GDPR Compliance Statement

Effective Date: October 7, 2025
Company: Jackaloop Comunicação LTDA
Address: Rua Passeio dos Ipês, 320 – Parque Faber Castell 2, São Carlos – SP, 13561-385, Brazil
Websites: thejackaloop.com | jackaloop.com.br
Contact: bruno@thejackaloop.com

1. Our Commitment

Jackaloop is committed to protecting your personal data and respecting your privacy, wherever you are located.
We follow the principles of the EU General Data Protection Regulation (GDPR) to ensure transparency, fairness, and accountability in how we process information.

This document explains your rights under GDPR and how we protect your data when you interact with our company.

2. Lawful Basis for Processing

We process personal data only when we have a clear legal reason to do so, including:

Consent: when you subscribe, contact us, or download free materials.
Contract: when you buy our services, courses, or products.
Legal obligation: when required by tax or consumer laws.
Legitimate interest: to improve our services, secure our systems, or send updates to existing clients.

You can withdraw your consent at any time by contacting us at bruno@thejackaloop.com.

3. Data Collected

Depending on how you interact with our websites or services, we may collect:

Name, email, phone number, and company details.
Billing and payment data (handled securely by Hotmart or Stripe).
Technical information (browser, IP address, device type).
Usage data (page views, session time, clicks).
Communication data (messages, chat logs, and support requests).

We do not collect or store sensitive data (like political opinions, religious beliefs, or biometric data).

4. How We Protect Your Data

Data is stored on secure servers with restricted access.
All transfers use encrypted connections (SSL/TLS).
Only authorized team members can access your information.
We regularly review security procedures and vendor compliance.

If a data breach ever occurs, we’ll notify affected users as required by law.

5. Your Rights Under GDPR

If you are an EU or EEA resident, you have the right to:

Access your data and receive a copy.
Rectify incorrect or incomplete data.
Delete your data (“right to be forgotten”).
Restrict how we process your data.
Object to processing for marketing or analytics.
Data portability – receive your data in a structured format.
Withdraw consent at any time.

To exercise these rights, email bruno@thejackaloop.com with the subject line: “GDPR Request”.

We will respond within 30 days as required by law.

6. International Data Transfers

Because Jackaloop is based in Brazil and uses third-party providers (Google, Meta, Hotmart, etc.), your data may be transferred outside the EU.

We ensure that all partners comply with GDPR through appropriate legal safeguards such as Standard Contractual Clauses (SCCs) or equivalent agreements.

7. Data Retention

We keep personal data only for as long as necessary to:

Deliver our services and maintain customer accounts.
Comply with legal and tax obligations.
Resolve disputes or enforce agreements.

After this period, data is securely deleted or anonymized.

8. Third-Party Processors

We only work with partners who respect privacy laws.
Our key data processors include:

Hotmart (payments, affiliates)
Stripe (payments)
Google Analytics / Tag Manager (performance analytics)
Meta (Facebook & Instagram) (advertising analytics)
Zapier / Manychat (automation and communication)

Each of these companies provides its own GDPR compliance documentation.

9. Contact for Data Protection Inquiries

If you have questions about this GDPR statement or want to exercise your rights, contact our Data Protection Officer (DPO):

📧 Email: bruno@thejackaloop.com
📍 Attn: Data Protection Officer – Jackaloop Comunicação LTDA

If you are not satisfied with our response, you may file a complaint with your local Data Protection Authority (DPA) in the EU.

10. Updates

We may update this statement periodically to reflect legal or technical changes.
When we do, we’ll update the “Effective Date” above and publish the new version on our websites.