Skip to content
OFFSHOREPROZ
Last updated: September 27, 2026

Privacy Policy

This policy explains how Pedro Miguel Business Consulting LLC — the company behind the OffshoreProz brand, based in Fort Lauderdale, Florida, United States — collects, uses, shares, and protects your personal data, in compliance with the GDPR (Europe), the CCPA (California), and the LGPD (Brazil).

1. Who Controls Your Data

  • Legal entity: Pedro Miguel Business Consulting LLC, incorporated in the state of Florida, United States. OffshoreProz is the trade name it uses on this website: same company, the same one named in our Terms and Conditions and in the footer of every page.
  • Address: 501 East Las Olas Blvd. Suite 300, Fort Lauderdale, Florida 33301, United States.
  • Role: It decides why and how your personal data is processed. The GDPR calls this the controller (art. 4(7)); the LGPD calls it the controladora (art. 5, VI).
  • Country of processing: United States. If you are in Brazil or in the European Union, your data leaves your country when you use this website. Section 8 explains the legal basis for that.
  • Data subject channel: Any request for access, correction, erasure, or any other right goes through the channel described in section 10, at the bottom of this page.

2. Data We Collect

  • Identification Data: Full name, email, phone number, address, and identity documents when required for due diligence.
  • Browsing Data: IP address, browser type, pages visited, time spent, and technical cookies.
  • Communication Data: Messages sent via contact form, WhatsApp, email, or phone calls.
  • Financial Data: Asset information voluntarily provided for offshore structuring analysis (never shared without express consent).

3. Purpose of Processing

  • Service Delivery: Feasibility analysis, offshore company formation, due diligence, and client support.
  • Communication: Responding to inquiries, sending proposals, and case updates.
  • Legal Obligations: Compliance with regulatory requirements (KYC/AML, CRS, FATCA) as applicable.
  • Service Improvement: Website usage analysis for experience optimization (aggregated and anonymized data).

4. Legal Basis

  • Consent: For marketing communications and for the analytics and marketing cookies described in section 5.
  • Contract Performance: For providing contracted offshore consulting services and for pre-contractual steps taken at your request.
  • Legal Obligation: For KYC/AML compliance and regulatory reporting.
  • Legitimate Interest: For fraud prevention, site security, and continuous service improvement.

5. Cookies and Audience Measurement

  • Essential cookies: They keep the site standing: session, chosen language, abuse protection, and delivery over the Cloudflare network. Always active, because the pages do not work without them.
  • Analytics and marketing: Google Analytics 4, Google Ads, and the Meta Pixel only start writing cookies and identifiers after you accept the banner. Until then consent defaults to denied (Google Consent Mode v2: analytics_storage, ad_storage, ad_user_data, and ad_personalization set to denied).
  • What happens if you decline: The whole site stays available to you. No analytics or marketing cookie is written; Google may receive a cookieless signal that only feeds aggregate counting and does not identify you.
  • Changing your mind: Clear this site’s cookies and local storage in your browser. The banner comes back on your next visit and you choose again, from scratch.

6. Data Security

  • We use TLS/SSL encryption for all data transmissions.
  • Storage on servers with ISO 27001 and SOC 2 Type II certification.
  • Access restricted by two-factor authentication (2FA) and strong password policies.
  • Redundant backups across multiple geographic zones with AES-256 encryption.
  • Periodic security audits and penetration testing.

7. Data Sharing

  • Service Providers: Compliance, accounting, and banking partners under confidentiality agreements.
  • Regulatory Authorities: When required by law (CRS, FATCA, court orders).
  • Offshore Jurisdictions: Only data necessary for company formation, with prior consent.
  • We never sell or commercialize personal data to third parties.

