Privacy Policy
Last updated: October 7, 2026 · This is a courtesy translation; in case of divergence, the Portuguese version prevails.
This policy explains how Orbite Consulting handles personal data in its executive search, recruitment and outplacement activities, and how you can exercise the rights provided by the Brazilian General Data Protection Law — LGPD (Law No. 13,709/2018).
Who the controller is
Orbite Consulting, based in São Paulo, Brazil, is the controller of the personal data processed on this site and on the Orbite platform. For any matter related to personal data, the channel is contato@orbitconsulting.com.br.
What data we collect
- Companies and leaders: name, work email, company, phone and the information about the role you describe in the briefing form.
- Candidates and professionals: contact details, professional history, education, salary expectations and CV information sent by you, resulting from interviews or obtained from public professional sources, such as profiles on professional networks and company websites.
- Technical browsing data: information required for the operation and security of the site, collected by our hosting infrastructure.
What we use it for
- Responding to your contact and preparing the briefing conversation.
- Running recruitment and selection processes: market mapping, profile assessment, shortlist presentation and follow-up through to the hire.
- Maintaining an active talent pool, to present future opportunities compatible with your profile.
- Complying with legal, contractual and regulatory obligations.
Page and conversion metrics
Only after you allow metrics, we record page visits, solution clicks, form starts and submissions, confirmed contacts and video playback (start, progress and completion), and agent demonstration interactions (start, source view and handoff preview). We store fixed page, solution and device categories and a random session identifier per tab, renewed after 30 minutes of inactivity. With your permission, we also use Google Analytics 4 to measure audience and traffic sources. We store controlled source and medium categories and approved campaign names; no names, emails, field content, arbitrary URL parameters or complete referring URLs are sent to Google or our own collector. Unrecognized campaigns are discarded. Google processes audience data under its privacy policy; advertising features and Google Signals remain disabled. Conversion events are stored on Cloudflare infrastructure for up to 90 days; tests are separated from results. Declining preserves access to the site. You can withdraw permission or revisit your choice using metric preferences.
Legal bases
We process data based on your consent, when you provide it explicitly (for example, when submitting the form on this site or registering in our talent pool), on the performance of contracts with client companies, on compliance with legal obligations and on legitimate interest for recruitment activities, always limited to what is necessary and compatible with your expectations.
Who we share it with
Data of candidates in an active process is shared with the company that commissioned the search, to the extent necessary for the hiring decision. We also use technology suppliers that act as processors on our behalf, such as hosting, database, email and scheduling services. We do not sell personal data and we do not share it for third-party advertising.
Confidentiality of processes
Confidential searches are run with restricted access on the platform. Information about replacements, restructurings and roles not yet announced is treated in secrecy, and access is limited to the people involved in the decision.
How long we keep it
Contact and selection-process data is kept for as long as necessary for the purposes above and for compliance with legal obligations. Talent-pool profiles are kept while there is a legitimate interest in presenting opportunities, and are reviewed periodically. You can request deletion at any time.
Your rights
LGPD guarantees you the right to confirm the existence of processing, access your data, correct incomplete or outdated data, request anonymization, blocking or deletion of unnecessary data, request portability, obtain information about sharing, revoke consent and object to processing you consider irregular.
To exercise any of these rights, write to contato@orbitconsulting.com.br. We will respond as quickly as possible, and may request information to confirm your identity before fulfilling the request.
Security
We adopt technical and administrative measures to protect personal data against unauthorized access, loss and misuse, including role-based access control on the platform, encrypted transmission and activity logging. No system is fully immune to incidents; if a relevant event occurs that may pose risk to data subjects, we will notify those affected and the competent authority.
Changes to this policy
We may update this policy to reflect changes in our services or in legislation. The update date at the top of this page indicates the version in force.
← Back to the home page