Privacy Policy

1. About NMRec

NMRec Química LTDA is a Brazilian deep-tech company providing products, analytical services and scientific solutions based on Nuclear Magnetic Resonance and advanced molecular structural analysis.

For the purposes of applicable data protection laws, NMRec may act as the controller of personal data collected directly through this website.

2. Information We Collect

Depending on how you interact with the website, NMRec may collect information that you voluntarily provide and technical information generated during access.

Information you provide

• Name.
• Company, laboratory or institution.
• Email address.
• Information contained in a contact request.
• Information about a scientific, analytical or commercial need.

Technical information

Website infrastructure and service providers may process technical data such as IP address, browser information, device information, date and time of access, requested pages and server logs.

3. How We Use Information

NMRec may use information collected through the website to:

• Respond to contact requests.
• Evaluate scientific, technical or commercial inquiries.
• Prepare proposals or discuss potential services or products.
• Operate and secure the website.
• Provide the blog and related online functions.
• Select an appropriate website language.
• Maintain records required for business or legal purposes.
• Prevent abuse, fraud or unauthorized access.

NMRec does not use information submitted through the website to sell personal data to third parties.

4. Legal Bases for Processing

Depending on the circumstances and applicable law, processing may be based on one or more lawful grounds, including:

• Your consent.
• Steps taken at your request before entering into a contract.
• Performance of contractual obligations.
• Compliance with legal or regulatory obligations.
• Legitimate interests related to operating, protecting and improving NMRec's services.

5. Contact Forms

When you submit a contact form, the information entered in the form is used to receive and respond to your request.

NMRec currently uses Formspree as part of the technical infrastructure used to transmit website contact forms. Information submitted through a form may therefore be processed by that service as necessary to deliver the request to NMRec.

6. Automatic Language and Country Detection

To improve the browsing experience, the NMRec website may estimate the visitor's country based on their IP address and use that information to select an initial website language.

NMRec currently uses the IP geolocation service provided by ipapi.co, operated by Kloudend, Inc., for this purpose. The service may receive the visitor's IP address and return an estimated country code.

NMRec uses the result to select the website language. The functionality is not intended to determine a visitor's precise physical address and does not use GPS location.

IP-based geolocation is inherently approximate and may not always reflect the visitor's actual location.

7. Cookies and Local Storage

The website may use browser storage technologies to remember certain preferences and reduce unnecessary repeated requests.

For example, the website may store:

• The language manually selected by the visitor.
• A previously detected country code.
• The time of the latest country detection.
• Whether the website's cookie notice has been accepted.

A manually selected language is given priority over automatic country detection.

Some of this information is stored using the browser's localStorage feature rather than a traditional HTTP cookie.

Visitors can remove locally stored information using their browser settings.

8. Blog and Firebase Services

Some NMRec website functions, including the scientific blog and its administration infrastructure, use Google Firebase services.

These services may include Firebase Authentication and Cloud Firestore.

Firebase may process technical information such as IP addresses, user-agent information and authentication data when necessary to provide and protect its services.

Google states that Firebase customers generally act as controllers of end-user data provided to Firebase, while Google generally acts as a processor or service provider for that data.

9. Third-Party Service Providers

NMRec may rely on specialized providers to operate its website and online services.

These may include providers of:

• Website hosting and server infrastructure.
• Contact form processing.
• IP-based country detection.
• Database and authentication infrastructure.
• Security and technical maintenance.

Third-party providers process information according to their own terms, privacy policies and contractual obligations.

10. International Data Transfers

Some technology providers used by NMRec operate infrastructure outside Brazil and may process information in other countries, including the United States.

For example, Kloudend, Inc., the operator of ipapi.co, states that personal data may be transferred outside the European Economic Area and that applicable transfers may be governed by Standard Contractual Clauses.

Google also states that certain Firebase services may process information on global infrastructure and that Firebase Authentication operates from United States data centers.

11. Data Retention

NMRec retains personal information only for as long as reasonably necessary for the purposes described in this policy, including responding to requests, maintaining business records, fulfilling contractual obligations, protecting legal rights and complying with applicable laws.

Retention periods may vary depending on the type of information and the context in which it was collected.

12. Data Security

NMRec uses reasonable technical and organizational measures intended to protect information against unauthorized access, alteration, disclosure or destruction.

However, no website, network or electronic transmission method can be guaranteed to be completely secure.

13. Your Data Protection Rights

Depending on applicable law and your location, you may have rights concerning your personal data, including the right to request:

• Confirmation that personal data is being processed.
• Access to your personal data.
• Correction of inaccurate or incomplete information.
• Deletion or anonymization where legally applicable.
• Information about sharing or processing activities.
• Withdrawal of consent where processing is based on consent.
• Objection to or restriction of certain processing where applicable.

Requests may be subject to identity verification and applicable legal limitations.

14. External Links

The NMRec website may contain links to third-party websites, scientific resources, social networks or other external services.

NMRec is not responsible for the privacy practices or content of third-party websites. Visitors should review the relevant privacy policies when leaving the NMRec website.

15. Changes to This Privacy Policy

NMRec may update this Privacy Policy when website functionality, legal requirements, service providers or data-processing practices change.

The date shown at the top of this page indicates the latest revision.