Legal

Privacy Policy

Last updated: March 12, 2026 · Effective immediately

01 Introduction

M.S.D MAQUINAS LTDA ("MSD Máquinas," "we," "us," or "our"), registered under CNPJ 47.852.161/0001-77, is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your data when you engage our manufacturing services, purchase equipment or parts, visit our website, or communicate with our team.

We comply with the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados — LGPD, Law No. 13,709/2018), the Brazilian Civil Code, and applicable industrial regulations including NR-12 (Safety in Machinery and Equipment), ABNT technical standards for industrial machinery, and INMETRO certification requirements where applicable.

02 Data Controller

Company: M.S.D MAQUINAS LTDA
CNPJ: 47.852.161/0001-77
Address: R. Rio Santa Maria, 92, Bela Vista, Aracruz – ES, 29192-204, Brasil
Contact: contact@msdmaquinas.com.br

03 Data We Collect

We may collect the following categories of personal data:

CategoryExamplesPurpose
Identity DataFull name, CPF/CNPJ, position/titleContracts, invoicing, warranty
Contact DataEmail, phone, business addressCommunication, delivery coordination
Financial DataPayment method, billing, credit termsInvoicing, payment processing
Project DataTechnical specs, drawings, production requirementsEngineering, manufacturing
Technical DataIP address, browser, device infoSecurity, website analytics
Operational DataProduction environment, existing equipment, process detailsCustom machine design

Technical & Operational Information: Custom machinery design requires detailed knowledge of your production environment — including process specifications, existing equipment layouts, production volumes, material properties, and operational constraints. This information is treated as confidential industrial data, protected by strict NDA obligations in addition to LGPD requirements. Technical specifications and custom engineering designs developed for your project remain your intellectual property as defined in our manufacturing agreements.

04 How We Use Data

Engineering & Design: To develop custom machinery designs, perform engineering calculations, create CAD/CAM drawings, conduct FEA simulations, and produce manufacturing specifications tailored to your production requirements.

Manufacturing & Quality: To manage production scheduling, material procurement, CNC programming, assembly coordination, quality inspection, and testing documentation for your equipment or parts order.

Sales & Contracts: To prepare technical proposals, execute manufacturing contracts, manage milestone-based payment schedules, issue invoices (Nota Fiscal), and maintain project records.

Installation & Commissioning: To coordinate equipment delivery, on-site installation, commissioning, operator training, and NR-12 safety documentation.

After-Sales Support: To manage warranty claims, schedule preventive maintenance, provide technical support, source replacement parts, and maintain equipment service histories.

Communication: To send project updates, delivery schedules, maintenance reminders, and with your consent, new capability announcements and technical bulletins.

Legal Compliance: To comply with Nota Fiscal issuance, tax obligations, NR-12 safety certification documentation, INMETRO requirements, and applicable warranty legislation.

05 Legal Basis

In accordance with Article 7 of the LGPD, we process your data under the following legal bases:

Contract Performance: For executing manufacturing contracts, delivering equipment, managing installations, providing warranty service, and fulfilling all contractual obligations.

Legal Obligation: For Nota Fiscal issuance, tax compliance, NR-12 safety documentation, INMETRO certification records, and product liability documentation.

Consent: For marketing communications, technical newsletters, and non-essential cookies.

Legitimate Interest: For quality improvement using anonymized manufacturing data, service optimization, engineering knowledge development, and client relationship management, provided these do not override your fundamental rights.

06 Data Sharing

We do not sell, rent, or trade your personal information. We may share data only under these circumstances:

Component Suppliers: Technical specifications shared with specialized component suppliers (motors, drives, sensors, controls) strictly limited to the data necessary for component procurement. Your identity and commercial terms are never disclosed.

Installation Partners: When on-site installation requires local technical support, relevant project data may be shared with certified installation partners under NDAs.

Certification Bodies: Technical documentation shared with INMETRO or other certification bodies when equipment requires formal certification or type approval.

Payment Processors: Secure financial institutions for payment processing.

