Privacy Policy
Last updated: October 27, 2026
This policy explains how BlueX Solution handles the personal data of people who visit bluexsolution.com.br or contact us, under Brazil's General Data Protection Law (Law 13,709/2018, LGPD).
1. Data controller
BLUEX SOLUTION LTDA, CNPJ 48.468.688/0001-65, Av. Adalberto Simão Nader, 425, Ed. Milano, room 101, Mata da Praia, Vitória/ES, Brazil, 29066-310. Contact: contato@bluexsolution.com. Data protection officer (DPO): [DPO name and email].
2. What we collect
Through the contact form: name, company, email, phone, industry and your message. While you browse: technical data the server logs automatically, such as IP address, date and time of access and browser type. We do not use advertising or tracking cookies.
3. Why we use it and the legal basis
To answer your enquiry and prepare proposals (pre-contractual steps and legitimate interest, LGPD art. 7, V and IX); to keep the website secure and running (legitimate interest); and to meet legal obligations, such as keeping access logs as required by Brazil's Internet Civil Framework.
4. Who we share it with
Only suppliers the website needs to run: hosting, the website and form platform, and email. The form uses Cloudflare Turnstile to block automated (bot) submissions; it receives technical browser data, such as the IP address, only for that check. They process data on our behalf and under contract. We never sell or rent personal data.
5. International transfers
Some suppliers, such as the hosting provider, may process data outside Brazil. In those cases we apply the safeguards in LGPD art. 33.
6. How long we keep it
Contact data: up to 2 years after our last interaction, or for as long as there is a business relationship. Website access logs: 6 months. After that, data is deleted or anonymized.
7. Your rights
You can ask at any time for confirmation that we process your data, access, correction, anonymization, blocking or deletion, portability, information on who we share it with, and withdrawal of consent (LGPD art. 18). Write to contato@bluexsolution.com. We reply within 15 days. You can also complain to Brazil's data protection authority (ANPD) or the authority in your country.
8. Security
We use an encrypted connection (HTTPS), restricted access to contact data and suppliers with recognized security practices. BlueX follows an internal information security policy, with two-step verification on company accounts, computers with encrypted disks and a password manager, and has an incident response plan. BlueX follows an internal information security policy, with two-step verification on company accounts, computers with encrypted disks and a password manager, and has an incident response plan.
9. Data processed in BlueX software
BlueX Vision platform software, such as the Rail Efficiency module, the Trip Analyzer and the Simulator, runs on the customer's own computer or server, or in a cloud contracted by the customer or managed by BlueX. Operational data in these systems belongs to the customer, who is the controller. BlueX acts as processor when providing support with access to the data or when managing the customer's cloud, always under a data processing agreement. The software does not send data to BlueX or to the internet. The security and privacy rules for these systems, including Brazil's LGPD and Chile's Law 21,719, are set out in the Security Dossier delivered to each customer.
10. Changes
We may update this policy. The date at the top shows the version in force.