PRIVACY POLICY

1. WHO WE ARE

53.673.021 PAULA JUVENAL DE OLIVEIRA is responsible for the processing of the personal data described in this Policy, acting as the data controller, where applicable.

Data controller: 53.673.021 PAULA JUVENAL DE OLIVEIRA

CNPJ: 53.673.021/0001-34

Email: info@fourbridgesassessoria.com

Data Protection Officer: Julia Leocadio Rodrigues

Data Protection Officer's Email: julia@fourbridgesassessoria.com

2. WHAT PERSONAL DATA WE MAY COLLECT

Depending on how you interact with us, we may collect different categories of personal data, including:

3. HOW WE COLLECT DATA

Personal data may be collected through:

• forms made available on our website;
• contact or inquiry resquests;
• communications made by email;
• WhatsApp or other communication channels made available by the company;
• the engagement or use of our services;
• cookies and similar technologies;
• analytics and security tools used on our website;
• other interactions carried out directly with the company

4. PURPOSES FOR WHICH WE USE DATA

We will not use personal data for purposes that are incompatible with those communicated to the data subject or with applicable law

Personal data may be processed for the following purposes, as applicable:

• responding to requests, questions, and messages;
• conducting consultations and preliminary assessments;
• providing requested or contacted services;
• contacting clients and prospective clients;
• providing information related to our services;
• administering and improving our website;
• understanding how users use our website;
• maintaining security and preventing fraudulent or abusive activies;
• complying with legal and regulatory obligations;
• exercising or defending rights in administrative, judicial, or arbitration proceedings;
• sending commercial communications, when permitted by applicable law and when an appropriate legal basis exists;
• fulfilling other legitimate purposes that are compatible with those communicated to the data subject.

5. LEGAL BASES FOR PROCESSING

The processing of personal data will be carried out based on one or more of the legal bases provided for under applicable law.

When processing is based on consent, the data subject may withdraw such consent at any time, subject to the consequences and limitations provided for under applicable law.

In Brazil, as applicable, we may rely on the legal bases provided for under Law No. 13,709/2018 (Brazilian General Data Protection Law – LGPD), including:

• the provision of consent by the data subject;
• compliance with a lega or regulatory obligation;
• the performance of a contract or of a preliminary procedures related to a contract;
• exercício rights;
• protection of life or physical safety;
• credit protection, where applicable;
• legitimate interest, when the legal requirements are met;
• other grounds provided for under applicable law.

6. SHARING OF PERSONAL DATA

When third parties process personal data on our behalf, we will seek to establish appropriate contractual and technical measures to protect such data, as required by applicable law.

We may share personal data, when necessary and in accordance with applicable law, with:

• services providers and technology vendors;
• hosting, storage, and infrastructure providers;
• communication and customer service platforms;
• customer relationship management (CRM) tools;
• website analytics and security providers;
• professional service providers, when necessary to provide the services;
• public authorities or government agencies, when required or authorized by law;
• third parties when sharing is necessary to comply with a legal obligation, protect rights, or prevent fraud, abuse, or security risks.

7. INTERNATIONAL DATA TRANSFERS

As a company that provides services internationally and uses certain providers and technologies that may be located in different countries, personal data may be transferred or accessed internationally.

When an international transfer is subject to the LGPD, it will be carried out in accordance with the applicable legal and regulatory requirements, including the mechanisms provided for international transfers of personal data.

Depending on the operation, data may be transferred to countries that provide an adequate level of protection or through transfer mechanisms recognized under applicable law, including contractual clauses or other appropriate safeguards.

When required by applicable law, we will provide additional information regarding the transfer, including its purpose, destination countries, recipients involved, safeguards adopted, and the means available for the exercise of the data subject's rights.

8. DATA STORAGE AND RETENTION

Personal data will be stored for the period necessary to fulfill the purposes described in this Policy, comply with legal or regulatory obligations, exercise or defend rights, and for other legitimate purposes permitted by applicable law.

When personal data is no longer necessary and there is no legal basis for retaining it, the data will be deleted, anonymized, or otherwise processed in accordance with applicable law.

Retention periods may vary depending on:

• the purpose of the processing;
• the nature of the data;
• the existence of a contractual relationship;
• legal or regulatory obligations;
• the need to exercise or defend rights;
• other applicable requirements.

