Privacy Policy
Version 1.2.3 — effective from 2026-10-27.
This is a translation of the Privacy Policy in Portuguese; in case of any discrepancy, the Portuguese version prevails, available at logisticaquimica.com/privacidade.html.
Summary: we use your email to send the free materials you request (such as the book The New Era of Chemical Logistics, in English or Portuguese, and the IMO hazard classes poster) and content about chemical logistics, because you asked for them and authorized it. If you use the SOC Generator, we process your registration data (name, business email, WhatsApp, company and CNPJ, the Brazilian company tax ID) to create and protect your account and generate the documents you request; the certificate you upload is processed and discarded, without being stored, unless you choose to report it to help us improve the reading (in that case, we keep it for up to 90 days). For this, we rely on service providers (AWS, Make, Google, Cloudflare, Vercel and Zoho), most of them outside Brazil. On the Case Files pages (in English), the YouTube video loads only if you click to watch; from that click on, Google receives data about your visit, under its own policy. You can request access to, correction or deletion of your data, or unsubscribe, at any time, by emailing contato@logisticaquimica.com.
1. Who is responsible for your data
The controller of the personal data processed on this site is V MORAES DE SOUZA MONTEIRO APOIO LOGISTICO, registered under CNPJ no. 54.443.617/0001-00, based in Santos, São Paulo, Brazil, responsible for the site logisticaquimica.com, maintained by Vinícius Monteiro.
Channel for privacy matters and for exercising your rights: contato@logisticaquimica.com.
2. What this policy applies to
This policy applies to the home page of logisticaquimica.com and its English version (logisticaquimica.com/en/), to the UN number lookup (logisticaquimica.com/numero-onu/ and logisticaquimica.com/en/numero-onu/), to the SOC Generator (logisticaquimica.com/soc/), to the Hazard Manifest channel's Case Files pages, in English (logisticaquimica.com/en/case-files/) (logisticaquimica.com/en/case-files/), to this page and to the forms for sending free materials, in Portuguese or English (such as the book The New Era of Chemical Logistics and the IMO hazard classes poster).
This policy is a translation of the original in Portuguese, available at logisticaquimica.com/privacidade.html. In case of any discrepancy between the two versions, the Portuguese version prevails.
The former address soc.logisticaquimica.com leads to the SOC Generator at logisticaquimica.com/soc/. Use of the SOC Generator is also governed by the SOC Generator Terms of Use (in Portuguese).
It does not apply to the blog (addresses starting with logisticaquimica.com/blog), which runs on a separate system, nor to the Isotank Quotation Hub platform, nor to third-party sites linked from here (such as LinkedIn, WhatsApp and YouTube). Those services have their own rules.
3. What data we process
- Free material forms (such as the book The New Era of Chemical Logistics and the IMO hazard classes poster): your email address.
- Record of your consent: date and time of acceptance, the material requested and the language of the form (Portuguese or English), the version and a verification code (cryptographic hash) of the text you accepted, a request identifier, the result of the anti-bot check (the domain and time of the check) and the delivery status of the material.
- Anti-bot check (Cloudflare Turnstile): to tell people from bots, Cloudflare collects technical signals from your visit, such as IP address, technical characteristics of the connection (TLS fingerprint), browser identification (user agent) and the site key.
- SOC Generator — registration: name, business email, WhatsApp, company name, CNPJ and password. The password is stored in protected form by Amazon Cognito and is never seen by us.
- SOC Generator — acceptance of the terms: the version, the date and time of acceptance and a verification code (cryptographic hash) of the text you accepted.
- SOC Generator — account approval and security: the registration status (under review, approved, rejected or blocked); a cryptographic hash of your device's random identifier (the identifier itself stays only in your browser, see section 12); the confirmation codes sent by email, stored only in encrypted form; the date of device changes; and lists of blocked email domains and CNPJs, with the reason and date of the block.
- SOC Generator — document generation: the ISO tank certificate PDF, the name of the client company, the name of the signatory and the ocean carrier. This data is processed in the server's memory only during generation and discarded right after: we do not store the PDF (except in the optional report, below), the generated document or the text you type. The certificate may contain data about other people or companies; the system reads only the technical data of the tank from it.
- SOC Generator — certificate report (optional): if you choose to report a certificate that the system did not read well, we receive the certificate PDF, the description you write, the selected ocean carrier, the list of fields the system did not find and your account identification (company, CNPJ and email), plus the record that you authorized the submission (date and version of the text). The certificate may contain data about other people or companies; by reporting it, you declare that you may share it with us for this purpose.
