Privacy Policy
H10 Handball School
Version 1.0 · June 1, 2026
Courtesy translation. The legally binding version is the Brazilian Portuguese (pt-BR) one.
1. Introduction and H10 Commitment
H10 Handball School ("H10", "we") recognizes that the trust of families, students, guardians and partners is our most valuable asset. We therefore adopt this Privacy Policy as a public transparency instrument on how we collect, use, store, share and protect personal data in the context of providing handball education and sports development services for children and youth.
This Policy complies with Brazilian Law 13,709/2018 (LGPD), Law 8,069/1990 (Statute of the Child and Adolescent — ECA), the Internet Civil Framework (Law 12,965/2014) and ANPD guidance.
H10 handles children and adolescents data with special care, observing the best interest of the data subject and requiring specific, highlighted consent from parents or legal guardians.
By using our services or digital environments, you declare that you have read, understood and fully accepted this Policy.
2. Our Environments
- Digital: the website www.h10escoladehandebol.com.br and subdomains, institutional apps, official social media profiles and official service channels (WhatsApp Business).
- Physical: H10 units, administrative headquarters and venues for classes, events and institutional activities.
3. Definitions
- Personal Data: information relating to an identified or identifiable natural person.
- Sensitive Personal Data: racial/ethnic origin, religious belief, political opinion, health, sexual life, genetic or biometric data.
- Data Subject: the natural person the data refers to.
- Processing: any operation performed with personal data.
- Controller: H10, which makes the decisions on processing.
- Processor: who processes data on the Controller’s behalf.
- Data Protection Officer (DPO): communication channel between H10, data subjects and ANPD.
- Consent: free, informed and unequivocal statement for a specific purpose.
4. Who Is the Controller of Your Data
Legal entity: H10 Esportes e Eventos Ltda.
CNPJ: 64.143.535/0001-02
Address: Rua Conselheiro Elias de Carvalho, 626 — Vila Santa Catarina — São Paulo/SP — Brazil — ZIP 04373-000
Product covered: H10 Handball School — handball education and sports/pedagogical development for children and youth.
5. Principles Governing Processing
H10 observes the principles of art. 6 of the LGPD: purpose, adequacy, necessity, free access, data quality, transparency, security, prevention, non-discrimination and accountability.
6. Personal Data Processed
| Category | Examples | Purpose | Legal Basis |
|---|---|---|---|
| Guardian identification | Name, phone/WhatsApp, email | Service, scheduling, contact | Consent / Contract performance |
| Minimal student identification | First name, age | Class recommendation, trial class | Consent (LGPD + ECA) |
| Interest/preferences | Unit, goal, schedule, experience | Class recommendation and service | Consent / Legitimate interest |
| Service data | Message, history, lead status | Relationship and qualification | Legitimate interest / Contract |
| Navigation and source | Cookies, IP, UTMs, entry/conversion page, device | Site operation, analytics, campaigns | Legitimate interest / Consent |
| Image and sound | Photos and videos at classes/events | Institutional disclosure and marketing | Consent (Image Term) |
| Financial (at enrollment) | Payment/billing data | Enrollment processing | Contract / Legal obligation |
On the public website, H10 does not collect documents, health data or other sensitive student data. Health information is handled only at the in-person enrollment stage.
7. How We Collect Data
- Trial-class scheduling form and contact/lead forms;
- Official service channels (WhatsApp, email, phone);
- Lead-capture materials (quiz, guide), always with consent;
- Cookies and tracking technologies (see Cookie Policy);
- Image and Sound Authorization Term, when applicable.
8. How We Use Data
Service and scheduling; class/unit recommendation; communication with the guardian; relationship and enrollment management; campaign measurement (with consent); legal obligations; security.
Marketing and measurement: with consent, H10 may use analytics and advertising. For conversions on ad platforms, it uses only guardian data (email/phone) in protected (hashed) form, never minor student data.
10. Data Subject Rights
Under art. 18 of the LGPD: confirmation, access, correction, anonymization/blocking/deletion, portability, deletion of consent-based data, information on sharing, information on not consenting, and consent withdrawal.
To exercise them, use the DPO channel (section 14) or the Data Subject Rights page. We respond within 15 (fifteen) days.
11. Information Security and Governance
Role-based access control; encryption in transit (HTTPS/TLS); storage with security-certified providers; auditing of sensitive operations; incident response; restricted internal access; contractual assessment of processors.
11.1. Retention Periods
- Unconverted leads: up to 12 months, then anonymized or deleted;
- Enrolled students: up to 24 months after the relationship ends, unless a legal obligation applies;
- Financial data: 5 years (civil and tax law);
- Image and sound: per the Term, subject to withdrawal;
- Navigation: per the Cookie Policy and consent.
13. Changes to This Policy
This Policy may be updated. The current version will always be available on the site, with the last-updated date. Material changes will be communicated.
14. Contact and Data Protection Officer (DPO)
DPO: Valter Costa Guimarães Filho — dpo@h10esportes.com.br — +55 (11) 94022-5452.
Deputy DPO: Elaine Roth — elaine.roth@h10esportes.com.br — +55 (11) 99442-2324.
Address: Rua Conselheiro Elias de Carvalho, 626 — Vila Santa Catarina — São Paulo/SP — Brazil — ZIP 04373-000.
You may also file a complaint with the ANPD (gov.br/anpd).