Privacy & Data-Source Statement
How LatSouth handles visitor and customer data (no cookies, no ad pixels), where its company data comes from, and how to ask for a record to be removed.
Last updated: 2026-10-25 · LatSouth · São Paulo — Brazil · hello@latsouth.com
This statement covers two things:
- The personal data we handle about you when you visit latsouth.com, download a sample, buy, or write to us.
- Where our company data comes from, and how to ask us to remove a record.
1. Who we are
- LatSouth is an independent data studio based in São Paulo — Brazil. It publishes data about companies (legal entities) from official registries in Brazil, Mexico, Chile, Colombia, Peru, Argentina and Ecuador.
- For the purposes of Brazil's LGPD and similar laws, the controller is the operator of LatSouth identified on your invoice.
- Contact: hello@latsouth.com.
2. Data about visitors and customers
| When | What we receive | Why | Kept for |
|---|---|---|---|
| You browse latsouth.com | Our host (Cloudflare Pages) processes standard technical data (IP address, user agent, requested URL) to serve and protect the site. For traffic counts we use only Cloudflare Web Analytics, which sets no cookies and builds no visitor profile. We run no advertising pixels and no third-party tracking | security, delivery and aggregate traffic statistics (legitimate interest) | per Cloudflare's standard logs |
| You download a free sample | nothing: samples are direct links, with no form and no e-mail required | — | — |
| You buy on our checkout (Payhip, PayPal) | the checkout provider collects your name, e-mail, billing details and payment data, and shares with us the order, name, e-mail and country. We never see card numbers | to deliver the file, invoice and support you (performance of a contract) and to keep tax records (legal obligation) | order and tax records: as long as tax law requires, typically 5–10 years |
| You e-mail us or ask for a quote | your e-mail, name, company and message | to answer and prepare the quote (pre-contract steps / legitimate interest) | up to 24 months after the last contact, unless you become a customer |
| You use our Apify actors | Apify processes your account and run data under its own terms; we see run inputs and outputs, needed to operate the actor | to provide the service | per Apify's retention |
| We write to your company (B2B outreach) | the company name, its public role mailbox (e.g. sales@), the public signal we referred to (e.g. a job post URL) and the send log. Never a named person's mailbox | B2B legitimate interest, assessed in writing; opt-out in every message | until you opt out; then only the suppression entry, so we never write again |
We do not sell or rent visitor or customer data. Processors we use: Cloudflare (hosting, e-mail routing), Payhip and PayPal (checkout), Apify (actors), Zoho (mailbox) and, when used, Wise (payments). Some are outside your country. Each has its own privacy terms and standard safeguards for international transfers.
Your rights. Depending on your country (LGPD in Brazil, GDPR/UK GDPR, CCPA and the Latin American laws listed in §4), you can ask for:
- access, correction, deletion, portability or restriction;
- objection to processing based on legitimate interest;
- information about who we share data with.
Write to hello@latsouth.com. We answer within 48 hours and complete requests within 15 days (LGPD art. 19). You can also complain to your data-protection authority (in Brazil, the ANPD).
3. Where our company data comes from
We publish company data only. Every record comes from an official bulk open-data file downloaded from the agency's own server, with a byte-level manifest and the extraction date (data_as_of) on every row:
| Country / product | Source | Licence |
|---|---|---|
| Brazil | Receita Federal (CNPJ open data) · ANEEL (distributed generation) · ANVISA (operating authorisations, product registrations) · Anatel (broadband accesses) · IBAMA (CTF/APP) · Banco Central, CVM, ANS (licensed institutions) · DATASUS/CNES (health facilities) · PNCP (public contracts) | Brazilian federal open data (Receita, ANVISA, Anatel catalogued CC BY 4.0 on dados.gov.br); ODbL 1.0 (ANEEL, BCB, CVM); public domain (IBAMA) |
| Mexico | INEGI, DENUE | INEGI Términos de Libre Uso |
| Chile | SII nómina de empresas; Registro de Empresas y Sociedades | CC BY 4.0 (RES); SII: confirmation requested |
| Colombia | RUES (Confecámaras); SECOP II | CC BY-SA 4.0 |
| Peru | SUNAT Padrón RUC | ODC-BY 1.0 |
| Argentina | Registro Nacional de Sociedades | CC BY 4.0 |
| Ecuador | SRI Catastro RUC | CC BY 4.0 |
The only web input is Brazil Verified Contacts. For each Brazilian company with a verified website, we read its own homepage once (no crawling, no logins, no social-network scraping) and keep only:
- company role mailboxes on its own domain;
- company phones;
- company social pages.
Each value carries its source URL and date. Full attribution blocks are on /compliance/.
4. People are removed, by design
Before any row is written:
- natural persons, individual entrepreneurs and owner-named legal forms are removed or masked;
- partner, shareholder and director tables are never downloaded;
- digit runs that look like personal tax numbers (CPF) are scrubbed from names;
- named mailboxes, free-mail and ISP mailboxes are withheld.
This rule is applied under Brazil's LGPD (Lei 13.709/2018), Mexico's LFPDPPP, Chile's Ley 19.628 / Ley 21.719, Colombia's Ley 1581/2012, Peru's Ley 29733, Argentina's Ley 25.326 and Ecuador's LOPDP. Our customers act as independent controllers for their own B2B use and must honour opt-outs.
5. Ask us to remove or correct a record
If a record identifies you as a person, or if you represent a company that does not want its public contact channel in our products, write to hello@latsouth.com with the company tax ID (CNPJ, RFC, RUT, NIT, RUC or CUIT) or the e-mail/phone concerned. We:
- confirm within 48 hours;
- remove the record or value from the next build of every product and actor;
- add it to the suppression list we give customers.
Removal at our end does not change the agency's own public register. To correct the source, contact the agency.
6. Changes
We date every change to this statement at the top of the page and keep earlier versions on request.