- SOC Generator — usage counter: per CNPJ and per month, only the number of documents generated.
- Technical access data: when you open the site, submit the form or use the SOC Generator, the hosting and cloud providers receive technical data from the request, such as IP address, browser, date and time and the page accessed. The operational logs we keep (from the forms and the SOC Generator) do not store your email, your IP, your name, the CNPJ or the content of the documents.
- Direct contact: if you write to us by email or WhatsApp, we process the data in your message in order to reply.
- UN number lookup: the search runs in your own browser; what you type is not sent to us or to third parties. The search text appears in the page address (after "?q="), and if you open or share that address, it reaches the hosting provider like any page accessed.
We do not ask for sensitive personal data (such as health, religion or biometrics).
4. Why we use the data and on what legal basis
| Purpose | Legal basis (LGPD) |
|---|---|
| Sending the free material requested (such as the book The New Era of Chemical Logistics or the IMO hazard classes poster) and content about chemical logistics to your email, in the language of the form you used | Consent (Art. 7, I, and Art. 8) |
| Keeping the record of your consent, to prove that it was given | Regular exercise of rights (Art. 7, VI), considering that the controller bears the burden of proving consent (Art. 8, § 2) |
| Protecting the form and the site against bots, abuse and fraud | Legitimate interest (Art. 7, IX) |
| Replying to messages and handling data subject requests | Compliance with a legal obligation (Art. 7, II) and legitimate interest (Art. 7, IX) |
| SOC Generator: creating and maintaining your account, reviewing and approving the registration, generating the documents you request and sending the service emails (confirmation codes and account notices) | Performance of a contract and preliminary procedures at the request of the data subject (Art. 7, V) |
| SOC Generator: protecting the service against fraud, misuse and account sharing (rejection of free or disposable emails, CNPJ check, block lists, one device per account, anti-bot check) and measuring usage per company | Legitimate interest (Art. 7, IX) |
| SOC Generator: including in the document the signatory name you provide | Legitimate interest (Art. 7, IX) |
| SOC Generator: analyzing the certificate you report and adjusting the service's automatic reading | Legitimate interest (Art. 7, IX) |
| SOC Generator: keeping the record of acceptance of the Terms of Use, to prove that it was given | Regular exercise of rights (Art. 7, VI) |
Providing your email is optional. Without it, or without checking the consent box, the material cannot be sent, because it is delivered by email.
In the SOC Generator, the registration data is required to create the account: without it, the service cannot be used. WhatsApp is used only to contact you about your registration and use of the service, never for advertising.
Legitimate interest in the SOC Generator: we consider these measures necessary to keep access individual and prevent abuse; they use the minimum data (for example, we keep only a hash of the device identifier, without collecting a browser "fingerprint") and are expected by anyone using a service with personal access. You may object to this use through the channel in section 8; since these measures protect the account, objecting may prevent you from using the service.
Signatory name: the name you provide as signatory may belong to another person at your company. By providing it, you confirm that this person knows their name will appear on the document. We use this name only to build the document and do not store it.
Certificate report: reporting is optional, and document generation does not depend on it. We consider that analyzing the reported certificate is necessary to fix the automatic reading, which is in the interest of those who use the service. We use only what is needed for this (the PDF, your description and the account identification, so we can reply), keep it for up to 90 days and do not use it for any other purpose. You may object through the channel in section 8; in that case, we delete the report.
5. Who we share data with
We do not sell your data. To run the site and send the materials, we rely on these service providers (processors), which process the data according to our instructions and their own policies:
| Provider | What it does | Where |
|---|---|---|
| Amazon Web Services (AWS) | Receives the form and stores the sign-up and the consent record. In the SOC Generator: stores accounts and passwords (Amazon Cognito), processes the documents, stores the registration, the acceptance and the usage counter, and sends the service emails (Amazon SES) | United States (Ohio region) |
| Make | Automation that sends the email with the requested material and updates the contact list (not involved in the SOC Generator) | United States |
| Google (Gmail and Google Sheets) | Sending of the email and contact list for the free materials (not involved in the SOC Generator) | United States and other countries where Google maintains infrastructure |
| Cloudflare (Turnstile) | Anti-bot check for the forms and for SOC Generator registration | Global network, headquartered in the United States |
| Vercel | Site hosting and routing of the forms and the SOC Generator to AWS | Global network, headquartered in the United States |
| Zoho (Zoho Mail) | The contato@logisticaquimica.com mailbox, used for support and to receive internal notices of new registrations and device changes and the certificate reports (with the PDF attached) from the SOC Generator | United States |
We may also share data when required by law or by order of a competent authority.
