Layers that protect your data

Topsoil: who answers for the data

The party deciding what happens to information handled here is WR POCOS ARTESIANOS LTDA, CNPJ 48.332.169/0001-75, based at Núcleo Rural Alexandre Gusmão, Gleba 02, Chácara 45, Reserva A, Brazlândia, Brasília, DF, CEP 72701-997, Brazil. Brazil's Law 13.709/2018 has a technical name for that seat: controller.

For anything on this page, write to contato@easywholeweek.com; the phone line +55 (61) 9692-1369 picks up as well.

Clay: what gets held

Nobody opens an account, logs in or fills a cart here. So only three thin channels bring data our way:

• the message you send by e-mail, including the one the home page form drafts in your own mail program, with your name, where the plot is, what the water is for and anything else you add;
• a phone call or voicemail, carrying the caller's number;
• the log lines the server writes by itself whenever someone opens a page: which IP knocked, at what second, which address it wanted and what browser name it gave.

The page lettering is downloaded from a Google server, and that server learns the visitor's IP while sending it. We ask for no ID document, banking details or health information.

Sand: where information seeps to, and why

What you send is used to reply, book a visit, put together a well proposal or set aside counter supplies, and to keep the history of a job once it is hired. The legal footing changes case by case: preparations you requested before signing, carrying out that contract, a legal or tax duty and, for the logs, the company's legitimate interest in having the site online and protected.

Nothing is sold, rented or swapped. Information leaves the company only when a third party needs it for the service to happen: the e-mail provider and the site's hosting, the accounting office when an invoice is issued, or an authority demanding it on legal grounds.

Laterite: cookies and outside pages

This site writes no cookies of its own and runs no visitor analytics tool. The hosting may use technical means to block abusive traffic. Tapping the e-mail address or the number hands things over to the app on your phone or computer, under its maker's rules.

Fractured rock: how long data stays

A conversation that never became a well or a purchase is thrown out once it has sat idle for a year. Where a well was drilled or goods were sold, the data travels with the tax and contract records for the stretch of time the law says they must be kept. Server logs fade out on the hosting's routine, which tends to clear them after some months.

Our inbox opens only for the staff replying to requests; a password guards it, plus a second login step whenever the provider supports one.

Aquifer: the requests within your reach

The law hands you a list of requests, and every one of them travels through the same mailbox:

• find out whether anything of yours is stored with us, and get a copy;
• have a name, number or address put right if it went in wrong;
• make anonymous, freeze or wipe whatever no longer serves a purpose;
• move your data to some other supplier, readable on their side;
• learn whom we passed any of your information to;
• undo a permission you gave earlier.

Before releasing data, we might ask a question or two to be sure it really is you.

A reply is sent inside 15 business days (dias úteis). Unhappy with it? Brazil's National Data Protection Authority (ANPD) takes grievances through the gov.br/anpd portal.

Basement rock: who picks up, and when this page moves

The role of data protection officer is filled by the management of WR Poços Artesianos, who read contato@easywholeweek.com.

Has the way we deal with data shifted? The policy gets rewritten right away, and the month shown at the top follows along.