Privacy Policy.

Dorck Coding values your privacy. This Policy clearly describes what data we process when you browse our company website and when you interact with us, as well as the purposes, the legal bases and your rights under Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018).

This Policy applies to everyone who visits the website or contacts Dorck through our channels. This translation is provided for convenience; the Portuguese version prevails.

• Direct message: name, email, phone or WhatsApp (optional), subject and message.
• Quote request: name, email, phone or WhatsApp, profile, agency or company, role, service of interest, whether the project is for a client of your agency, desired timeline, budget range, how you found Dorck and the project description.
• Job application: name, email, phone or WhatsApp, area of interest, experience level, main stack, LinkedIn, portfolio or GitHub, availability, message and the attached resume.
• Email and WhatsApp: whatever you send us through the links on the website.
• Minimal technical browsing data: IP address, date/time, user agent and pages visited may appear in server logs for security, fraud prevention and operational reasons. To limit abusive submissions, the server also records an encrypted code (hash) of the IP address along with the number of submissions.
• Visit and ad measurement (Google): with your consent, the Google tag (Google Analytics and Google Ads) records the pages you visit, where the visit came from (for example, an ad), WhatsApp clicks and form submissions, your device, browser and approximate location, with identifiers stored in cookies. Without consent, Google receives only signals without cookies or identifiers, which it uses in aggregate to estimate results.
• Public content: we display posts from our blog and a carousel from our Instagram. These sections don't ask for personal data, but the carousel images are loaded from Meta's servers, which receive technical data from the request, such as IP address and browser.

We currently do not collect sensitive data and do not carry out profiling or automated decisions that produce legal effects on you.

• Website forms (direct message, quote request and job application) and email and WhatsApp links, with the data you provide directly.
• Technical logs generated automatically by the hosting infrastructure.
• The Google tag (Google Analytics and Google Ads), which only sets cookies after you accept them in the cookie notice.
• Public read-only integrations (blog and Instagram feeds). There is no login, authenticated area or data capture in these sections.

• Responding to requests, questions and messages you send us.
• Preparing commercial proposals based on quote requests.
• Running hiring processes, evaluating the applications and resumes we receive.
• Maintaining the website's security, availability and performance (technical logs and basic monitoring).
• Measuring the website audience and the results of our ad campaigns, and showing Dorck ads to people who have visited the website, with your consent.
• Complying with legal obligations and exercising rights in judicial/administrative proceedings, where applicable.

• Preliminary procedures related to a contract (Art. 7, V): to handle quote requests and job applications, made at your request.
• Consent (Art. 7, I): to respond to direct messages and to what you send us by email or WhatsApp, and for Google's measurement and advertising cookies, which are only set if you accept them in the cookie notice.
• Legitimate interest (Art. 7, IX): to ensure security, fraud prevention and the operation of the website (minimal technical logs).
• Compliance with a legal obligation (Art. 7, II): when necessary to meet requests from authorities or regulators.

We don't sell your data. We may share strictly necessary data with:

• Hosting, email and infrastructure service providers (form submissions reach us by email).
• Scheduling and communication tools you use through links on the website (e.g., Calendly). When you interact with these services, the respective platforms' privacy policies also apply.
• Google (Google Analytics and Google Ads), which receives the browsing data described above for measurement and advertising, under Google's privacy policy.
• Public authorities, when required by law.

The website sets the lang cookie only when you choose a language in the selector at the top of the page. It stores that choice for 1 year so the website opens in the same language on your next visits, and it is not used for tracking. Without that choice, we use the language set in your browser, which it already sends with every request, only to decide which language to show the page in, without storing that information.

When you submit a form, the website may also set a technical cookie whose name starts with humans_, if our hosting provider's bot protection asks for it. It only confirms that the submission came from a browser, stores no personal data and is deleted when you close your browser.

With your consent, the Google tag (Google Analytics and Google Ads) sets measurement and advertising cookies: _ga and _ga_* (Google Analytics, for up to 2 years) and _gcl_au (Google Ads, for 90 days), plus Google's own cookies on its domains. They are used to count visits, see where they come from, measure ad results and show Dorck ads to people who have visited the website. If you decline, none of these cookies are set and Google receives only signals without cookies or identifiers, used in aggregate.

Your choice is stored for 1 year in the consent cookie. You can change it at any time under Cookie preferences, in the website footer or with the button below; when you decline, we delete any Google cookies already set.

The scheduling (Calendly), WhatsApp and social media links open those services outside the website, where each platform's policies apply. The Instagram carousel images come from Meta's servers, which receive technical data from the request. You can also delete or block cookies in your browser settings.

We keep your data for as long as necessary to fulfill the purposes stated in this Policy, observing applicable statutory periods. Messages sent through the forms may be kept as part of our service history and for the defense of rights.

Resumes and application data are kept for the duration of the hiring process and for up to 12 months afterward, for future opportunities. You can request deletion before then through the email address in the Contact section.

You may request, at any time:

• Confirmation that processing takes place and access to the data.
• Correction of incomplete, inaccurate or outdated data.
• Anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law.
• Portability and information about data sharing, as provided by law.
• Withdrawal of consent, where processing is based on it.

We adopt reasonable technical and organizational measures to protect your information against unauthorized access, loss, misuse, alteration and improper disclosure.

Some service providers, such as Google, may process data outside Brazil. In these cases, we seek to ensure that processing is subject to adequate data protection safeguards, in compliance with the LGPD.

Our website may contain links to third-party services (for example, blog, social media and scheduling). We don't control these sites or their privacy practices; we recommend that you review the applicable policies when accessing them.

This Policy may be updated to reflect legal, technical or operational changes. We will publish the new version on this page, with the updated effective date.

The controller of the data processed on this website is Dorck Soluções Digitais Ltda (Dorck Coding), CNPJ 66.377.903/0001-02, headquartered in Cascavel, Paraná, Brazil.

For questions about this Policy, to exercise your rights or to contact our data protection officer, write to: