Privacy Policy

01

Who the data controller is

The controller is Studio Responsivo de Design LTDA, CNPJ 42.816.656/0001-27, based in Fortaleza, Ceará, Brazil.

It decides how your data is handled on this site. For any privacy matter, write to hello@studioresponsivo.com.br.

02

What data we collect

We only collect what you send us and the minimum needed to understand where the contact came from. We don't ask for documents, bank details or sensitive data.

• Contact form: name, email, company, website, service of interest, budget range, timeline, whether you've tried with another team, who decides on the project and a description of the problem.
• Newsletter: your email.
• Contact source: the page you were on, the site language and any campaign parameters (UTM) in the link, plus the IP address of whoever submitted the form.
• Technical data: basic server logs, such as IP address, access date and time and browser type, generated automatically to keep the site up and secure.
• Newsletter emails: whether the email was opened and which links you clicked, recorded by a code, not by your email address. We use this to learn which articles people find most interesting.
• Site usage: we measure browsing with our own tool, with no Google Analytics or social media pixels: pages viewed, referring site, device and browser type, time zone, how far the page was scrolled, time on page and where clicks happened. We don't store your IP or anything you type, and each visitor becomes an anonymous code that changes every day.

03

How we use the data

Each use has a legal basis under Art. 7 of the LGPD. We don't use your data for anything beyond this list.

• Replying to you and preparing a discovery or proposal: steps prior to a contract, at your request (Art. 7, V).
• Sending the newsletter: your consent (Art. 7, I). Unsubscribe anytime via the link in the email or by writing to us.
• Understanding which pages and campaigns bring in contacts: legitimate interest (Art. 7, IX), using only the contact source, without building a profile of you.
• Improving the site with anonymous browsing data: legitimate interest (art. 7, IX). You can decline in the privacy notice and we stop measuring your browsing.
• Keeping the site secure and running: legitimate interest (Art. 7, IX) and compliance with a legal obligation (Art. 7, II), such as keeping access logs as required by Brazil's Marco Civil da Internet (Law No. 12,965/2014).
• Meeting legal and tax obligations or responding to authorities: legal or regulatory obligation (Art. 7, II) and the regular exercise of rights (Art. 7, VI).

04

Who we share it with

We don't sell, rent or trade your data.

Data may only be accessed by those who help us run the site and reply to you, always limited to what's necessary:

• The infrastructure provider that hosts our server (VPS), where the site and contacts live.
• The email delivery service (SMTP) used to reply to contacts and send the newsletter.
• Public authorities, when there's a court order or legal obligation.

05

Where we store it and how we protect it

Contacts sent through the site are stored on our own server (VPS), managed by the Studio. We don't use public spreadsheets or third-party tools to store form content.

We take technical and administrative measures to protect the data: encrypted connections (HTTPS), key-only server access, contact access limited to whoever needs to reply to you, a password-protected internal dashboard and frequent security updates.

No system is 100% immune to failure. If a security incident occurs that could pose significant risk or harm to you, we'll notify you and Brazil's National Data Protection Authority (ANPD), as required by Art. 48 of the LGPD.

06

How long we keep it

We keep data only as long as needed for each purpose:

• Contacts that didn't become projects: up to 24 months after the last contact, then deleted.
• Contacts that became projects: for the length of the contract and, after that, for the periods the law requires for keeping tax and contract records.
• Newsletter: until you unsubscribe.
• Server access logs: 6 months, as required by the Marco Civil da Internet, or longer if there's a court order.
• Anonymous browsing data: 13 months, then deleted automatically.

07

Your rights and how to exercise them

Art. 18 of the LGPD guarantees you, at any time and free of charge, the right to:

• Confirm whether we process your data.
• Access the data we hold about you.
• Correct incomplete, inaccurate or outdated data.
• Request anonymization, blocking or deletion of data that is unnecessary, excessive or processed unlawfully.
• Request portability of your data to another provider.
• Request deletion of data processed based on your consent.
• Know who we share your data with.
• Know that you can withhold consent and what happens if you do.
• Withdraw your consent.
• Object to processing based on another legal basis, if it violates the LGPD.

08

How to make a request

Email hello@studioresponsivo.com.br with the subject "Privacy" and tell us what you need. We may ask for some information to confirm the request is yours.

We reply within 15 days. If we can't fulfill the request, we'll explain why.

You can also file a complaint with Brazil's National Data Protection Authority (ANPD) at gov.br/anpd.

09

Cookies and similar technologies

The site does not use advertising cookies or third-party cookies.

We measure browsing with our own tool, running on our server. It sets no cookie and doesn't store your IP: each visitor becomes an anonymous code that changes every day, so we can't tell who you are or link today's visit to tomorrow's.

In the privacy notice, "Sounds good" saves your choice and the date of your first visit in your browser, so we know how many people come back. "Decline" saves only your choice, and from then on no browsing data is sent. To change your mind, open the notice again.

We also use an essential cookie to remember the language you chose on the site.

You can delete or block cookies and site data in your browser settings.

10

Children and teens

This site is made for businesses and professionals. It isn't aimed at anyone under 18, and we don't knowingly collect data from children or teens.

If you learn that a minor's data was sent through the site, let us know at hello@studioresponsivo.com.br and we'll delete it.

11

International transfers

Form and newsletter data is stored on our own server (VPS). Some providers, such as the email delivery service, may process data outside Brazil.

When that happens, we only use providers that offer adequate protection under Arts. 33 to 36 of the LGPD, such as data protection contract clauses.

12

Data Protection Officer (DPO)

Our data protection officer is Leonel Rocha, founder of the Studio. He handles requests from data subjects and communications from the ANPD. Contact: hello@studioresponsivo.com.br.

13

Changes to this policy

We may update this policy when we change the site or our providers, or when the law requires it. The date of the last update is at the top of the page.

If the change is significant, we'll post a notice on the site and, if you subscribe to the newsletter, email you.

14

Contact

Studio Responsivo de Design LTDA. CNPJ 42.816.656/0001-27. Email: hello@studioresponsivo.com.br.