Privacy Policy
Last updated: 20 June 2026
This Privacy Policy explains how personal data is collected and used when you visit carlosmagno.me (the “Website”). The Website is an English-language, informational positioning and consulting site for founder-led brands. Beyond reading, it offers two interactions: a contact and intake form, and a “Book a call” link. Services are not sold or paid for on the Website. Any engagement is arranged on a call and governed by a separate written agreement.
This policy is provided in good faith and in plain language. If anything here is unclear, please contact the controller (details below) with any questions.
1. Who is responsible for your data (the controller)
The data controller is the individual entrepreneur (Empresario Individual) registered under Brazilian law as follows:
- Legal name (razao social): Carlos Magno Rodrigues Junior
- Trade name (nome fantasia): Carlos Magno Dot Me
- CNPJ: 21.440.065/0001-28
- Location: Barbacena, Minas Gerais, Brazil (full registered address available on request)
- Contact email:

For the purposes of Brazil’s LGPD, requests directed to the data protection contact (encarregado) should be sent to the same email:
.
2. Which legal frameworks apply
Because the controller is established in Brazil, Brazil’s General Data Protection Law (LGPD, Lei Geral de Protecao de Dados, Law No. 13.709/2018) is the primary framework that governs this Website. Where you visit from the European Union or the United Kingdom, this policy also addresses the EU and UK General Data Protection Regulation (GDPR). The rights and protections below are offered in that spirit.
3. What personal data is collected, and from whom
Personal data is collected directly from you when you choose to provide it, and automatically when you browse the Website. Specifically:
- Intake form (“Help Me, Help You”), embedded on the /background page. When you complete this form you provide: first name, last name, email, phone number, company, a short business overview, and a monthly revenue range. This form is operated through Tally (tally.so), which processes the submission on the controller’s behalf.
- Booking a call. The “Book a call” buttons link to cal.com/carlosmagno/mentoring. When you book, cal.com collects your name, email, and scheduling details to set up the meeting. cal.com processes this booking on the controller’s behalf.
- Direct email. If you email
, the controller receives whatever information you choose to include in your message. - Analytics and cookies. The Website runs WP Analytify (Google Analytics), which uses cookies to collect usage data, device and browser information, approximate location, and IP-derived data, so the controller can understand how the Website is used.
- Server logs. The hosting provider keeps standard web-server logs, which may include your IP address, user agent (browser and device), and timestamps of your visits.
Only the data described above is collected. The Website does not ask for sensitive personal data, and you should not include sensitive data in any message or form submission.
4. Why your data is used, and the legal bases
Personal data is used to respond to you, to understand whether there may be a fit to work together, to operate and improve the Website, and to keep it secure. The legal bases (LGPD Art. 7 and GDPR Art. 6) are:
- Consent: when you submit the intake form, book a call, or otherwise choose to send your information, and for non-essential analytics cookies.
- Steps taken prior to a contract at your request: when your form submission or booking is part of exploring a possible engagement.
- Legitimate interest: for example, to keep the Website secure, to maintain server logs, to understand aggregate usage, and to reply to enquiries, where this is balanced against your rights and reasonable expectations.
5. How your data is used
- To reply to your enquiry and continue a conversation you started.
- To schedule and hold a call you requested.
- To assess, in good faith, whether there may be a fit for an engagement (which, if it proceeds, is governed by a separate written agreement).
- To operate, maintain, secure, and improve the Website.
Your data is not sold, and it is not used for unrelated marketing without your consent.
6. Who your data is shared with
To run the Website and respond to you, personal data may be shared with the following service providers (processors), each acting on the controller’s instructions:
- Tally (tally.so): intake-form processing.
- cal.com: call scheduling and booking.
- Google Analytics (via the WP Analytify plugin): website analytics.
- The website hosting provider: hosting and server logs.
- The email provider: sending and receiving email.
The Website also links out to LinkedIn. That is an outbound link only; no personal data is shared with LinkedIn by following it, and LinkedIn’s own policies apply once you leave the Website.
7. International transfer of data
Some of the providers above are located outside Brazil (for example in the United States or the European Union). This means your personal data may be processed internationally. Where data is transferred outside Brazil, the controller seeks to rely on appropriate safeguards consistent with the LGPD and, where relevant, the GDPR, such as the providers’ own contractual commitments and standard data-protection terms.
8. Cookies and how to control them
The Website uses cookies, primarily through Google Analytics (Analytify), to understand usage. You can control or refuse cookies through your browser settings, including deleting existing cookies and blocking future ones. You can also use browser-level or Google opt-out tools to limit analytics tracking. Blocking cookies will not stop you from reading the Website, though some measurement features will not work.
9. How long your data is kept (retention)
Personal data is kept only for as long as needed for the purpose it was collected for, or as required to meet legal obligations. Enquiry and intake details are kept while a conversation or potential engagement is active, and for a reasonable period afterwards. Analytics and server-log data are kept for the limited periods set by the relevant providers. When data is no longer needed, it is deleted or anonymised.
10. How your data is protected (security)
Reasonable technical and organisational measures are used to protect personal data against unauthorised access, loss, or misuse, including reliance on reputable providers, access controls, and encrypted connections (HTTPS) for the Website. No method of transmission or storage is completely secure, but the controller works to protect your data in line with the LGPD and good practice.
11. Your rights
Under the LGPD (Art. 18) and, where it applies, the GDPR, you have the right to:
- Confirm that your data is processed, and access it.
- Correct incomplete, inaccurate, or outdated data.
- Request anonymisation, blocking, or deletion of unnecessary or excessive data, or data processed in a way that is not compliant.
- Request portability of your data to another provider.
- Be informed about the public and private entities your data has been shared with.
- Be informed about the option to refuse consent, and the consequences of refusing.
- Withdraw consent at any time, where processing is based on consent.
- Object to processing in certain circumstances.
- Lodge a complaint with a data protection authority, including Brazil’s National Data Protection Authority (ANPD) or, for visitors in the EU or UK, your local supervisory authority.
To exercise any of these rights, email
. The controller will respond within a reasonable time and may need to verify your identity before acting on a request.
The controller does not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.
12. Children
The Website is not directed to children. It is intended for users who are 18 or older, or who have the consent of a parent or legal guardian. The controller does not knowingly collect personal data from children. If you believe a child has provided personal data, please contact
so it can be removed.
13. Links to third-party sites
The Website may link to third-party sites and services (such as cal.com, Tally, and LinkedIn). Those sites are governed by their own privacy policies and terms, and the controller is not responsible for their practices. Please review their policies before providing them with personal data.
14. Changes to this policy
This policy may be updated from time to time to reflect changes in the Website, its providers, or the law. The “Last updated” date at the top shows when it last changed. Material changes will be reflected on this page, and your continued use of the Website after an update means you accept the revised policy.
15. Contact
For any question about this policy or your personal data, contact the controller: