Privacy Policy

01Categories of personal data processed

In the course of its activities, the Firm may process the following categories of personal data:

• Identification and contact data: name, email, phone, company, position and other information provided in forms or communications.
• Professional and qualification data: information contained in résumés, documents and messages sent to the Firm.
• Browsing data: IP address, access data, pages visited and information collected through cookies and similar technologies.
• Client-related data: information necessary for the provision of legal services, which may include third-party data and, where strictly necessary, sensitive personal data.

Data may be collected directly from you or obtained from public and lawful sources, always in accordance with the principles of purpose, adequacy and necessity.

02Purposes of processing and legal bases

Personal data is processed for legitimate, specific and disclosed purposes, on the basis of the legal grounds set out in the LGPD (Brazil's General Data Protection Law), notably:

Client relationships and provision of services

Performance of a contract and compliance with the legal and regulatory obligations inherent to the practice of law, including the conduct of matters, communication, collection of fees and safekeeping of documents.

Handling of contacts and requests

Responding to messages sent through the website or other channels, based on legitimate interest and on preliminary measures leading to a possible engagement.

Recruitment and selection

Assessment of applications and résumés submitted to the Firm, based on consent and on preliminary measures leading to hiring.

Website administration and security

Operation, maintenance and security of the website, fraud prevention and improvement of the browsing experience, based on legitimate interest.

03Sharing of personal data

The Firm does not sell personal data. Sharing occurs only when necessary and with appropriate safeguards, and may involve:

• Technology, hosting and communication service providers acting as data processors;
• Public authorities, bodies of the Judiciary and other entities, in order to comply with a legal or regulatory obligation or a determination by a competent authority;
• Corresponding attorneys and partners, strictly in the interest of providing the contracted services.

04Retention of personal data

Personal data is retained for as long as necessary to fulfill the purposes for which it was collected and to comply with legal and regulatory obligations and document-retention requirements. Once processing has ended, the data is deleted or anonymized, except in the cases of retention authorized by the LGPD.

05Data subject rights

Under the terms of the LGPD, you may, at any time and upon request, exercise the following rights:

• Confirmation of the existence of processing and access to the data;
• Correction of incomplete, inaccurate or outdated data;
• Anonymization, blocking or deletion of data that is unnecessary or processed in non-compliance;
• Data portability, information about sharing and withdrawal of consent, where applicable.

Requests may be submitted to the Data Protection Officer at the email address atendimento@torressoares.com.

06Security

The Firm adopts technical and administrative measures suitable to protect personal data against unauthorized access and accidental or unlawful destruction, loss, alteration, communication or dissemination, aligned with market best practices and with the duty of professional confidentiality.

07Cookie policy

This website may use cookies and similar technologies to enable its operation, measure audience and enhance the browsing experience. You may manage or disable cookies in your browser settings, being aware that some features may be affected.

08Third-party websites

This website may contain links to third-party pages. The Firm is not responsible for the privacy practices or the content of those websites, and we recommend reviewing their respective policies.

09Changes to this Privacy Policy

This Policy may be updated at any time to reflect improvements or legal and regulatory changes. The current version will always be available on this page, indicating the date of the last update.

10Contact

If you have any questions about this Policy or about the processing of your personal data, please contact the Data Protection Officer:

• Email: atendimento@torressoares.com
• Address: Avenida Luiz Carlos Prestes, No. 410, suite 319 — Barra da Tijuca, Rio de Janeiro/RJ, CEP 22775-055

Last updated: August 2026.