1. Who we are
DMZ Solutions (“DMZ”, “we”) develops and operates digital products.
Legal name: DMZ SOLUÇÕES EM TECNOLOGIA DA INFORMAÇÃO LTDA
Company ID (CNPJ): 48.057.887/0001-80
Address: Rua Lino Coutinho, 1090 – Ipiranga, São Paulo – SP, ZIP 04207-001 – CJ.132/145
Contact email: contato@dmzsolutions.com.br
2. Roles under the LGPD
Controller of the data collected on the website, commercial channels, and customer accounts (contracts, billing, support). Processor of our customers’ end-client data when they use products such as Lali (we process data on behalf of the salon/business customer).
3. Data we collect
Website and contact: name, email, phone, and messages sent through forms; cookies/analytics.
Account and contracting: registration data, billing, support history. Product operations: data generated by use (logs, events, preferences).
4. Purposes and legal bases
Provide the service/execute the contract (create an account, provide and maintain products).
Support and communication about the service.
Security, fraud prevention, and audit (legitimate interest).
Compliance with legal/regulatory obligations.
Marketing only with consent, always revocable.
We do not sell personal data.
5. Sharing with third parties (processors)
We share only with necessary providers (hosting/infra, database, email/SMS, messaging – e.g., Meta/WhatsApp when applicable –, monitoring/analytics), always under contract and with security measures. The current list can be requested from the DPO.
6. Retention and disposal
Account and billing data: during the relationship and for legal retention periods.
Technical logs: up to 180 days.
Other data: for as long as necessary for the stated purposes; then anonymized or deleted.
7. Data subject rights
Access, correction, portability, anonymization/deletion, information about sharing, objection, withdrawal of consent, and review of automated decisions. Request via the DPO email.
8. Security
Encryption in transit (HTTPS/TLS), role-based access control, audit logs, backups, and practices compatible with the state of the art.
9. International transfers
May occur (e.g., providers outside Brazil). We apply contractual clauses and technical controls to protect your data.
10. Children and adolescents
Our services are not directed at minors. If we identify improper processing, we will delete it as required by law.
11. Cookies
We use essential cookies (site operation) and analytics cookies (aggregate metrics). You can manage preferences in your browser and/or in the cookie banner (when displayed).
12. Updates
We may update this Policy to reflect improvements or legal requirements. The current version will remain published at this address.
Effective date: 08/25/2025
Annex A – Lali (pre-launch)
Status: in development. No end-customer data is processed by Lali until the product is contracted and connected by the respective salon.
When enabled, Lali will process data as described in this Annex (customer service and schedule orchestration; messages via WhatsApp Business under 24-hour rules and Utility templates; operational notifications to the owner).
Until then, only the general sections of this Policy apply.