Service Providers: Trusted third parties assisting with CAD/CAM software platforms, cloud storage, website hosting, and analytics, bound by data protection agreements.

Legal Authorities: When required by law, court order, or governmental authority, including tax reporting and workplace safety inspections (MTE/NR-12).

Custom engineering designs, production specifications, and process details are treated as strictly confidential industrial information. They are protected by NDAs and are never shared with competitors, other clients, or any unauthorized party. All component suppliers receive only the minimum technical data required for their specific component — never the complete machine design.

07 Data Retention

Manufacturing project files & drawings: Minimum 10 years from delivery (product liability and warranty). NR-12 safety documentation: Lifetime of the machine (safety compliance). Invoice & tax records: Minimum 5 years. Contract records: Duration of warranty plus 10 years. Maintenance & service records: Duration of equipment lifecycle. Technical proposals (not executed): 2 years from proposal date. Marketing consent: Until withdrawn. Website analytics: Maximum 26 months in aggregated form.

Industrial machinery has operational lifespans measured in decades. Consequently, engineering documentation, safety records, and service histories are retained for significantly longer periods than typical commercial data — this is essential for product safety, ongoing maintenance support, and regulatory compliance.

08 Your Rights Under LGPD

Confirmation & Access: Confirm whether we process your data and access a copy, including project documentation and service records.

Correction: Request correction of incomplete, inaccurate, or outdated personal data. Technical engineering documents are subject to formal revision control procedures.

Anonymization, Blocking, or Deletion: Request anonymization, blocking, or deletion of non-essential data. NR-12 safety documentation and product liability records cannot be deleted during the machine's operational lifecycle.

Data Portability: Request transfer of your data, including engineering deliverables, in a structured format as specified in your manufacturing agreement.

Consent Withdrawal: Withdraw consent at any time for non-essential processing such as marketing.

Objection: Object to processing based on legitimate interest.

To exercise these rights, contact us at contact@msdmaquinas.com.br. We will respond within 15 business days.

09 Cookies

Essential Cookies: Required for core website functionality and quote request forms.

Analytics Cookies: Help us understand visitor behavior and popular service categories.

Marketing Cookies: Used to deliver relevant industrial content, activated only with consent.

You can manage cookie preferences through your browser settings at any time.

10 Data Security

We implement comprehensive security measures including SSL/TLS encryption for all website interactions, encrypted storage for engineering files and project documentation with version control, role-based access controls limiting project data to assigned engineering and production personnel, secure CAD/CAM workstations with access logging, regular security assessments, employee training on data protection, industrial confidentiality, and trade secret handling, physical security at our manufacturing facility with restricted access to engineering offices and server rooms, and secure destruction of prototype materials and rejected parts.

Engineering drawings and custom machine specifications receive enhanced protection through dedicated secure file systems with per-project access controls, audit trails, and NDA-governed access protocols. Client process data is segregated by project and never cross-referenced between different clients.

11 International Transfers

If your data is transferred outside of Brazil (for example, through cloud-hosted CAD platforms, international component procurement, or engineering collaboration tools), we ensure appropriate safeguards per Chapter V of the LGPD. For projects involving international clients or imported components, relevant technical data may be shared cross-border with your informed consent and under appropriate contractual protections.

12 Children's Privacy

Our industrial manufacturing services are exclusively B2B professional services. We do not knowingly collect personal data from individuals under 18. If we become aware that data from a minor has been collected, we will take immediate steps to delete it.

13 Policy Changes

We may update this Privacy Policy periodically. Significant changes will be communicated through our website, email, or direct client correspondence. The "Last updated" date will always reflect the most recent revision.

14 Contact Us

For privacy questions, project data requests, or to exercise your data rights:

M.S.D MAQUINAS LTDA
R. Rio Santa Maria, 92
Bela Vista, Aracruz – ES, 29192-204, Brasil
Email: contact@msdmaquinas.com.br
CNPJ: 47.852.161/0001-77

You also have the right to file a complaint with the Brazilian National Data Protection Authority (ANPD — Autoridade Nacional de Proteção de Dados) at www.gov.br/anpd if you believe your data protection rights have been violated.