Privacy Policy

This is a courtesy translation. In case of any discrepancy, the Portuguese version prevails.

Last updated: October 2026

1. Who we are

Instituto Irmãos Nogueira, a nonprofit association registered under CNPJ (Brazilian corporate taxpayer ID) 11.880.632/0001-03, is the controller of the personal data processed on this website and in its activities. This means the Institute decides how and for what purposes this data is used.

This policy explains what data we collect, why we collect it, who we share it with, how long we keep it and how you can exercise your rights.

2. What data we collect

Student enrollment and parents or guardians

The student’s name, date of birth, school and grade; the legal guardian’s name, identity document, phone number and email; the training center and martial art chosen. When necessary for safe sports practice, we may ask for health information, such as medical restrictions or allergies.

Donors

Name, email, phone number, CPF or CNPJ (Brazilian individual or corporate taxpayer ID) and donation details (amount, date and payment method). Card data is processed directly by the payment institution and is not stored by the Institute.

Business contacts

Name, job title, company, email and phone number of anyone who contacts us about sponsorship or partnership.

Browsing and cookies

Technical data on website use, such as pages visited, device type and traffic source. Analytics cookies are only enabled with your consent (see the Cookies section).

3. Purposes and legal bases

We only process personal data when there is a clear purpose and a legal basis provided for in Articles 7 and 11 of the LGPD:

• Student enrollment and follow-up: carrying out the project’s activities and complying with legal and contractual obligations, including financial accountability for tax-incentive projects.
• Health data (sensitive data): used solely to protect the student’s physical safety during activities, with the specific consent of the parent or guardian or for the protection of health (Art. 11).
• Donations: processing the donation, issuing receipts and complying with tax and accounting obligations.
• Business contacts: responding to the request and taking preliminary steps toward a sponsorship or partnership agreement.
• Website audience measurement: consent, which may be withdrawn at any time.

Children and adolescents

Most of our students are children and adolescents. Under Article 14 of the LGPD, their data is always processed in their best interest and with the specific and prominent consent of at least one parent or legal guardian, given at enrollment. We collect only the minimum necessary for the activities.

4. Use of images of children and adolescents

• Photos and videos of students are used only with the written authorization of the legal guardian, which may be revoked at any time.
• We respect the right to preservation of image and identity set out in Article 17 of Brazil’s Child and Adolescent Statute (ECA).
• We never publish a student’s full name, school or address together with their image.
• If you are a parent or guardian and want a published image removed, contact our Data Protection Officer (see the Your rights section).

5. Sharing

Personal data is never sold. It may be shared only in the following cases:

• Sponsors and public authorities: only for the financial accountability required by law for tax-incentive projects, and in aggregate form (without identifying individuals) whenever possible.
• Service providers: companies that help us operate, such as website hosting, forms, payment methods and audience measurement, which process the data only in accordance with our instructions.
• Authorities: when required by a legal obligation or court order.

6. Retention and deletion

We keep data only for as long as necessary to fulfill the purpose for which it was collected or for the period required by law, such as the accountability periods for tax-incentive projects and tax obligations. Once that period ends, the data is deleted or anonymized.

7. Security

We adopt technical and administrative measures to protect data against unauthorized access, loss or leakage, such as access restricted to staff who need the data, encrypted connections (HTTPS) and staff training. In the event of a security incident that may result in significant risk or harm, we will notify the affected data subjects and Brazil’s National Data Protection Authority (ANPD).

8. Your rights and how to exercise them

Under Article 18 of the LGPD, you may, at any time:

• confirm whether we process your data and access it;
• correct incomplete, inaccurate or outdated data;
• request the anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
• request data portability;
• request the deletion of data processed on the basis of consent;
• find out with whom we share your data;
• be informed of the possibility of not giving consent and the consequences of refusing;
• revoke your consent.

Legal guardians exercise these rights on behalf of children and adolescents.

9. Cookies

We use essential cookies to make the website work and to remember your cookie choice. Google Analytics 4 (audience measurement) is only enabled with your consent. You can change your choice at any time:

Cookie preferences

The map on the Training centers page loads map images from the CARTO or OpenStreetMap service only when you scroll to it. At that point, your browser sends the provider your IP address and the technical data needed to display the map; we do not use this service to build profiles.

10. Updates to this policy

This policy may be updated to reflect changes in the law or in our activities. The current version will always be available on this page, with the date of the last update.

Last updated: October 2026.