Effective date: November 13, 2026.
This policy explains, in plain language, what personal data Pot Verde (potverde.com) processes, why, with whom, and what rights you have. It is written with Brazil’s Lei Geral de Proteção de Dados (LGPD, Law No. 13,709/2018) in mind and, when a visitor is in the European Economic Area or the United Kingdom, also with the GDPR.
If anything here is unclear, email adm@inpulsocod.com.br.
1. Who the controller is
The controller of personal data processed on this site is:
Jonas Barbosa Ferreira Junio
Website: https://potverde.com
Email: adm@inpulsocod.com.br
If a formal data protection officer (DPO) is appointed later, this page will be updated. Until then, please send data-subject requests to the email above.
2. What data we process
You don’t need an account to read the articles. The data we may process is:
a) Data you send us on purpose. Through the contact form (or an email to adm@inpulsocod.com.br), we may receive your name, email address, subject line, and message, plus anything else you choose to include. If you join the email list to get the free watering guide, we process the data described in section 6.
b) Browsing and device data. Like most sites, our servers and tools may record IP address, browser type, pages viewed, date and time, language, referrer URL, and similar identifiers needed for security, operations and — where we have consent — measurement and advertising.
c) Cookies and similar identifiers. We use first-party cookies and third-party cookies, as described in section 4. Advertising and analytics cookies are only activated with consent collected through our consent management platform (CMP), where the law requires consent.
We don’t ask for national ID numbers, bank details, or health data to use the blog. If you include sensitive information in a message of your own accord, please do so carefully: we will use it only to reply to your request and then apply the retention period below.
3. Why we use the data and on what legal basis
We process data only for legitimate purposes, with an appropriate legal basis:
| Purpose | Examples | Legal basis (LGPD) | Legal basis (GDPR, where it applies) |
|---|---|---|---|
| Answering messages and providing support | Contact form and email | Art. 7, V (steps at the data subject’s request) and, where applicable, Art. 7, I (consent) | Art. 6(1)(b) (steps at your request) or Art. 6(1)(a) (consent) |
| Keeping the site up, safe, and stable | Technical logs, abuse and spam prevention | Art. 7, IX (legitimate interest), balanced against your rights | Art. 6(1)(f) (legitimate interest) |
| Complying with the law | Keeping records the law requires; responding to a valid authority request | Art. 7, II | Art. 6(1)(c) |
| Understanding site use in aggregate (GA4) | Popular pages, traffic sources, approximate region, device | Art. 7, I (consent), when the cookie or identifier is not strictly necessary | Art. 6(1)(a) (consent) |
| Showing ads (Google AdSense and advertising cookies) | Serving, measuring, or frequency-capping ads, and personalizing them when allowed | Art. 7, I (consent) | Art. 6(1)(a) (consent) |
| Sending the free watering guide and blog content | Email list (email address, date, language, and referring page) | Art. 7, I (consent) | Art. 6(1)(a) (consent) |
You can withdraw consent at any time, through the CMP banner, by unsubscribing from the email list, or through the opt-out links below, without affecting the lawfulness of processing that happened before the withdrawal.
4. Cookies, Google AdSense, advertising cookies (including DART), and GA4
Necessary cookies
Some cookies or local storage are needed for the site to work — for example, remembering your CMP choice or keeping a session secure. Those do not depend on advertising consent.
Google Analytics 4 (GA4)
We use Google Analytics 4 to understand, in statistical form, how the site is used (which pages people read, what kind of device they use, and the approximate region traffic comes from). Google may process this data as a processor and, in some operations, under its own terms.
When GA4 is not strictly essential to running the site, it is loaded only if you consent in the CMP. You can refuse or change that choice later, in the banner or cookie settings.
Google AdSense and third-party advertising cookies
Pot Verde plans to use Google AdSense to show ads and help keep the blog running. Advertising partners, including Google, may use cookies and similar identifiers — including advertising cookies historically associated with DART and other ad cookies — to:
- serve ads on the site;
- remember whether you have already seen a particular ad;
- where consent has been given, tailor ads based on visits to this or other sites;
- measure deliveries and clicks.
Those third-party cookies are controlled by the vendors themselves, under their own policies (for Google, the Google Privacy Policy). Non-essential advertising is only turned on with your consent in the CMP, where the law requires it.
How to opt out of or adjust personalized ads:
- Google Ads Settings: https://adssettings.google.com
- Digital Advertising Alliance opt-out (About Ads): https://www.aboutads.info
- Through our CMP banner (“manage cookies” or equivalent), available on the site.
Turning off personalized ads does not mean the site will be ad-free: you may still see less personalized ads, depending on the setup and the provider.
5. Contact form
When you send a message through the form or to adm@inpulsocod.com.br, we use the data to understand the request and reply. We don’t sell that list, and we don’t use the content of your message for advertising.
If the message is a rights request (access, deletion, objection, and so on), we will handle it within the legal time limit and may ask for a reasonable confirmation of identity — only enough so we don’t hand one person’s data to another.
6. Email list and the free watering guide
If you sign up for the free watering guide or join the Pot Verde email list, we process the data below with your consent.
What data we store. We collect and store your email address, the date you signed up, the language of the sign-up (for example, Portuguese or English), and the referring page (the page on the site where you joined). We don’t ask for other data just to send the guide.
Where the data is kept and who receives it. The sign-up is stored in WordPress itself (on the site’s hosting environment) and is also sent to Brevo, which acts as an operator under the LGPD and a processor under the GDPR: it handles this data on our behalf, to deliver the guide and the list emails. Brevo is an email platform that may process data outside Brazil — in particular in the European Union and, depending on how it operates, in other countries. Where there is an international transfer, it relies on your consent and on contractual safeguards and the vendor’s terms. Brevo’s privacy policy is at https://www.brevo.com/legal/privacypolicy/.