DATA SECURITY

We adopt reasonable and appropriate technical and administrative measures to protect personal data against unauthorized access and against accidental or unlawful destruction, loss, alteration, communication, or disclosure.

Security measures are assessed considering the nature of the data being processed, the purposes of the processing, the risks involved, and applicable best practices.

Although we adopt measures designed to protect personal data, no electronic system or transmission of data over the internet can be considered completely secure.

DATA SUBJECT RIGHTS

Under applicable law, data subjects may exercise certain rights in relation to their personal data.

The ANPD also recognizes these rights and provides guidance to data subjects regarding the procedures for exercising them.

Data subjects located in other jurisdictions may have additional rights provided for under the data protection laws applicable to their circumstances.

In Brazil, the LGPD provides, among others, rights relating to:

• confirmation of the existence of processing;
• access to personal data;
• correction of incomplete, inaccurate, or outdated data;
• anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in violation of applicable law;
• data portability, subject to applicable regulations;
• deletion of data processed based on consent, subject to legally permitted data retention requirements;
• information about public and private entities with which the data has been shared;
• information about public and private entities with which the data has been shared;
• withdrawal of consent;
• objection to certain processing activies carried out under the circumstances provided for in the LGPD;
• review of decisions made exclusively on the basis of automated processing, in the cases provided for by law.

11. HOW TO EXERCISE YOUR RIGHTS

To exercise your rights or clarify any questions regarding the processing of your personal data, please contact us:

Email: info@fourbridgesassessoria.com

To protect personal data and prevent fraudulent requests, we may request information reasonably necessary to verify the identity of the requester, always within the limits of applicable law.

We will respond to requests within the timeframes established by applicable law.

COOKIES AND SIMILAR TCHNOLOGIES

This website does not use non-essential cookies, advertising cookies, or tracking technologies to monitor user behavior.

The website may use technologies that are strictly necessary for its operation, where applicable. These technologies are not used to create user profiles or conduct behavioral advertising.

If additional cookies or tracking technologies are introduced in the future, this Cookie Policy will be updated and, when required by applicable law, user consent will be obtained before such technologies are used.

13. THIRD-PARTY SERVICES AND LINKS

Currently, the Four Bridges Assessoria Internacional website does not use integrations with third-party services or provide links to external websites or platforms.

If third-party services, tools, integrations, or links are incorporated into the website in the future, this Privacy Policy will be updated to inform users of such changes and, where applicable, the necessary measures will be adopted regarding the processing of personal data and the obtaining of consent.

14. CHILDREN'S DATA

Our services are not intentionally directed at children, except where the processing of minors' data is necessary for a legitimate purpose and is subject to the protections provided for under applicable law.

When the processing involves the personal data of children or adolescents, applicable legal requirements will be observed, including those relating to the best interests of the child or adolescent.

15. COMMERCIAL COMMUNICATIONS

Four Bridges Assessoria Internacional may occasionally send commercial communications or information related to its services, news, opportunities, or relevant content, including through electronic communication channels.

When sending commercial communications requires consent, such consent will be obtained in advance and may be withdrawn by the user at any time.

Users may also request not to receive future commercial communications by contacting us or, where available, using the unsubscribe mechanism indicated in the communication itself.

16. DATA PROCESSING FOR IMMIGRATION AND CONSULTING SERVICES

When you request or engage immigration, international mobility, or consulting services, you may need to provide additional information so that we can assess your situation and provide the contracted services.

The nature of this information will depend on the service requested and may include information related to your personal, professional, family, immigration, or documentary circumstances.

We will only request and process the data necessary for the corresponding purposes and in accordance with applicable law.

When the service requires the sharing of information with public authorities, consulates, government agencies, professionals, or other third parties, such sharing will take place when necessary and on the basis of the applicable legal basis.

17. CHANGES TO THIS POLICY

This Privacy Policy may be updated periodically to reflect changes to our services, data processing practices, technologies used, or legal and regulatory requirements.

When material changes are made, we may take additional measures to inform data subjects, as required by applicable law.

The most recent version will always be available on our website.

Last updated: September 29, 2026