In short: the site has no accounts and no forms. Google Analytics runs only if you accept it. Purchases go through Payhip, and PMO4ALL receives only the order data needed to deliver the kit. PMO4ALL does not sell personal data and does not run advertising. Write to info@pmo4all.com to exercise your rights.
1. Controller and contact
PMO4ALL publishes pmo4all.com and the PMO4ALL kit, and decides how the personal data described in this policy is processed. It is the controller under the EU and UK General Data Protection Regulation (GDPR) and the Brazilian General Data Protection Law (LGPD, Law 13,709/2018).
Requests about personal data, including those addressed to the data protection officer (encarregado under the LGPD), go to info@pmo4all.com.
2. Data processed, purposes and legal bases
2.1 Visits to the site
- Data: IP address, browser, operating system, requested page, referring page and time of the request.
- Processor: Cloudflare, the hosting and delivery provider.
- Purpose: deliver the pages, keep the site available and block abuse.
- Legal basis: legitimate interest (GDPR, Article 6(1)(f); LGPD, Article 7, IX).
- Retention: short-term technical logs, deleted under Cloudflare's retention rules.
2.2 Audience measurement
- Data: pages viewed, clicks on the purchase and diagnosis buttons, device type, browser, approximate location and a random identifier stored in a cookie.
- Processor: Google, through Google Analytics 4. It runs only after you accept analytics cookies.
- Purpose: count visits and measure which pages and buttons lead to purchases and diagnoses.
- Legal basis: consent (GDPR, Article 6(1)(a); LGPD, Article 7, I). You can withdraw it at any time.
- Retention: up to 14 months, then deleted by Google Analytics.
- Google signals and advertising personalisation are disabled. Google Analytics 4 does not store IP addresses.
2.3 Cookie choice
- Data: your choice on analytics cookies and the date of the choice.
- Storage: the local storage of your browser. It does not leave your device.
- Purpose: remember the choice and prove that consent was given.
- Legal basis: strictly necessary storage and legitimate interest (GDPR, Article 6(1)(f); LGPD, Article 7, IX).
- Retention: until you clear the storage of your browser.
2.4 Purchases
- Data received by PMO4ALL: name, e-mail address, country, product, amount paid, taxes and order number. Card and bank details stay with Payhip and its payment providers.
- Purpose: deliver the kit, issue receipts, provide support and meet tax and accounting duties.
- Legal basis: performance of a contract (GDPR, Article 6(1)(b); LGPD, Article 7, V) and legal obligation (GDPR, Article 6(1)(c); LGPD, Article 7, II).
- Retention: for the period required by tax and accounting law.
- Marketing: PMO4ALL sends updates only if you opted in at checkout. Every message has an unsubscribe link.
2.5 E-mail to PMO4ALL
- Data: e-mail address, name and the content of the message.
- Purpose: answer the message and follow up on the request.
- Legal basis: legitimate interest, or steps prior to a contract when the message is about a purchase (GDPR, Article 6(1)(b) and (f); LGPD, Article 7, V and IX).
- Retention: up to 2 years after the last message.
3. Processing not carried out
- No user accounts, comments or web forms on the site.
- No sale of personal data and no sharing for cross-context behavioural advertising.
- No advertising cookies or pixels.
- No sensitive personal data.
- No automated decisions with legal or similarly significant effects.
4. Recipients
- Cloudflare, Inc. (United States): hosting and content delivery, as processor.
- Google (Google Analytics 4): audience measurement, as processor, only with consent.
- Payhip Ltd (United Kingdom): sales platform. Payhip and its payment providers process payment data under their own privacy policies.
- Public authorities: when a law or a court order requires disclosure.
5. International transfers
Cloudflare and Google process data in the United States and in other countries where they operate. Payhip processes data in the United Kingdom.
Transfers from the European Economic Area and the United Kingdom rely on adequacy decisions, including the EU–U.S. Data Privacy Framework for certified companies, or on the standard contractual clauses included in each provider's data processing terms.
Transfers from Brazil rely on the mechanisms of Article 33 of the LGPD, including standard contractual clauses.
6. Cookies and local storage
- p4a-cookie-consent: local storage, essential, keeps your cookie choice until you clear it.
- _ga: Google Analytics cookie, analytics, distinguishes visitors, 2 years.
- _ga_<id>: Google Analytics cookie, analytics, keeps the session state, 2 years.
Analytics cookies are set only after you accept them. To withdraw consent, open Cookie settings in the footer and choose Essential only. The site then stops analytics and deletes the Google Analytics cookies on pmo4all.com. Browser settings also allow you to block or delete cookies.
7. External links and share buttons
Links to maturitylab.com, payhip.com and linkedin.com lead to services with their own terms and privacy policies. The share buttons are plain links. No data goes to those services until you click.
8. Your rights
- GDPR and UK GDPR: access, rectification, erasure, restriction, portability, objection to processing based on legitimate interest, and withdrawal of consent at any time without affecting earlier processing.
- LGPD: confirmation of processing, access, correction, anonymisation, blocking or deletion of unnecessary data, portability, deletion of data processed with consent, information on sharing, information on the effects of refusing consent, and withdrawal of consent.
- California residents: right to know, delete and correct personal information. PMO4ALL does not sell or share personal information.
- Complaints: you may lodge a complaint with the data protection authority where you live or work. In Brazil, the authority is the National Data Protection Authority (ANPD).
Send requests to info@pmo4all.com. PMO4ALL may ask for information to confirm your identity and answers within the deadlines of the applicable law.
9. Children
The site and the kit are intended for professionals. PMO4ALL does not knowingly process personal data of children. A parent or guardian who believes a child sent personal data may write to info@pmo4all.com, and the data will be deleted.
10. Security and incidents
The site is served only over HTTPS and has no database of visitors. Order data stays in the Payhip seller account, with access restricted to PMO4ALL.
If a security incident may create a relevant risk to you, PMO4ALL notifies the competent authority and the affected people within the deadlines of the applicable law.
11. Changes to this policy
The version and the effective date appear at the top of this page. A change that widens the use of your data or adds a new cookie category takes effect only after the cookie banner asks for your choice again.