← Back to site

LGPD Compliance

Our commitment to the LGPD, the Brazilian General Data Protection Law (Law 13,709/2018).

Last updated: August 10, 2026
HEDGER International declares that it complies with the LGPD — the Brazilian General Data Protection Law (Law 13,709/2018) — and adopts the measures required to ensure the security, transparency and rights of data subjects.

1. Principles we follow

Data processing at HEDGER follows the principles of the LGPD:

  • Purpose: we collect data for legitimate, specific and disclosed purposes;
  • Suitability: the data is compatible with the stated purpose;
  • Necessity: we collect only the minimum necessary;
  • Free access: data subjects can consult their data at any time;
  • Data quality: we keep data accurate and up to date;
  • Transparency: we clearly explain how we process data;
  • Security: we adopt technical measures to protect data;
  • Prevention: we act preventively against harm;
  • Non-discrimination: we do not use data for discriminatory purposes;
  • Accountability: we demonstrate compliance with the rules.

2. Technical and organizational measures adopted

  • Encryption in transit (HTTPS/TLS) across the entire site and forms;
  • Electronic record of consent (date, time, IP) as legal evidence;
  • Restricted access controls for stored personal data;
  • Log protection through server rules (.htaccess) against external access;
  • Server-side validation on all forms, in addition to browser validation;
  • Defined retention policy — data kept only for as long as necessary;
  • Periodic review of security and privacy practices.

3. Data subject rights

HEDGER fully respects the rights set out in Art. 18 of the LGPD, detailed in our Privacy Policy. Data subjects may exercise them at any time via our Data Protection Officer's e-mail: hedger@hedgerinternational.com.

4. Data Protection Officer (DPO)

Pursuant to Art. 41 of the LGPD, HEDGER has appointed a person responsible for relations with data subjects and with the Brazilian National Data Protection Authority (ANPD). Contact channel: hedger@hedgerinternational.com.

5. Security incidents

In the event of a security incident that may create relevant risk to the rights and freedoms of data subjects, HEDGER will notify the ANPD and the affected data subjects in a timely manner, in accordance with Art. 48 of the LGPD.

6. Brazilian National Data Protection Authority (ANPD)

If you believe your rights have not been respected, you may file a complaint with the ANPD through the website www.gov.br/anpd.

7. Contact channels