Legal basis. Processing the list and sending the guide are based on consent: LGPD, Art. 7, I, and, where the GDPR applies, Art. 6(1)(a). We will not add you to the list without that consent. You may withdraw it at any time, without affecting processing that already took place.
Purpose. We use this data to send the free watering guide and blog content (for example, notices of new Pot Verde guides and articles). We don’t sell the list, and we don’t use the sign-up email for a purpose that doesn’t match what you agreed to when you consented.
Retention. We keep the email on the list until you unsubscribe or ask us to delete it. We also run a clean-up of inactive sign-ups after 24 months without relevant interaction with the emails or the list. After an unsubscribe, a deletion request, or that clean-up, we may keep, for a short additional period, the minimum record needed to show that consent was given and that a leave request was made, or to meet a legal duty — and not to start sending list content again.
How to unsubscribe. Every email from the list includes an unsubscribe link. You can also ask to leave the list or to have your list data deleted by writing to adm@inpulsocod.com.br, and telling us the email address used to sign up. We will handle the request within the legal time limit.
Your rights. The same rights described in the section “Your rights (LGPD and GDPR)” apply to the list: access, correction, deletion, portability where the law grants it, information about sharing, withdrawal of consent, objection where it applies, and the additional GDPR rights, where they apply. To exercise them, use the unsubscribe link, email adm@inpulsocod.com.br (subject line “Direitos do titular” or “Data subject request”), or follow the path in that section. Refusing consent or unsubscribing does not stop you from reading the site; it only means we stop sending the guide and the list emails.
7. Who we share data with
We do not sell your personal data. We may share it with:
- Hosting and site providers (including the WordPress infrastructure and email or anti-spam services for the form), so the site can run;
- Google, as the provider of Analytics and, when enabled, AdSense and advertising technologies;
- Brevo, as operator/processor for the email list and the free watering guide, as described in section 6;
- The consent management platform (CMP), so we can record and honor your choices;
- Public authorities, when we have a legal duty or a valid order.
Some of these providers may process data outside Brazil (for example, in the United States). In those cases we look for an appropriate basis and safeguards — contractual clauses, the vendor’s terms and, where required, your consent. Google describes its practices at https://policies.google.com/privacy.
8. How long we keep data (retention)
We keep data only as long as needed for the purpose, or for the legal retention period, whichever is longer:
- Contact messages: as a rule, up to 24 months after the conversation ends, unless we need to keep them longer to defend a right or comply with the law.
- Email list and free watering guide: until you unsubscribe or ask us to delete the data, with a clean-up of inactive sign-ups after 24 months, as described in section 6.
- CMP consent records: for as long as needed to show that a choice was collected and respected, generally while the consent remains valid and for a reasonable additional evidence period (up to 5 years, unless a more specific legal period applies).
- Technical security logs: the shortest period compatible with security and incident review, as a rule up to 6 months, unless an investigation is underway.
- Analytics and advertising data: according to the period configured in the tool and the consent in force; if you withdraw consent, we stop new collection through those cookies, though the vendor may retain data already collected under its own policy.
When the period ends, we delete or anonymize the data, unless the law requires us to keep it.
9. Consent through the CMP
We use a consent management platform (CMP) to explain cookie categories up front and to record your choice (accept, reject, or customize). Analytics cookies (GA4) and advertising cookies (AdSense and similar) should not fire before acceptance when consent is the legal basis.
You can change your mind at any time by reopening the CMP preferences on the site. Withdrawing consent does not affect earlier processing that had a valid basis.
10. Your rights (LGPD and GDPR)
You may, at any time, in relation to the data we process:
- confirm whether we process your data and access it;
- ask for correction of incomplete, inaccurate, or outdated data;
- ask for anonymization, blocking, or deletion of data that is unnecessary, excessive, or unlawfully processed;
- ask for portability, where the law grants it;
- ask for information about sharing with third parties;
- ask for information about the option not to consent and the consequences of refusal;
- withdraw consent;
- object to processing based on legitimate interest, where that right applies;
- ask for review of automated decisions, if any are introduced (the blog does not currently make automated decisions that significantly affect you);
- under the GDPR, where it applies: also restriction of processing and objection to direct marketing, including profiling used only for that purpose.
To exercise these rights, email adm@inpulsocod.com.br with the subject line “Direitos do titular” or “Data subject request.” We will reply within the legal time limit — as a rule, within 15 days under the LGPD, and within one month under the GDPR, extendable in the cases the law allows.
If you believe the processing was not appropriate, you may lodge a complaint with the competent authority: in Brazil, the Autoridade Nacional de Proteção de Dados (ANPD, https://www.gov.br/anpd); in the EEA, your national data protection authority; in the United Kingdom, the ICO.
11. Children
Pot Verde’s content is general — plants and apartment gardens — and is not directed at children. We do not knowingly collect children’s data to build a profile or serve ads. If a parent or guardian learns that a child has sent us personal data in error, please contact us so we can delete what is under our control.
12. Security
We take reasonable organizational and technical measures to protect data (access control, HTTPS, and standard WordPress and vendor practices). No website is completely immune to incidents. If a relevant incident occurs, we will follow what the law requires, including notification when it applies.
13. Changes to this policy
We may update this page to reflect a change in tools, in the law, or in how the site works. The effective date at the top will be revised. If a change is material, we will post a visible notice on the site or, when it makes sense and we have your email, we will write to you.
14. Contact
Questions about privacy, cookies, or data-subject rights:
Jonas Barbosa Ferreira Junio
adm@inpulsocod.com.br
https://potverde.com