processing chain, including Sub-processors.
6. Information Security
To ensure that your personal information is secure, we communicate our privacy and security guidelines to CORPSERVICES GROUP employees and business partners and strictly adhere to privacy precautions within the group’s companies.
We are committed to protecting your personal information, and that entrusted to us by our customers, through physical, technical and organizational measures aimed at reducing the risks of loss, misuse, unauthorized access, disclosure and improper alteration of this data.
7. Rights of Data Subjects
Data subjects have certain rights regarding their personal data and can exercise them by clicking here to access the Data Request Form (DSAR) or by email: dpo@corpservices.com.br.
The rights of the holders are:
- Confirmation of the existence of personal data processing;
- Access to personal data, in accordance with applicable legislation;
- Correction of incomplete, inaccurate, or outdated personal data;
- Portability of personal data;
- Exclusion of personal data when it is processed based on the consent of the data subject or when the data is unnecessary, excessive, or processed in violation of applicable law;
- Request for information regarding the shared use of personal data;
- Revocation of consent, where applicable.
CORPSERVICES GROUP will always assess the best way to fulfill your request to exercise any of your rights. However, CORPSERVICES GROUP may fail to fulfill your request, in whole or in part, in specific situations protected by law, such as, for example, to comply with a legal obligation or a contract it has with you.
We emphasize the importance of keeping your personal data accurate and up-to-date. Therefore, please keep CORPSERVICES GROUP informed if your personal data changes or becomes incorrect.
For security reasons, requests made via email will be processed as follows: dpo@corpservices.com.brThe request will be fulfilled once we are certain of the user’s identity. Therefore, we may request additional data or information to confirm the identity and authenticity of the data subject. This data and information will be protected during the storage period and deleted after the legal period for exercising any rights has elapsed.
In cases where “CORPSERVICES GROUP” is a Personal Data Processor, requests will be forwarded to the Controller for evaluation and decision regarding the necessary actions to be taken.
8. End of Treatment
This Privacy Notice applies to the aforementioned circumstances for the entire period during which “CORPSERVICES GROUP” stores personal data. We store and maintain your information: (a) for the time required by law; (b) until the termination of the processing of personal data, as mentioned below; or (c) for the time necessary to safeguard the rights of “CORPSERVICES GROUP”. Thus, we will process your data, for example, during the applicable limitation periods or as long as necessary to comply with a legal or regulatory obligation.
The termination of the processing of personal data will occur in the following cases: (a) when the purpose for which the personal data was collected is achieved, and/or the personal data collected ceases to be necessary or relevant to achieving that purpose; (b) when the Data Subject requests the deletion of their data; (c) when there is a legal determination to this effect; and (d) when the termination of the processing is determined by the Controller.
In cases where the processing of personal data is terminated, except as provided by applicable law or this Privacy Notice, the personal data will be deleted.
9. Data Protection Officer (DPO)
CORPSERVICES GROUP provides below the contact details of the Data Protection Officer (DPO), who is responsible for handling any and all requests from data subjects or the National Authority related to personal data.
For any questions, requests, or complaints regarding the processing of personal data, please contact our Data Protection Officer:
DPO EXPERT – (www.dpoexpert.com.br)
Responsible: Rafael Susskind
Substitute responsible: Renata Adeli Franhan Parizotto
contact: dpo@corpservices.com.br
If, despite our commitment and efforts to protect your data, you believe that your data protection rights have not been respected, please contact our Data Protection Officer (DPO). Furthermore, you have the right, at any time, to file a complaint directly with the National Data Protection Authority if you believe that your rights regarding your personal data have been infringed.
10. Changes to the Privacy Notice
Although our Privacy Notice has been presented in a clear, concise, and objective manner, please do not hesitate to consult the DPO of “CORPSERVICES GROUP” if you have any questions about this important document or about the personal data processing activities we carry out.
CORPSERVICES GROUP reserves the right to update or modify this Notice at any time without prior notice. However, we will always publish the new revised version on our website. If there are changes in the way we handle personal data, you will be informed so you can check if you wish to continue using our services.