8. International Data Transfers

  • Where your data goes: The controller sits in the United States, and that is where your data is processed. The site infrastructure — hosting, CDN, and database — runs on Cloudflare; audience measurement, when you allow it, runs on Google. Both operate servers in several countries. For company formation, the necessary data also reaches registered agents and banks in the jurisdiction you choose.
  • Why this is an international transfer: If you are in Brazil, your data leaves the country the moment it reaches us; the same applies if you are in the European Union. The LGPD covers this in art. 33 and the GDPR in its Chapter V.
  • Legal basis for the transfer: For data subjects in Brazil, and while no ANPD adequacy decision covers the United States, the transfer relies on three grounds: performance of the contract or pre-contractual steps taken at your request (LGPD art. 33, IX with art. 7, V); compliance with a legal obligation such as KYC/AML and CRS/FATCA reporting (art. 33, IX with art. 7, II); and your specific, highlighted consent for analytics and marketing cookies (art. 33, VIII). For data subjects in the European Union, the equivalent grounds are GDPR art. 49(1)(b) and art. 49(1)(a).
  • What does not change: Your rights travel with your data. Processing outside Brazil or the European Union takes nothing away from section 9, and the response time in section 10 stays the same.

9. Your Rights (GDPR/CCPA)

  • Access: Request a copy of all personal data we hold about you.
  • Rectification: Correct incomplete or inaccurate data.
  • Erasure: Request deletion of data when there is no legal retention obligation.
  • Portability: Receive your data in a structured, interoperable format.
  • Withdrawal: Withdraw consent at any time without affecting the legality of prior processing.
  • Objection: Contest processing based on legitimate interest.

10. How to Exercise Your Rights

  • Official channel: Write to the privacy address at the bottom of this page. It is the designated channel for receiving and answering data subject requests — the role the GDPR assigns to the Data Protection Officer and the LGPD, to the encarregado (art. 41).
  • What to write: Tell us which right you want to exercise and describe the request. We may ask for additional information to confirm it is you: that is what stops your data from being handed to someone impersonating you.
  • Response time: Up to 1 month under the GDPR, extendable under art. 12(3). For data subjects in Brazil, up to 15 days for the full declaration (LGPD art. 19, II).
  • Cost: None. Handling data subject requests is free of charge (LGPD art. 18, §5; GDPR art. 12(5)).
  • If the answer does not settle it: You may lodge a complaint with your national data protection authority in the European Union (GDPR art. 77) or with the ANPD in Brazil (gov.br/anpd).

11. Data Retention

  • Client Data: Retained for 10 years after termination of business relationship (KYC/AML obligation).
  • Browsing Data: Deleted after 24 months of inactivity.
  • Leads and Contacts: Retained for 36 months or until deletion request.
  • Contractual Data: According to applicable legal limitation periods (generally 5-10 years).

Frequently Asked Questions

Is my data shared with tax authorities?

Only when required by law (CRS/FATCA). Every structure is designed for full compliance — we do not offer tax evasion schemes.

Can I request deletion of all my data?

Yes, except data we must retain by legal obligation (KYC/AML). Send the request through the privacy channel at the bottom of this page.

How do I exercise my data subject rights?

Write to the privacy address at the bottom of this page with the subject "Data Subject Rights" and describe your request. We answer within 1 month (GDPR art. 12(3)), or within 15 days for data subjects in Brazil (LGPD art. 19, II).

Who is responsible for my data, and where are they?

Pedro Miguel Business Consulting LLC, at 501 East Las Olas Blvd. Suite 300, Fort Lauderdale, Florida 33301, United States. It is the same company that signs the Terms and Conditions; OffshoreProz is its trade name.

Does my data leave my country?

Yes. The controller is in the United States, so data is processed there. The transfer relies on GDPR art. 49 or LGPD art. 33, depending on where you are — contract performance, legal obligation, or your consent — and your rights remain fully in force.

Privacy Contact

To exercise your rights or clarify questions about this policy, write to the address below. We answer within 1 month, free of charge.

Data Protection Officer / Encarregado (LGPD art. 41)

privacy@offshoreproz.com
Pedro Miguel Business Consulting LLC501 East Las Olas Blvd. Suite 300Fort Lauderdale, Florida 33301United States

Response time: up to 1 month (GDPR art. 12(3)). For data subjects in Brazil, up to 15 days (LGPD art. 19, II).

Prefer a form? Use the contact page