Privacy Policy

Last updated: July 3, 2026

1. Who we are

Kingdom Group is a culture-driven ecosystem of specialized companies. This policy applies to Kingdom Group and its operating companies, including DEVSQUAD DESENVOLVIMENTO DE SOFTWARE LTDA (CNPJ 29.532.478/0001-44), a software development and managed-services company based in Brasília/DF, Brazil. For any privacy matter or data request, contact us at hello@grupokingdom.com. Our Data Protection contact (Encarregado/DPO) is reachable at the same address.

2. What data we process

  • Website and contact data: your name, email, and message content when you contact us.
  • Client engagement data: processed as a data processor on behalf of our clients, strictly under contract and Data Processing Agreement. We do not determine the purposes of client end-user data.
  • Personnel and contractor data: processed as controller for engagement administration.

3. Legal bases

We process personal data under the legal bases of the LGPD (Lei 13.709/2018, Art. 7) and, where applicable, the GDPR (Art. 6): consent, performance of a contract, legitimate interests, and legal obligation, as appropriate to each processing activity.

4. How we protect your data

We apply encryption in transit (TLS) and at rest (KMS), least-privilege access, per-tenant isolation, continuous monitoring (AWS Security Hub and GuardDuty), and a documented incident-response process. We notify the ANPD within 3 business days where required (Resolução CD/ANPD 15/2024), and within 72 hours under the GDPR where applicable. Our information security is managed under an ISO/IEC 27001-aligned management system.

5. Sharing and subprocessors

We use vetted subprocessors under Data Processing Agreements (for example AWS, Google, Vercel, GitLab, and Slack) to operate our services. We do not sell personal data.

6. Your rights and data deletion

You may request confirmation of processing, access, correction, anonymization or deletion, portability, and information about sharing (LGPD Art. 18 / GDPR Chapter III). To exercise any right, including data deletion, email hello@grupokingdom.com with the subject "Data Rights Request". We respond within the legal timeframes.

7. Retention

We retain personal data only as long as necessary for the stated purpose or as required by law, after which it is deleted or anonymized.

8. International transfers

Where data crosses borders, we rely on adequacy decisions or standard contractual safeguards to protect it.

9. Changes to this policy

We post material changes on this page with an updated date. Please review it periodically.