When reviewing SOC Generator registrations, we may manually check the status of the CNPJ in public sources (such as the Brazilian Federal Revenue Service website). In that check, we provide only the CNPJ.
Cloudflare states that, in addition to acting as a processor for the anti-bot check, it uses the signals collected by Turnstile to improve its own bot detection. More information in the Turnstile Privacy Addendum.
Case Files videos (YouTube): on the Case Files pages (logisticaquimica.com/en/case-files/), the video first appears as an image stored on this site, and nothing is sent to YouTube until you click to watch. If you click, the YouTube player loads in privacy-enhanced mode (youtube-nocookie.com) and, from that moment on, Google, which operates YouTube, receives technical data about your visit, such as your IP address, browser and device information, and the address of the page where the video is. Google processes this data as a controller, not as our processor, under the Google Privacy Policy; we do not receive the data it collects in the player. The "Open on YouTube" link and the channel link take you to the YouTube website, which has its own rules.
6. International transfer
Since the providers above store or process data outside Brazil, mainly in the United States, there is an international transfer of data. It takes place to provide the service you requested and is carried out under the cases of Art. 33 of the LGPD. In the SOC Generator, the transfer is necessary to perform the service you contracted (Art. 33, IX, combined with Art. 7, V). If you watch a Case Files video, Google may process data about your visit outside Brazil, under its own policy.
7. How long we keep data
- Email and consent record: 730 days (about 2 years) from each sign-up, with automatic deletion from the database at AWS.
- Copies in the contact list (Google Sheets) and in the automation history (Make): up to 730 days, with manual review and cleanup once a year.
- Operational logs of the form and the SOC Generator: 30 days.
- SOC Generator — account and registration: while the account is active. If the account goes 24 months without access, we notify you by email; without a new access within 30 days, it is deleted.
- SOC Generator — unconfirmed or rejected registration: deleted within 60 days.
- SOC Generator — record of acceptance of the terms: up to 5 years after the account is closed, to prove the acceptance.
- SOC Generator — confirmation codes: valid for 10 minutes and deleted automatically.
- SOC Generator — hash of the device identifier: while the account exists; it is replaced at each device change.
- SOC Generator — usage counter per CNPJ: 25 months.
- SOC Generator — block lists: as long as the block is necessary, reviewed once a year.
- SOC Generator — certificate PDF, generated document and typed text (client company, signatory and ocean carrier): not stored, except in the optional report (below).
- SOC Generator — certificate report (PDF, description and account identification): up to 90 days after the report, or less if the adjustment is completed earlier; after that, they are deleted from the mailbox. The record that the report was made and authorized (date and version of the text, without the PDF) is kept for the same period.
- SOC Generator — internal notices of registration and device change: up to 24 months in the contato@ mailbox, with manual cleanup once a year.
- Email addresses that return a permanent error or a spam complaint: may remain on the Amazon SES suppression list, which prevents new emails to them, until they are removed.
- Messages exchanged with you: for as long as needed to handle your request.
- Turnstile signals and technical data held by providers: according to each provider's policies.
If you withdraw your consent or request deletion, we stop using your email for sending and delete the data, except where the law allows us to keep it (Art. 16 of the LGPD), for example to prove the consent given.
In the SOC Generator, if you request deletion of your account, it is closed and the registration data and certificate reports are deleted, except the record of acceptance of the terms, for the period above.
8. Your rights
Under the LGPD (Art. 18), you may request at any time:
- confirmation that we process your data;
- access to the data;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of the law;
- portability of the data, in accordance with ANPD regulations;
- deletion of data processed on the basis of your consent, except in the cases of Art. 16 of the LGPD;
- information about the entities with which we share data;
- information about the possibility of not giving consent and the consequences of refusing;
- withdrawal of consent;
- objection to processing carried out on a legal basis other than consent, such as legitimate interest, in case of non-compliance with the LGPD (Art. 18, § 2);
- review of decisions made solely on the basis of automated processing (Art. 20).
