Privacy notice

Who is responsible

The data controller is Master Timm – Global Solutions (Master Timm), in São Paulo, SP, Brazil. Contact: contato@mastertimm.com.br.

What the form collects

• Name, e-mail and message (required) and company (optional).
• The subject, when you reach the form from a service page: it becomes the first line of the message.
• The language of the page and the site the form was sent from.
• The IP address of the connection, used only for the anti-spam check (it is not included in the e-mail we receive).

What we use it for

• To reply to your request: the data reaches the contato@mastertimm.com.br mailbox by e-mail, with your address as the reply-to.
• To confirm we received it: we send the address you gave a confirmation with the next steps, at most one a day to the same address. It does not repeat the content of your message or your name.
• To protect the form against spam and abuse, with the Cloudflare Turnstile check and a limit on attempts.
• We do not add your data to a newsletter, a mailing list or a marketing database.

Who processes the data

• Netlify: hosts the site, limits the number of requests per IP address and runs the function that receives the form and keeps the counters.
• Cloudflare Turnstile: checks that the submission comes from a person. The check runs in your browser, and the server confirms the result with Cloudflare, sending the IP address.
• Resend: delivers the e-mail with your request and the confirmation sent to you.
• Google Workspace: Master Timm's mailbox, where the request arrives and is answered.

Attempt limit and logs

• To limit repeated submissions, we store a salted hash of the IP address (for IPv6, of its /64 block) with an attempt counter that applies to a 10-minute window. The IP address itself is not stored in that counter.
• To send at most one confirmation a day to the same address, we store a salted hash of the e-mail address with a counter valid until 00:00 UTC. The e-mail address itself is not stored in that counter.
• The function's technical logs contain no name, e-mail, message or IP address.

Cookies and trackers

• The site uses no advertising cookies and no ad trackers.
• Fonts are served by the site itself, with no requests to Google Fonts.

Your requests

You can ask for access to the data you sent, or for its deletion, by writing to contato@mastertimm.com.br. Use the same address for questions about this notice.

If the form starts collecting other data or using another service, this notice changes with it.