This policy covers the Hubber site. Hubber Connect has its own, at hubbermarketing.com/connect/privacidade, and the Orlando video production page has its own, at reels.hubbermarketing.com.
1. Who is responsible for your data
Hubber, a Grupo Cinnamon company, is the controller of the personal data processed on this site. That means Hubber decides what to collect and why, and Hubber is who you can hold to it.
For any matter in this policy, including access or deletion requests, write to privacidade@hubbermarketing.com.
2. What we collect
What you type into the forms
We only collect what you write. We do not buy lists and we do not look up your information elsewhere.
In the Growth Diagnostic form, for companies: name, company, your role in it, website, industry, revenue range, team size, marketing budget, and the open answers about where the business stands, plus email and phone.
In the plastic surgery practices form (/plastic/): full name, email and phone number, plus, if you choose, your role, website or Instagram, goals and a short note. Please do not include patient information. We use your phone number only to call or text you about this request, never for promotional messages.
When you arrive through a campaign link, campaign labels (UTM parameters), campaign, ad set and ad identifiers and the Meta click identifier (fbclid), if present, travel with the form to our CRM so we know where the request came from.
What the server records on its own
As on any website, the server hosting Hubber records technical access data: IP address, browser type, date and time and the pages visited. Those records exist to keep the site running and to defend it from abuse.
3. What we use it for, and on what legal basis
Brazil's General Data Protection Law requires a legal basis for each use. Ours are these:
- To assess your application and get in touch
- Legal basis: your consent, given in the box you check before sending the form. Without it, the form does not send.
- To keep the site running and secure
- Legal basis: legitimate interest, to operate the service and contain abuse and fraud.
What you write in the form does not become advertising: we do not send your name, email, phone, answers or any patient information to Meta or other ad platforms, and we do not use advanced matching.
4. Who we share it with
Hubber does not sell personal data. Sharing is limited to these cases:
- CRM tool. Applications are stored in JSYNQ, the system where the team tracks each contact.
- Hosting. The site and the form handling run on Vercel, on servers outside Brazil. That means there is an international transfer of data, carried out with the safeguards the law requires.
- Meta, only if you accept marketing cookies. On the plastic surgery practices page, the Meta Pixel can receive technical browser information, the page address and two events: a page visit and, after our CRM confirms your request was received, a standard inquiry event with fixed labels. No form answers are included. Saying no does not stop the form from working.
- Google Fonts. The site's fonts are loaded from Google's servers. In that request your browser hands your IP address to Google, as on any site using the service. The plastic surgery practices page serves its fonts from our own server instead.
- Authorities. Where there is a court order or a legal obligation.
5. Cookies and tracking
Most of this site does not use cookies or audience measurement. The exception is the plastic surgery practices page (/plastic/ and /plastic/pt/), where the Meta Pixel stays off until you choose Accept marketing cookies in the notice. We do not run Google Analytics.
When allowed, Meta may set the _fbp and _fbc cookies to connect visits with ads. We store your choice in your browser and keep an opaque event identifier for the current tab session, so the same request is never counted twice.
You can reject or withdraw your choice below. Withdrawing stops the pixel on this site and removes its Meta cookies here; it does not undo information already sent to Meta. The form works either way.
Two pages outside this site do use measurement, each with its own policy and its own notice, where you can opt out of the measurement: Hubber Connect and the Orlando video page.
6. How long we keep it
We keep your application while it is under review and, if it becomes a partnership, for as long as the relationship lasts and for the period the law requires afterwards.
If there is no fit, we keep the record so we do not assess the same profile twice from scratch, until you ask us to delete it. Just write to us.
7. Your rights
The law guarantees you, at any time and free of charge:
- Confirmation and access
- To know whether we process your data and to receive a copy of it.
- Correction
- To correct incomplete, outdated or incorrect data.
- Deletion
- To ask us to erase your data, except what the law requires us to keep.
- Portability
- To receive your data in a format you can take to another provider.
- Information about sharing
- To know which companies we have shared your data with.
- Withdrawal of consent
- To withdraw the permission you gave. From then on we stop using the data for that purpose, without undoing what was already done lawfully.
To exercise any of them, write to privacidade@hubbermarketing.com. We reply within 15 days. You may also complain to Brazil's National Data Protection Authority.
8. Security
The site runs over HTTPS. Access to the system where applications are stored is restricted to the team that needs it, and integration keys are kept on the server, never in the code your browser downloads.
No system is infallible. If an incident happens that could put you at risk, we notify you and the authority, as the law requires.
9. People under 18
The forms on this site are for people 18 and over. We do not knowingly collect data from children or teenagers. If it happens by mistake, write to us and we delete it.
10. Changes to this policy
When this policy changes, the date at the top changes with it. If the change matters to someone who has already applied, we notify them at the email address they left.