Contact us

Privacy policy

Last updated: September 2026

This is a translation provided for convenience. In the event of any discrepancy, the Portuguese version prevails.

1. Who we are

This policy applies to www.cardconsig.com.br and to the services of CARDCONSIG LTDA, CNPJ 57.970.878/0001-77, headquartered at Alameda Rio Negro, 503, Sala 2020, Alphaville Centro Industrial e Empresarial, Barueri/SP, CEP 06454-000 ("CardConsig"), as controller of personal data.

2. Data we process

  • Registration: name, CPF (Brazilian tax ID), identity document, date of birth, address, phone and e-mail.
  • Employment: employer, employee ID, salary and payroll margin, provided by the partner company.
  • Biometric: facial image for identity verification at application, sensitive data used exclusively for fraud prevention.
  • Transactional: purchases, statements, payments and payroll deductions.
  • Technical: IP address, access date and time and device information, for security.
  • Contact form: name, e-mail, phone, company and message.

3. Purposes and legal bases

  • Reviewing applications, issuing and managing the card (performance of contract).
  • Registering and processing payroll deductions with the partner company (performance of contract).
  • Verifying identity and preventing fraud (fraud prevention and cardholder security).
  • Complying with legal and regulatory obligations, including anti-money laundering (legal obligation).
  • Answering messages sent through the contact form (consent).

4. Sharing

  • The card issuer and payment processor.
  • The card network, for transaction authorization and settlement.
  • The employer, only as necessary for payroll deduction.
  • Identity verification, anti-fraud, customer service and e-mail providers, under confidentiality agreements.
  • Public authorities, when required by law.

CardConsig does not sell personal data.

5. Cookies and reCAPTCHA

This site does not use advertising cookies or browsing analytics tools. The contact page uses Google reCAPTCHA to protect the form against bots. reCAPTCHA collects technical device and browsing data, processed by Google under its own Privacy Policy.

6. International transfer

Some providers, such as Google, may process data outside Brazil. In such cases, we adopt the safeguards required by the LGPD.

7. Security and retention

Data is protected by encryption in transit, access control and monitoring. Card data is handled in a PCI DSS certified environment. Data is retained for as long as needed for the purposes of this policy and legal retention periods.

8. Your rights

You may request confirmation of processing, access, correction, anonymization, portability, deletion, information about sharing and withdrawal of consent, under article 18 of Law 13,709/2018, and may file a complaint with Brazil’s National Data Protection Authority (ANPD).

9. Data protection officer

Requests regarding personal data and contact with the data protection officer: privacidade@cardconsig.com.br.

10. Changes

This policy may be updated. The date of the last update is shown at the top of this page.