Privacy Policy
Last updated: 8 June 2026 · Effective: 8 June 2026
1Who we are
This Privacy Policy explains how NavviPal Inc. ("NavviPal", "we", "us") collects, uses, and protects personal data when you use our website at www.navvipal.com and our platform and professional services (together, the "Services").
NavviPal provides corporate services, including company formation, registered address, local director, company secretary, and accounting and tax support, across Brazil, Mexico, Colombia, Chile, Peru, Argentina, Costa Rica, Panama, and Ecuador.
For the purposes of applicable data-protection law, NavviPal acts as a data controller for personal data we collect about website visitors and account users, and as a data processor for personal data we handle on behalf of business clients in delivering the Services. Where we act as processor, our handling is governed by our Data Processing Agreement.
Our registered address is 1111B South Governors Avenue, Apartment, Dover, DE 19904, United States. Where required, our data protection contact is [email protected].
2What data we collect
We collect the following categories of personal data:
| Category | Examples |
|---|---|
| Identity & contact | Name, email, phone, job title, company name |
| Account data | Login credentials, role and permission settings, organisation membership |
| Service data | Information you provide to deliver formation, filing, and compliance services, which may include details about company officers, directors, and beneficial owners |
| Billing data | Billing party, invoicing details, transaction records. Card data is handled by our payment processor, not stored by us. |
| Usage & technical | IP address, device and browser type, pages viewed, actions taken, approximate location |
| Communications | Messages, support requests, and correspondence with our team |
Some service data may include information about third parties, for example, individuals you nominate as directors or signatories. You are responsible for ensuring you have a lawful basis to share that information with us.
3How and why we use it
- To create and manage your account and organisation, and to apply role-based access controls
- To deliver the Services, including company formation, registered address, filings, and accounting and tax support
- To communicate with you about your account, tasks, deadlines, and support requests
- To process billing and payments
- To improve, secure, and operate the Services and prevent fraud or misuse
- To comply with legal, regulatory, and anti-money-laundering / know-your-customer (KYC) obligations
- To send marketing communications where you have consented or where otherwise permitted by law. You can opt out at any time.
4Legal bases for processing
Where data-protection law, such as the EU/UK GDPR or Brazil's LGPD, requires a legal basis, we rely on:
- Contract - to provide the Services you have requested
- Legitimate interests - to operate, secure, and improve our business, balanced against your rights
- Legal obligation - to meet regulatory, tax, and KYC/AML requirements
- Consent - for marketing and non-essential cookies, which you can withdraw at any time
6International transfers
Because we operate across multiple countries, your data may be transferred to and processed in jurisdictions other than your own. Where we transfer data internationally, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms recognised under applicable law.
7How long we keep it
We retain personal data only as long as necessary for the purposes described above, including to meet legal, accounting, tax, and regulatory retention requirements, which in some jurisdictions can extend for several years after a service ends. When data is no longer needed, we delete or anonymise it.
8Your rights
Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data; to data portability; and to withdraw consent. You also have the right to lodge a complaint with your local data-protection authority, for example, the relevant data protection authority in your jurisdiction, such as Brazil's ANPD or the supervisory authority in your EU member state.
To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law.
9Security
We use technical and organisational measures, including access controls, encryption in transit, and role-based permissions, to protect personal data. No system is fully secure, so we cannot guarantee absolute security, but we work to protect your data and to notify you and regulators of breaches where the law requires.
11Changes to this policy
We may update this policy from time to time. We will post the revised version here with an updated "Last updated" date and, where changes are significant, notify you directly.
12Contact us
For any questions about this policy or your personal data, contact NavviPal Inc. at [email protected] or 1111B South Governors Avenue, Apartment, Dover, DE 19904, United States.