Meet us at Gartner CIO & IT Executive Summit (September 23-25, São Paulo).
Privacy Policy
Data governance and privacy protection in strict accordance with GDPR.
Last updated: 14 September 2026
S4 Digital is committed to protecting the privacy, confidentiality and security of personal data entrusted to us.
This Privacy Policy explains how S4 Digital collects, uses, stores, shares and protects personal data when individuals visit our websites, communicate or do business with us, attend our events, apply for opportunities with us, or provide information through forms and digital platforms, including LinkedIn Lead Generation Forms.
It also explains the rights available to individuals under applicable data protection legislation, including the European Union General Data Protection Regulation (“GDPR”), the UK General Data Protection Regulation (“UK GDPR”), and Brazil’s Lei Geral de Proteção de Dados Pessoais (“LGPD”), where applicable.
1. Who We Are
S4 Digital is an international technology and digital transformation company providing software engineering, digital transformation, artificial intelligence, data, low-code, telecommunications and related technology and professional services.
For the purposes of applicable data protection legislation, the relevant S4 Digital entity responsible for determining how and why your personal data is processed acts as the data controller or, under the LGPD, the controlador.
Depending on your relationship with us and the country in which the relevant activity takes place, your data may be processed by S4 Digital entities and their authorized service providers.
Questions concerning this Privacy Policy or the processing of personal data may be directed to:
S4 Digital – Data Protection
Email: privacy@s4-digital.com
If the operational privacy/DPO address currently published by S4 Digital is different, the email above should be replaced by that address before publication.
2. Scope of This Privacy Policy
This Privacy Policy applies to personal data that S4 Digital processes in connection with:
our websites and digital properties;
enquiries and contact requests;
prospective and existing customers;
suppliers, partners and other business relationships;
marketing and business-development activities;
events, webinars, conferences and meetings;
social-media interactions and advertising campaigns;
LinkedIn Lead Generation Forms and similar third-party lead-generation services;
newsletters and other communications;
recruitment and professional opportunities; and
other interactions where this Privacy Policy is referenced.
This Policy does not govern third-party websites, applications or services that have their own privacy policies.
3. Personal Data We May Collect
The personal data we collect depends upon the nature of your interaction with S4 Digital. It may include:
Identification and contact information, such as your name, business email address, telephone number, country, region and preferred language.
Professional information, such as your employer, organization, job title, department, professional role, industry and other information associated with your professional profile.
Information you provide to us, including messages, enquiries, form responses, event registrations, requests for information, meeting requests, survey responses and other information you voluntarily submit.
Business relationship information, such as records of meetings, commercial discussions, proposals, contracts, services requested or provided and communications between you or your organization and S4 Digital.
Marketing and engagement information, such as your communication preferences, event participation and interactions with S4 Digital communications, subject to applicable law.
Recruitment information, where applicable, including CVs, professional history, qualifications and other information voluntarily provided in connection with an employment or contractor opportunity.
Technical and website information, such as IP address, device and browser information, pages visited, referring pages and information collected through cookies and similar technologies, subject to applicable consent requirements.
Information obtained from third-party platforms, including information that you authorize platforms such as LinkedIn to provide to S4 Digital when you submit a form or otherwise interact with S4 Digital through those services.
We do not intentionally request sensitive or special-category personal data through our general marketing or lead-generation forms.
4. LinkedIn Lead Generation Forms
S4 Digital uses LinkedIn Lead Generation Forms and may use similar services offered by other digital platforms to enable individuals to request information, register for events, express interest in our services or otherwise contact us.
When you submit a LinkedIn Lead Generation Form, S4 Digital may receive information that you provide or authorize LinkedIn to provide, which may include:
first and last name;
business email address;
telephone number;
company or organization;
job title and professional function;
industry;
company size;
country or region; and
answers to questions included in the relevant form.
S4 Digital processes information received through LinkedIn Lead Generation Forms to fulfil the purpose described in the particular form or advertisement. Depending on the form, this may include:
responding to your enquiry or request;
providing requested content or information;
registering you for an event, webinar, meeting or other activity;
contacting you regarding the subject in which you expressed an interest;
evaluating potential business opportunities;
communicating with you about relevant S4 Digital products, services and capabilities where permitted by applicable law; and
maintaining appropriate records of our interactions with you.
Where consent is legally required for a particular use, S4 Digital will rely on the consent obtained through the relevant form or another appropriate mechanism. You may withdraw such consent at any time.
S4 Digital does not sell personal data obtained through LinkedIn Lead Generation Forms.
Information received through a LinkedIn Lead Generation Form is processed by S4 Digital in accordance with this Privacy Policy and the purpose disclosed when the information was collected.
