Privacy policy
Last updated:
This policy explains what happens to the data you submit on this site. It applies to JOTAX Sociedad Anónima (RUC 80119411-3), with its registered office at Calle Bonifacio Ovando, Valle Apua 2ª, Lambaré — Departamento Central, Paraguai, which is the controller of that data.
What we collect
Only what you type into the contact form, plus the minimum needed to know where you came from:
| Data | Source | Purpose |
|---|---|---|
| Name | you type it | to know who we are speaking with |
| Email and phone number | you type it | to reply to you |
| Subject of interest and message | you type it | to understand your case before we talk |
| Landing page and campaign parameters (UTM) | the address you visited | to know which content brought you here, so we can improve the site |
| Date and time of submission and of consent | our server | evidence that the authorisation was given |
We use no tracking cookies, no social media pixels and no third-party analytics tools on this site. No advertising profile is being built from your browsing here, which is why there is no cookie banner asking you to consent to tracking: there is nothing to consent to.
Legal basis
- Consent (LGPD, the Brazilian data protection act, art. 7, I; GDPR art. 6(1)(a), which applies to you if you are in the European Union; Paraguay's Ley 7593/2025, the country's first general data protection act, enacted on 27 November 2025 and fully enforceable from November 2027): you tick the box before submitting. Without that tick the form does not send.
- Performance of a contract and pre-contractual steps: if you become a client, your data is then processed in order to deliver the service you engaged us for.
Who we share it with
We do not sell and we do not transfer your data. It is accessed by the JOTAX team who will handle your case and is stored on infrastructure provided by Supabase, our database provider, which acts as a processor and does not use that data for its own purposes. Where the conversation continues on WhatsApp, it takes place on Meta's platform and is subject to Meta's policies.
When you send the form, a notice containing the contact details you filled in is forwarded to our team over WhatsApp through UAZAPI, which operates that messaging bridge on our behalf. Any conversation that starts from there is also subject to the policies of Meta, which owns WhatsApp.
Where there is an international transfer of data — because the company is based in Paraguay and you may be in Brazil, in the European Union or elsewhere — it takes place for the purpose described here and with the same safeguards.
How long we keep it
- Enquiry that does not become a client: kept while there is a legitimate interest in resuming the conversation, and deleted at your request, at any time.
- Client: kept for the duration of the engagement and, after it ends, for the period required by the legislation applicable to the retention of professional and tax records.
Your rights
As the data subject you may request, at any time and free of charge: confirmation that we process your data, access to it, correction of anything inaccurate, anonymisation or erasure of anything unnecessary, portability, information on who we share it with, and withdrawal of your consent.
To exercise any of these, write to c.domingos@jotaxsa.com. We reply within the period set by the legislation applicable to your case. If our answer does not satisfy you, you may complain to the data protection authority of your country — the ANPD in Brazil, or your national supervisory authority if you are in the European Union.
Security
The form is submitted over an encrypted connection and written to the database by a server-side process, not by your browser: the database credentials never leave the server. The database is closed to public access — only the application and authorised staff can read those records.
Changes
If this policy changes, the update date at the top changes with it. Any change that matters to an existing client is communicated through our contact channels.