EN 
PT Privacy Policy
This Privacy Policy (“Privacy Policy”) applies to individuals (data subjects) who interact or have interacted with VILA NOVA PARTNERS CONSULTORIA LTDA., registered with CNPJ/ME under No. 45.754.910/0001-06 (“Vila Nova”). Its purpose is to clarify our practices regarding the privacy of information provided by Data Subjects—whether candidates, clients, or visitors who contact us through the Platform—as well as to demonstrate our commitment to information security best practices and transparency to safeguard your privacy and protect your personal data.
Vila Nova’s purpose is to help organizations and leadership teams build healthier, more sustainable business environments by advising clients and partners in finding the best leaders for each challenge.
The terms set forth in this Privacy Policy, accessible at https://vilanovapartners.com.br/en/ (“Platform”), apply to Vila Nova’s Services, extending solely to Data Subjects participating in our Projects, clients and partners who maintain a relationship with us, and Visitors browsing our Platform.
Should you wish to contact Vila Nova for inquiries regarding support for our Services and Projects, you may reach out through the “Contact” channel available on the Platform. If you have questions regarding Data Processing or privacy, or wish to exercise your rights as a Data Subject, please contact our Data Protection Officer (DPO) at contato@vilanovapartners.com.br. contato@vilanovapartners.com.br.
01
Definitions
This Privacy Policy complies with the guidelines of the Brazilian General Data Protection Law (“LGPD”) – Law No. 13,709/2018, and other applicable legislation; therefore, the following definitions and descriptions shall apply:
- “Privacy Policy” or “Policy”: informs Data Subjects how Vila Nova safeguards personal data, how we ensure data security, what rights Data Subjects hold, and the procedures for exercising these rights.
- “Data Subject” or “Visitor”: the natural person to whom the Personal Data refers; clients, candidates, and website visitors, when referenced collectively, are designated as “Data Subjects”.
- “Personal Data”: any information relating to an identified or identifiable natural person (Data Subject), namely any data that, individually or combined with other information, can identify an individual.
- “Platform”: the digital platform accessible at https://vilanovapartners.com.br/en/.
- “Services”: executive search, leadership advisory, and consulting services provided by Vila Nova to its clients or partners.
- “Projects”: executive search and leadership assignments conducted by Vila Nova in which interested candidates may participate provided they possess the requisite professional qualifications and leadership competencies.
- “Processing”: any operation performed upon Personal Data, including collection, production, receipt, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, elimination, evaluation or control of information, modification, communication, transfer, dissemination, or extraction.
- “Data Protection Officer” or “DPO”: the person appointed by Vila Nova to serve as the communication channel between the data controller, the data subjects, and the National Data Protection Authority (ANPD).
02
How Data Is Collected
Vila Nova uses the collected data solely for the purposes described in this Privacy Policy or in specific Consent terms established for each Project, which are duly communicated to the participating candidate.
To deliver our Services with excellence, we require certain Personal Data from Data Subjects interested in participating in our Projects, and such data will be Processed strictly for that purpose.
For Data Subjects interested in participating in our Projects, we process the data specified in the respective consent agreement signed by the candidate; generally, this includes:
- Full name
- Email address
- Telephone number
- Academic background and educational credentials
- Professional objectives and career expectations
- Leadership skills, competencies, and professional qualifications
- Professional references provided by third parties who wish to share their feedback
- Public domain and professional background search results
- Any additional information that the Data Subject wishes to share with Vila Nova
The scope of Personal Data collected and processed may vary depending on the specific Project, and any such variation will be clearly communicated to the Data Subject.
From third parties providing professional references or feedback regarding a candidate:
- Full name
- Email address
- Telephone number
- Professional reference or evaluation provided
From our corporate clients and partners, we typically collect:
- Full name
- Email address
- Telephone number
- Tax Identification Number (CPF)
- Corporate title/position
- Signature
Vila Nova does not collect personal information automatically through the Platform; data is only collected when a Visitor voluntarily submits an inquiry via the Contact form, specifically:
- Full name
- Email address
- Telephone number
- Title/Company
- Message to Vila Nova
It is the responsibility of the Data Subject to ensure the accuracy of the provided information and to exercise their applicable rights under the General Data Protection Law.
03
Our Cookies
Cookies are small text files or pieces of information downloaded to the computer, smartphone, or internet-enabled device of visitors and Data Subjects accessing domains and websites operated by Vila Nova. Cookies store, read, and execute data required to retain user preferences and settings.
Vila Nova collects only strictly necessary cookies essential to enable navigation across our applications, ensure access to all features, and maintain basic functionality and security in an anonymized manner. Without these cookies, our website may experience degraded performance or fail to function properly.
To manage your browser cookies, you may configure your preferences directly within your browser settings, such as Safari, Chrome, Firefox, Microsoft Edge, and iOS.
04
How Data Is Processed
The security of data pertaining to our Data Subjects is an absolute priority. We continuously refine our internal processes and adopt industry-leading information security practices to safeguard all personal data in our custody.
Personal Data provided by Data Subjects is shared with trusted partners solely for the operation and execution of Services provided by Vila Nova, strictly in accordance with the pre-established purposes set forth in this Policy or in specific Project Consent Terms.
Vila Nova processes your Personal Data for the following purposes:
- To deliver and fulfill contractual obligations arising from Vila Nova’s professional Services
- To evaluate professional and personal qualifications for the execution of executive search Projects and Advisory Services
- To contact individuals designated by the Data Subject to obtain professional reference checks, where applicable
- To present formal offer letters to selected candidates, where applicable
- To respond promptly and comprehensively to inquiries and requests from Data Subjects concerning privacy and data protection
- To safeguard Vila Nova’s rights and fulfill legal obligations in compliance with Brazilian legislation
- To maintain accurate contact records for communications by email or telephone
- To comply with court orders, regulatory mandates, or administrative requests issued by competent authorities, where applicable.