LinkedIn processes personal data independently in accordance with its own terms and privacy policies. S4 Digital does not control LinkedIn’s independent processing activities.
This explicit treatment is important because LinkedIn’s Ads Agreement places responsibility on the advertiser to provide appropriate notice and obtain consent where applicable. It also prohibits selling Lead Gen Form data and requires advertisers to honor applicable deletion/opt-out requests.
5. How We Use Personal Data
S4 Digital may process personal data for the following purposes:
Providing services and responding to requests.
To respond to enquiries, provide information, arrange meetings, deliver requested materials and provide our products and services.Managing customer and business relationships.
To establish, administer and develop relationships with customers, prospective customers, suppliers, partners and other organizations.Business development.
To identify and evaluate potential business opportunities and communicate with professional contacts about matters reasonably relevant to their roles and interests, subject to applicable law.Marketing communications.
To provide information about S4 Digital services, capabilities, insights, events and other relevant activities where we have a lawful basis to do so.Events.
To administer registrations, communicate with participants and organize physical and virtual events.Website operation and improvement.
To operate, secure, maintain, analyze and improve our websites and digital services.Security and fraud prevention.
To protect S4 Digital, our systems, our customers and other individuals against security threats, misuse, fraud and unlawful activity.Legal and regulatory compliance.
To meet legal, tax, accounting, regulatory and contractual obligations and establish, exercise or defend legal claims.Recruitment.
To assess candidates and manage recruitment processes where individuals submit information for this purpose.
6. Legal Bases for Processing
Where the GDPR or UK GDPR applies, S4 Digital processes personal data under one or more appropriate legal bases, including:
Consent – where you have given us permission to process personal data for a specified purpose.
Performance of a contract – where processing is necessary to enter into or perform a contract with you.
Legitimate interests – where processing is necessary for S4 Digital’s legitimate business interests or those of a third party and those interests are not overridden by your fundamental rights and freedoms. These interests may include managing B2B relationships, responding to professional enquiries, developing our business, protecting our systems and improving our services.
Legal obligation – where processing is necessary to comply with a legal or regulatory requirement.
Where the LGPD applies, S4 Digital similarly relies upon the applicable legal bases established under Brazilian law, including consent, compliance with legal or regulatory obligations, performance of contracts and procedures related to contracts, regular exercise of rights and legitimate interests, as applicable.
7. Marketing Communications
S4 Digital may send professional or marketing communications where permitted by applicable law.
Where consent is required, we will obtain it before sending the relevant communication.
You may withdraw your consent or opt out of marketing communications at any time by using the unsubscribe mechanism provided in the communication or contacting us at privacy@s4-digital.com.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Opting out of marketing communications does not prevent us from sending communications that are necessary for an existing contractual or business relationship.
8. Cookies and Similar Technologies
Our websites may use cookies and similar technologies to operate the site, remember preferences, understand how visitors interact with our content and, where applicable, measure or support marketing activities.
Where required by applicable law, non-essential cookies and similar technologies will only be activated after appropriate consent has been obtained.
Users may manage their preferences through the cookie controls made available on the relevant S4 Digital website and through their browser settings.
9. Sharing of Personal Data
S4 Digital does not sell personal data.
We may share personal data where reasonably necessary with:
S4 Digital group companies;
cloud, hosting and information-technology providers;
customer relationship management and business systems providers;
email and communication service providers;
analytics providers;
event and webinar platforms;
professional advisers, including lawyers, auditors and accountants;
advertising and social-media platforms where applicable;
customers, suppliers or partners where necessary for the relevant business relationship;
competent governmental, regulatory, judicial or law-enforcement authorities where legally required; and
other service providers processing information on our behalf.
Where a third party processes personal data on S4 Digital’s behalf, we require appropriate contractual, confidentiality, security and data-protection obligations where required by applicable law.
We do not authorize service providers acting on our behalf to use personal data for unrelated independent purposes.
10. International Transfers
S4 Digital operates internationally. As a result, personal data may be processed in countries other than the country in which it was originally collected. Where personal data subject to the GDPR or UK GDPR is transferred internationally, S4 Digital uses an appropriate transfer mechanism where required, which may include adequacy decisions, Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, or another legally recognized safeguard. Where the LGPD applies, international transfers will be conducted in accordance with the requirements and mechanisms established by Brazilian data-protection law and applicable regulation. S4 Digital also applies appropriate organizational and technical measures to protect personal data during international processing and transfers.
11. Data Retention
S4 Digital retains personal data only for as long as reasonably necessary for the purpose for which it was collected and to satisfy applicable legal, regulatory, contractual, accounting and legitimate business requirements.
