Petrol Group

Privacy Policy

Last updated November 9, 2026

This policy explains what personal data Petrol Group collects when you visit this website or contact us, how we use it, who we share it with and how you can exercise your rights. Petrol Group is based in Brazil, so our processing follows the Brazilian General Data Protection Law (LGPD, Law 13,709/2018); section 8 adds information for visitors in the United States.

1. Who is responsible for your data

The data controller is MR GROUP DESENVOLVIMENTO DE IMAGEM LTDA, Brazilian company registration (CNPJ) 19.176.521/0001-22, headquartered in Maringá, Paraná, Brazil, operating under the Petrol Group brand and its companies Petrol Architecture, Petrol Design, Petrol Visual and Petrol Convenience.

For any privacy or personal data matter, email us at contato@petrolgroup.com.br.

2. What data we collect

Data you give us:

In the quote request form: name, email, phone (optional), location, project type, timeline and message.
In the contact form: name, email, phone, city, project type and message.
In the blog newsletter: email.
On WhatsApp, by email or phone: whatever you choose to send in the conversation, such as the station’s location, photos, plans and project details.

Data collected automatically:

Technical browsing data, such as IP address, browser and device type, pages visited, date and time, logged by our hosting server for security.
The page a form was sent from, so we know which service you asked about.
Cookies and similar technologies, as described in section 9 and according to your cookie choice.

We do not ask for sensitive data (such as racial origin, health, religion or biometrics), and we ask you not to send it through our channels.

3. How we use your data and on what legal basis

To answer your request and prepare proposals (name, email, phone, message): steps prior to a contract, at your request (LGPD art. 7, V).
To deliver the projects and services you hire: performance of a contract (art. 7, V).
To issue invoices and meet legal and tax obligations: legal obligation (art. 7, II).
To send the blog newsletter: consent (art. 7, I), which you can withdraw at any time through the unsubscribe link or by emailing us.
To keep the website secure and working (server logs and necessary cookies): legitimate interest (art. 7, IX).
To measure visits and improve the website (analytics cookies): legitimate interest (art. 7, IX), and you can decline at any time in the cookie notice.
To measure our ads and show Petrol Group content on other platforms (marketing cookies): legitimate interest (art. 7, IX), and you can decline at any time in the cookie notice.

We do not sell personal data. We share only what is necessary with:

The group’s companies (Petrol Architecture, Design, Visual and Convenience), to handle your request.
Technology providers working on our behalf: website hosting and delivery (Hostinger and QUIC.cloud), email and spreadsheets (Google), messaging (WhatsApp, by Meta), analytics (Google Analytics and Microsoft Clarity) and advertising (Google, Meta and Pinterest).
Delivery partners (installers, carriers and licensed professionals), when the project you hire requires it.
Public authorities, when required by law or court order.

5. International transfers

We are based in Brazil, and some providers (such as Google, Meta, Microsoft, Pinterest and our hosting company) may store data in other countries, including the United States. These transfers follow article 33 of the LGPD, with providers that adopt contractual clauses and protection standards compatible with Brazilian law.

6. How long we keep it

Inquiries that did not become a contract: up to 24 months after the last conversation, unless you ask us to delete them.
Client data: for the term of the contract and for the legal retention period for tax and contract records (usually 5 years).
Website access logs: 6 months, as required by Brazil’s Internet Civil Framework (Law 12,965/2014).
Cookies: for the period set by each tool (section 9), or until you delete them in your browser.

7. Your rights

You can ask us at any time to:

Confirm whether we process your data and give you access to it.
Correct incomplete, inaccurate or outdated data.
Anonymize, block or delete unnecessary data or data processed unlawfully.
Port your data to another provider.
Delete data processed based on your consent, and withdraw that consent.
Tell you who we share your data with.
Stop a processing activity based on legitimate interest.

To exercise these rights, email contato@petrolgroup.com.br. We reply within 15 days. You can also file a complaint with Brazil’s National Data Protection Authority (ANPD).

8. Visitors in the United States

If you are in the United States, you can ask us to tell you what personal information we hold about you, to correct it and to delete it, by emailing contato@petrolgroup.com.br. We do not sell personal information for money. Some advertising cookies (section 9) may count as “sharing” for targeted advertising under certain state laws; you can opt out at any time in Cookie preferences. We will not treat you differently for exercising these rights.

9. Cookies

Cookies are small files stored in your browser. We use three types:

Necessary (always on): store your cookie choice and allow our server and content delivery network to run the site securely.
Analytics: Google Analytics and Microsoft Clarity count visits and page views in aggregate and show how the site is used, so we can improve it.
Marketing: Meta (Facebook and Instagram), Google and Pinterest measure our ads and let us show Petrol Group content on those platforms.

Analytics and marketing cookies stay on unless you decline them. You can decline or change your choice at any time in Cookie preferences (also in the footer of every page) or in your browser settings. When you decline, we stop loading the marketing tools and Microsoft Clarity, and Google Analytics works without cookies.

10. Security

We use technical and administrative measures to protect your data, such as encrypted connections (HTTPS), password-restricted access to internal systems and providers with recognized security standards. No system is completely immune to incidents; if one occurs with a relevant risk, we will notify the affected people and the authorities as required by law.

11. Children

This website is intended for businesses and professionals in the fuel retail industry and is not directed to anyone under 18. We do not knowingly collect data from children.

12. Changes to this policy

We may update this policy to reflect changes to the website, our services or the law. The date of the last update is shown at the top of this page. Significant changes will be announced on the website.