Privacy Policy
How Blu Energias handles the data of people who visit this site — what is collected, why, for how long, and how you stay in control of it.
1. Who we are
This site is maintained by Blu Energias Renováveis Ltda, registered under Brazilian company number (CNPJ) 50.604.656/0001-91, with its registered office at R. Mateus Leme, 1970 — Centro Cívico, Curitiba/PR · CEP 80530-010. The company manages distributed generation plants and offers solar energy by subscription. This is an institutional site: it presents the service, explains the model and lets you estimate savings.
For anything concerning personal data, including exercising the rights described below, the controller's channel is contato@sejaenergiablu.com.br.
2. What data we handle
Browsing data. Pages visited, time spent, device and browser type, and where the visit came from. It is collected through cookies and analytics tools, with your consent, and used in aggregate to understand how the site is being used.
Registration form data. On the /cadastro page we collect, when you fill it in and submit: first and last name of the energy account holder, email, phone/WhatsApp, utility, average consumption in kWh (optional) and the energy bill you attach (optional). We also record the date of submission and the browser used, for security and abuse prevention.
- Purpose — to assess whether you can join the service, calculate the savings against your real bill and get back to you with the answer.
- Legal basis — your consent, given when you accept the form (art. 7, I of the LGPD, Brazil's data protection law), and the preliminary steps relating to a contract to which you are a party (art. 7, V).
- Storage — Supabase database and file storage, on infrastructure with encrypted traffic. The bill sits in a private repository: it is not reachable by public URL, and our team opens it through a temporary, individual link.
- Access — restricted to the Blu Energias team involved in the assessment and in supporting you.
- Retention — we keep the data for as long as the assessment and the commercial relationship last and, after that, for as long as legal obligations require. You can ask for deletion at any time through the channel in section 5.
The registration form does not ask for national ID numbers, banking details or passwords. Commercial proposal requests still happen in a separate environment (proposta.sejaenergiablu.app.br), which has a privacy policy of its own. And the simulator on this page calculates everything inside your own browser: the figure you type there is never sent to us or stored by us.
4. Sharing
We do not sell, rent or transfer personal data. Data is processed by service providers strictly to run this site and under Blu Energias's instructions: hosting and content delivery, database and file storage (Supabase), the form's anti-robot check (Cloudflare Turnstile) and sending the registration notification email to our team (Resend).
We may also share information where a legal or regulatory obligation applies, or in the regular exercise of rights.
5. Your rights
Brazil's General Data Protection Law (Lei nº 13.709/2018) grants you, as the data subject, the following rights:
- Confirmation that your data is being processed
- Access to the data we handle
- Correction of incomplete, inaccurate or out-of-date data
- Anonymisation, blocking or deletion of data that is unnecessary or handled in breach of the law
- Portability of the data to another provider, on express request
- Deletion of data processed on the basis of your consent
- Information about the parties with whom we share data
- Information about your option to withhold consent and what follows from refusing
- Withdrawal of consent, at any time
To exercise any of them, write to contato@sejaenergiablu.com.br. We reply within the timeframes set by law.
6. Retention and security
Browsing data is kept in aggregate form for as long as the purposes described in this policy require, or for as long as a legal obligation demands. Cookies last for the periods shown in the table above.
We apply appropriate technical and administrative measures to protect data against unauthorised access, loss, alteration or improper disclosure — including encrypted traffic and access control over the infrastructure.
7. Changes to this policy
This policy may be updated to reflect changes to the site, to the tools we use or to applicable law. The date of the last update is recorded at the foot of this page. Material changes will be announced on this same page.
See also the Terms of Use.
Last updated: September 24, 2026
In case of divergence, the Portuguese version prevails.