Retention periods may vary according to:
the nature of the information;
the purpose for which it was collected;
the duration of our relationship with you or your organization;
applicable statutory limitation periods;
legal and regulatory obligations;
security requirements; and
whether information is required for the establishment, exercise or defence of legal claims.
When personal data is no longer reasonably required, it will be deleted, anonymized or otherwise securely disposed of in accordance with applicable requirements. For clarity, LinkedIn itself currently retains sponsored Lead Gen Form leads on its platform for 365 days; that is LinkedIn’s retention period and is separate from S4 Digital’s own justified retention of data it receives.
12. Data Security
S4 Digital implements appropriate technical and organizational measures designed to protect personal data against unauthorized or unlawful access, alteration, disclosure, loss, destruction or misuse. These measures may include, as appropriate, access controls, authentication mechanisms, encryption, monitoring, secure infrastructure, data minimization, employee confidentiality obligations, information-security policies and controls applicable to third-party service providers. No information system or method of electronic transmission can be guaranteed to be completely secure. S4 Digital therefore continually assesses and improves its security controls according to the nature of the information processed and the associated risks.
13. Your Privacy Rights
Depending upon your location and applicable law, you may have rights concerning your personal data.
These may include the right to:
obtain confirmation as to whether we process your personal data;
access your personal data;
correct inaccurate or incomplete personal data;
request deletion of personal data;
request restriction of processing;
object to certain processing;
request portability of personal data where applicable;
obtain information concerning the sharing of your personal data;
withdraw consent at any time where processing is based on consent;
object to or opt out of direct marketing;
request information concerning applicable automated decision-making; and
lodge a complaint with the competent data-protection authority.
Under the LGPD specifically, individuals may have additional rights provided under Articles 18 and 20, including confirmation of processing, access, correction, anonymization/blocking/deletion in applicable circumstances, portability, information regarding sharing, revocation of consent and review of certain automated decisions. Brazil’s ANPD describes these rights in its official guidance. These rights are subject to the conditions, exceptions and limitations established by applicable law.
14. Exercising Your Rights
To exercise a privacy right or make an enquiry concerning your personal data, contact: privacy@s4-digital.com
Please provide sufficient information for us to identify the relevant data and understand your request. We may need to verify your identity before fulfilling certain requests in order to protect personal information against unauthorized disclosure or deletion. We will respond within the time limits required by applicable law. There is no charge for exercising statutory privacy rights except where applicable law permits a reasonable charge in specific circumstances.
15. Complaints to a Supervisory Authority
We encourage you to contact S4 Digital first if you have a concern regarding our processing of your personal data so that we have an opportunity to address it. Where the GDPR applies, you also have the right to lodge a complaint with the competent data-protection supervisory authority, particularly in the EU Member State of your habitual residence, place of work or place of the alleged infringement. Where the UK GDPR applies, you may have the right to lodge a complaint with the UK Information Commissioner’s Office. Where the LGPD applies, you may have the right to petition Brazil’s Autoridade Nacional de Proteção de Dados (ANPD) after seeking to exercise the relevant right with the controller. The ANPD specifically advises data subjects to retain evidence of their prior attempt to exercise the right with the controller.
16. Children’s Privacy
S4 Digital’s websites, services and business-development activities are directed primarily toward businesses and professionals and are not intended for children. We do not knowingly use our general marketing or LinkedIn Lead Generation Forms to collect personal data from children. If we become aware that personal data relating to a child has been collected in circumstances inconsistent with applicable law, we will take appropriate steps to delete or otherwise lawfully process that information.
17. Automated Decision-Making
S4 Digital does not ordinarily use personal data collected through general website enquiries or LinkedIn Lead Generation Forms to make decisions producing legal or similarly significant effects based solely on automated processing. Should such processing be introduced in circumstances in which applicable law requires specific transparency or rights, we will provide the required information and safeguards.
18. Third-Party Websites and Platforms
Our websites and communications may contain links to websites or services operated by third parties, including social-media platforms. Third parties process personal data according to their own privacy practices. S4 Digital is not responsible for the independent privacy practices of third-party websites or platforms. When you interact with S4 Digital through LinkedIn or another social-media platform, both the platform’s applicable privacy terms and this Privacy Policy may be relevant to the respective processing performed by each organization.
19. Changes to This Privacy Policy
S4 Digital may update this Privacy Policy periodically to reflect changes in our activities, technology, legal requirements or privacy practices. The latest version will be published on this page and the “Last updated” date at the top of the Policy will be revised accordingly. Where a change materially affects the way we process personal data and applicable law requires additional notice or consent, we will take appropriate steps to provide such notice or obtain such consent.
Contact Us
For any queries, please contact our Data Protection Officer: privacy@s4digital.com. If you identify a potential vulnerability, please contact security@s4digital.com.
© 2026. All rights reserved.
