MD3Lab

Privacy policy

Last updated: October 24, 2026.

This policy explains how MD3Lab handles personal data on the md3lab.com website, in accordance with Brazil's General Data Protection Law (Law 13,709/2018, the LGPD). If you have any questions, write to [email protected].

Who we are

MD3Lab is a digital product studio (websites, software, platforms, mobile apps and UX/UI) based at Rua Augusta, 101 — Cj 1303 — Consolação, São Paulo (SP). For the data handled on this website, MD3Lab is the controller.

The projects we build for clients have their own rules, set out in contract. This policy covers this website only.

What data we handle

  • Contact: name, e-mail, phone number (if you provide it) and the message you send through the website form (see "Contact form" below), plus anything you write to us by e-mail, phone or social media.
  • Visit source: the campaign parameters in the URL (such as utm_source and utm_campaign), ad click identifiers (gclid, gbraid, wbraid, fbclid and msclkid), the first page you visited and the website that referred you.
  • Usage and technical data: IP address, device, browser and pages visited, logged by the server and by measurement tools (see "Cookies and browser storage").

What we use the data for

  • Replying to you and preparing proposals and quotes.
  • Talking to you about your project by the e-mail or phone you provided.
  • Knowing which campaign or website brought the contact, to invest better in marketing.
  • Keeping the website secure, blocking automated (bot) submissions and meeting legal obligations.
  • Understanding how the website is used in order to improve it.

We do not sell personal data.

Contact form

When you submit the website form, what you filled in (name, e-mail, phone and message) goes through Web3Forms, a form delivery service, and reaches the MD3Lab team by e-mail. It is sent along with the visit source (the campaign parameters and click identifiers described above, the first page you visited and the referring website), which the website keeps in your browser only for the duration of the visit.

We use this data to reply, to discuss your project and to know which campaign brought the contact.

Who we share data with

Only with providers that help us run the website, and only as needed:

  • website hosting;
  • Web3Forms, to deliver form messages by e-mail;
  • our e-mail provider, where messages are stored;
  • Google (Google Tag Manager, Google Analytics and Google Ads) and Meta (Facebook and Instagram), for measurement and advertising.

Some of these providers store data outside Brazil, especially in the United States, with the safeguards required by the LGPD. We also share data when required by law or by an authority.

Cookies and browser storage

  • Necessary: for the duration of the visit only (sessionStorage), the website keeps the visit source in your browser, to attach it to the form, and whether the opening animation has already played. This data is erased when you close the tab.
  • Measurement and advertising: the website uses Google Tag Manager to load Google Analytics, which counts visits and shows which pages are read, and Google and Meta advertising tools, which record when a visit came from an ad and whether it turned into a contact. These tools use their own cookies, under Google's and Meta's policies.

You can delete or block cookies in your browser settings at any time. The website's fonts and images are served by the website itself, with no third-party requests.

How long we keep data

Form messages and other contacts are kept for as long as needed to handle your request, carry out the proposal or project and maintain the relationship, or until you ask us to delete them. After that, we delete the data, except what the law requires us to keep, such as access logs and tax records.

Your rights

You may request, at any time: confirmation that we process your data, access, correction, anonymization, blocking or deletion, portability, information about who we share it with, and withdrawal of your consent. Send your request to [email protected].

Security

The website uses an encrypted connection (HTTPS), and access to the messages we receive is restricted to the MD3Lab team. No system is completely secure: if a relevant incident occurs, we will notify the affected people and the authorities, as required by law.

Minors

The website and our services are aimed at businesses and professionals. We do not knowingly collect data from people under 18.

Changes to this policy

We may update this policy. The date at the top shows the version in force.

Contact