How to request: send an email to contato@logisticaquimica.com with the subject "Privacy". To protect your data, we may ask that the request come from the same registered email or request a simple identity confirmation. The service is free of charge.
Automated decisions in the SOC Generator: registrations with an email from a free or disposable provider are automatically rejected, by a rule that looks only at the email domain. Registrations with an email from a previously defined partner company are automatically approved (and still go through the confirmation code and the device lock). All other registrations are reviewed and approved or rejected by a person. If you disagree with an automatic rejection, request a review at the same email, with the subject "SOC Review": we will explain the criteria used, respecting commercial and industrial secrets.
Deadlines: confirmation of existence or access to the data is provided in simplified form, immediately, or by a clear and complete statement within 15 days of the request (Art. 19 of the LGPD), observing the deadlines applicable to small-scale processing agents under ANPD Resolution CD/ANPD No. 2/2022. Other requests are handled within the regulatory deadlines.
You may also file a complaint with Brazil's National Data Protection Authority (ANPD).
9. How to unsubscribe (withdraw consent)
You may withdraw your consent at any time, free of charge and easily (Art. 8, § 5, of the LGPD): just reply to any email you received asking to unsubscribe, or write to contato@logisticaquimica.com. Withdrawal does not affect what was done before it.
The SOC Generator account does not depend on consent (see section 4). To close it, request deletion at the same email.
10. Security
We adopt technical and administrative measures to protect the data (Art. 46 of the LGPD), including:
- encrypted connection (HTTPS);
- server-side data validation and anti-bot check;
- access keys kept in a secrets vault;
- database with encryption at rest;
- operational logs without your email and without your IP;
- two-factor authentication to publish changes to the form and SOC Generator servers;
- in the SOC Generator: password managed by Amazon Cognito, email confirmation by code, a new code for each new device (stored only in encrypted form, valid for 10 minutes and with a maximum of 5 attempts) and a notice to the person responsible for the service at each device change;
- in the SOC Generator: certificates and documents processed only in the server's memory, without being stored (the certificate you choose to report goes by email to the person responsible for the service and is deleted within 90 days);
- access of each server function limited to the minimum necessary.
No system is completely immune to failures. If a security incident occurs that may pose a relevant risk or harm, we will make the notifications required by law.
11. Data Protection Officer (DPO)
The controller qualifies as a small-scale processing agent under ANPD Resolution CD/ANPD No. 2/2022, which waives the appointment of a data protection officer (Art. 11) provided there is a communication channel with the data subject. That channel is the email contato@logisticaquimica.com.
12. Cookies and browser storage
This site does not use advertising or audience analytics cookies. The content pages and the free material forms do not store information in your browser's storage, with one exception: the YouTube player on the Case Files pages, after you click, as explained below.
SOC Generator: to work, it stores in your browser:
- a random device identifier, in local storage ("localStorage"), created on the first visit, which allows one device per account. It does not identify you outside the SOC Generator and stays in the browser until you clear your browsing data; after that, the next visit asks for a new code by email;
- your session data (Amazon Cognito tokens) and, during registration, the email you entered until the code is confirmed, in tab storage ("sessionStorage"), deleted when you sign out, confirm the code or close the tab (the email, within 24 hours at most).
These items are strictly necessary for the service you requested and are not used for advertising.
Cloudflare's anti-bot check (Turnstile) collects the technical signals strictly necessary to detect and block bots and may use technical browser features for this, according to Cloudflare's cookie policy. It is loaded only on pages that have a form (the home page, its English version, the UN number lookup and the SOC Generator registration), together with the form.
Case Files (YouTube): before you click to watch, the page loads nothing from YouTube and stores nothing in your browser. After the click, the YouTube player, even in privacy-enhanced mode, may store and read cookies and other items in your browser's storage, from Google domains (such as youtube-nocookie.com and youtube.com), for the purposes described in Google's cookie policy. These items belong to Google, not to this site; you can delete them in your browser settings and, if you prefer, watch the videos directly on YouTube.
The blog (logisticaquimica.com/blog) is a separate system and may use its own cookies.
13. Children and adolescents
The site, the material offered and the SOC Generator are intended for logistics and international trade professionals. We do not knowingly collect data from people under 18. If we identify such a registration, it will be deleted.
14. Changes to this policy
This policy may be updated. The version and effective date appear at the top of the page. The English version is updated together and has the same version number. If a change affects what you authorized, we will ask for a new consent. Changes relevant to SOC Generator users are also announced by email.