Should any material change occur regarding the purposes for which Data Subjects’ personal data is processed, individuals will be notified upon accessing the Platform, pursuant to the provisions of this Privacy Policy.
05
Why Vila Nova Shares Your Data
The use, access, and sharing of data collected by Vila Nova are conducted strictly within the legitimate business purposes outlined in this Policy. Vila Nova’s professionals, who receive continuous data protection training, are granted access only to the personal data strictly necessary for executing our executive search and advisory Projects on a case-by-case basis.
A substantial portion of the collected data is processed through enterprise SaaS systems for infrastructure support and maintenance, hosted in secure environments with strict logical segregation of duties and access permissions.
Data sharing with service providers occurs solely to enable Vila Nova to deliver its professional Services. Accordingly, Vila Nova may share Personal Data for the following purposes:
- Drafting and executing contractual instruments
- Data storage and cloud hosting services provided by leading international technology partners, such as Microsoft, within localized data centers without unauthorized cross-border transfers
- Specialized executive search management platforms, such as Invenias;
- Corporate clients with active search assignments, provided the position matches the candidate’s professional executive profile
- Legal, judicial, or governmental authorities to comply with court orders, regulatory inquiries, or statutory mandates
06
Data Subject Requests
Under the Brazilian General Data Protection Law (LGPD) – Law No. 13,709/18, Data Subjects may submit the following requests:
- Access to Personal Data: grants the Data Subject the right to receive a copy of all Personal Data held in our records.
- Confirmation of Data Processing: grants confirmation as to whether Vila Nova is actively Processing the individual’s Personal Data.
- Rectification or Correction: allows the Data Subject to request correction, update, or completion of inaccurate, incomplete, or outdated data.
- Right to Erasure / Deletion: permits the request for deletion of excessive, inaccurate, or unlawfully processed data.
- Right to Object: allows the Data Subject to object to specific Processing activities conducted without their direct consent, subject to statutory limits.
- Right to Restrict Processing: enables the marking of stored Personal Data to limit future Processing activities.
- Data Portability: provides the Data Subject’s personal data in a structured, commonly used format for transfer to another service provider upon request.
- Revocation of Consent: candidates may withdraw consent previously granted to Vila Nova, without retroactive effect. In such cases, processing will cease and the candidate will no longer be eligible to participate in active Projects, as we cannot deliver executive search services to our required standards without processing candidate credentials.
Vila Nova may utilize all legitimate verification measures to authenticate the identity of individuals submitting requests, ensuring data security and preventing unauthorized disclosures.
Vila Nova retains Personal Data as necessary to fulfill its legitimate business purposes, including compliance with applicable statutory, regulatory, and legal obligations.
Vila Nova is committed to making every reasonable effort to satisfy applicable erasure requests. However, where data is indispensable to the delivery of our Services or participation in executive search assignments, the Data Subject’s candidacy in ongoing Projects will necessarily be concluded.
Vila Nova may archive personal data in a dormant state, without active processing, to comply with statutory retention mandates, exercise legal rights, or defend against administrative or judicial claims.
07
Privacy Channel
The Data Protection Officer (DPO) is the designated individual appointed by Vila Nova to serve as the direct communication liaison between the data controller, Data Subjects, and the National Data Protection Authority (ANPD).
Should you have questions regarding your data protection rights or wish to submit a formal request, please contact our Data Protection Officer (DPO) at contato@vilanovapartners.com.br. contato@vilanovapartners.com.br.
Please note that supplementary identity verification information may be requested to substantiate the authenticity of the requester’s identity.
All privacy inquiries, complaints, and formal requests will be evaluated and answered within 7 (seven) business days. This timeframe may be reasonably extended depending on the complexity of the matter, in which case the requester will be duly notified.
08
Security of Your Personal Data
Vila Nova consistently applies its best efforts and technical controls to safeguard the privacy and integrity of Data Subjects’ Personal Data. However, external factors beyond our reasonable control—such as third-party security compromises or sophisticated malicious attacks—mean absolute security cannot be unconditionally guaranteed.
In the event of a confirmed security incident affecting Vila Nova’s databases that poses significant risk or material damage to Data Subjects, we are committed to promptly notifying the affected individuals and the National Data Protection Authority (ANPD) in accordance with the law.
Our data handling and information security protocols are subject to continuous assessment and refinement. Vila Nova’s specialists regularly review internal governance frameworks to effectively preempt and mitigate emerging cybersecurity threats.
Our enduring objective is to provide an intrinsically secure Platform. Consequently, in processing all collected information, Vila Nova employs systems structured to meet stringent security, transparency, good governance standards, and the core principles enshrined in the Brazilian General Data Protection Law (LGPD).
Should you detect any anomalous or suspicious activity that may compromise data security on our Platform, please notify our Data Protection Officer immediately at contato@vilanovapartners.com.br.
09
Changes to This Privacy Policy
Innovation is foundational to Vila Nova’s day-to-day operations and service delivery. As we continuously enhance our executive advisory capabilities, we may update this Privacy Policy from time to time at our sole discretion. Any such updates will be communicated through the Vila Nova Platform.
The latest version of this Privacy Policy is permanently accessible at https://vilanovapartners.com.br/en/. https://vilanovapartners.com.br/.
The Data Subject acknowledges having read, understood, and agreed to all terms, conditions, and commitments set forth in this Privacy Policy.
São Paulo, SP, Brazil — effective upon access, utilization of the Platform, and acceptance of terms.
Last updated: June 2026. junho de 2026.
