Privacy Policy
Last updated: March 2026
1. Data Controller
Gallora Precision Genetics, located in Betim, Minas Gerais, Brazil, is the data controller for personal data collected through this website (gallora.com.br) and related services.
- E-mail: [email protected]
- Location: Betim, Minas Gerais, Brazil
2. Introduction
This Privacy Policy describes what data we collect, how we use it, with whom we share it, and what your rights are as a data subject, in compliance with the Brazilian General Data Protection Law (LGPD — Law 13,709/2018), the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).
3. Data we collect
3.1 Data provided by you
- Contact form: name, email, phone, type of interest, and message.
3.2 Automatically collected data
- Cookies: Essential cookies and, with your consent, analytics cookies (Google Analytics).
- Browsing data: anonymized IP address, browser type, pages visited, session duration.
- IP address: Collected for security purposes and anonymized via Google Analytics.
4. Purpose of processing
We use your personal data for the following purposes:
- Responding to messages sent through the contact form.
- Sending information about genetics and the Gallora platform upon request.
- Improving the browsing experience on the website through anonymized analytics.
- Complying with legal and regulatory obligations.
5. Legal basis
LGPD (Brazil):
- Consent (Art. 7, I) — contact form and cookies.
- Legitimate interest (Art. 7, IX) — anonymized analytics to improve the website.
GDPR (EU):
- Consent (Art. 6(1)(a)) — contact form and non-essential cookies.
- Legitimate interest (Art. 6(1)(f)) — anonymized analytics.
6. Data sharing
Gallora does not sell, rent, or share your personal data with third parties for marketing or advertising purposes.
We share data only with the following essential service providers:
| Provider | Service | Location |
|---|---|---|
| Vercel | Hosting and CDN | USA |
| Resend | Email delivery (contact form) | USA |
| Cloudflare | CDN and security (Turnstile) | USA |
| Google Analytics | Website analytics (only with consent) | USA |
7. International data transfer
Some of our service providers are located in the United States. For these transfers, we rely on Standard Contractual Clauses (SCCs), as approved by the European Commission, as well as each provider's compliance with LGPD requirements.
8. Your rights
As a data subject, you have the right to:
- Confirmation of the existence of data processing.
- Access to your personal data.
- Correction of incomplete or outdated data.
- Anonymization, blocking, or deletion of unnecessary data.
- Portability of data to another provider.
- Deletion of data processed with consent.
- Information about public and private entities with which we share data.
- Revocation of consent at any time.
To exercise any of your rights, contact us at [email protected].
Right to lodge a complaint (GDPR): You have the right to lodge a complaint with the supervisory data protection authority in your EU member state.
9. Cookies
This website uses the following cookie categories:
| Category | Cookie | Purpose | Duration |
|---|---|---|---|
| Essential | gallora-cookie-consent | Stores your cookie preferences | Persistent (localStorage) |
| Essential | cf_clearance | Cloudflare Turnstile — security validation | Session |
| Analytics | _ga | Google Analytics — distinguishes users | 2 years |
| Analytics | _ga_* | Google Analytics 4 — stores session state | 2 years |
| Preferences | Language settings | Stores your language choice | Session |
Analytics cookies are loaded only after your explicit consent. You can change your preferences at any time via the "Manage cookies" link in the footer.
10. Data retention
- Contact data: up to 2 years after the last contact or until consent is revoked.
- Cookies: as per the table above (session to 2 years).
11. Security
We adopt technical and organizational measures to protect your data:
- HTTPS — encryption in transit (TLS 1.3).
- Access restriction — principle of least privilege.
- Backup — regular encrypted backups.
12. Data Protection Officer (DPO)
For questions, requests, or complaints about this Privacy Policy:
- Controller: Gallora Precision Genetics
- E-mail: [email protected]
- Address: Betim, Minas Gerais, Brazil
You also have the right to file a complaint with the competent supervisory authority — in Brazil, the Autoridade Nacional de Protecao de Dados (ANPD), or the relevant data protection authority in your jurisdiction under the GDPR.
13. California Consumer Privacy Act (CCPA)
If you are a California resident, you have additional rights under the CCPA:
- Right to know: You may request that we disclose the categories and specific pieces of personal information we have collected about you.
- Right to delete: You may request the deletion of your personal information, subject to certain exceptions.
- Right to opt out: You may opt out of the sale of your personal information.
- Non-discrimination: We will not discriminate against you for exercising your CCPA rights.
Do Not Sell My Personal Information: Gallora does not sell, rent, or share your personal data with third parties for monetary consideration. We do not participate in data brokers or advertising networks. If you wish to exercise any CCPA right, contact us at [email protected].
14. Changes to this policy
We may update this Privacy Policy periodically. Significant changes will be communicated through the website. The date of the last update will always be visible at the top of the document.