Privacy Policy
1. Data Controller
Sherwin-Williams Brasil Indústria e Comércio Ltda. is the data controller for personal data collected on this website. Address: Av. das Nações Unidas, 12,551, São Paulo, SP, Brazil.
2. Data Collected
We collect data you provide via forms: name, email, company, country, segment, phone, and message. We automatically collect browsing data: IP address, approximate location (country, city, region), browser (user agent), landing page, referrer URL, and campaign parameters (UTM, gclid, fbclid). We use analytics cookies (Google Analytics/Tag Manager). We do not collect sensitive data.
3. Purpose
We use your data to: (a) respond to contact and quote requests; (b) send technical product information; (c) confirm event registrations; (d) improve site experience; (e) digital marketing campaign attribution. We do not use your data for unsolicited marketing.
4. Legal Basis
Data processing is based on legitimate interest for responding to B2B inquiries and on consent when you voluntarily submit a form, expressly agreeing to this policy.
5. Sharing
Your data may be shared with: (a) infrastructure providers (Supabase, Cloudflare) for site storage and delivery; (b) a transactional email service (Resend), used to confirm event and training registrations; (c) analytics tools (Google Analytics) for aggregate usage statistics, and the delivery network's own performance metrics (Cloudflare), which use no cookies and do not identify individual visitors; (d) an IP geolocation service (ipinfo.io), queried server-side to estimate country, city, and region from your IP address. All act as data processors, under contract and on the controller's instructions. We do not sell or share your personal data with third parties for commercial purposes. Some of these providers are based outside Brazil; international transfers follow the safeguards required by the LGPD (Art. 33).
6. Retention
Lead and event registration data is stored for up to 24 months. Browsing data is anonymized after 12 months.
7. Your Rights
You have the right to: (a) confirm data processing; (b) access your data; (c) correct incomplete data; (d) request deletion; (e) data portability; (f) withdraw consent. To exercise your rights: privacy@sherwin-williams-latam.com.
8. Security
We adopt technical measures to protect your data: in-transit encryption (HTTPS/TLS), service-role access control, IP rate limiting, anti-bot protection (honeypot), input sanitization, and security headers (CSP, HSTS, X-Frame-Options).
9. Cookies
This site uses analytics cookies (Google Analytics, _ga, _gid). They are only loaded after you accept them in the banner shown on your first visit. You may decline in the banner itself or revoke consent at any time using the "Revoke cookie consent" button at the bottom of the screen; revoking also erases first-visit attribution data from your device. You can also disable cookies in your browser settings. The delivery network's performance metrics (Cloudflare) use no cookies, store nothing on your device, and do not identify individual visitors — so they do not depend on consent.
10. DPO Contact
For inquiries: privacy@sherwin-williams-latam.com.
11. Updates
This policy may be updated periodically. Last update: September 2026.
See also the Sherwin-Williams corporate policies: