Privacy Policy

1. Who is responsible for your data

The controller, meaning the organisation that makes decisions about processing your personal data, is Digital S&D, operating in Belo Horizonte/MG.

For privacy and data protection matters, contact our team at digitalsd.contato@gmail.com. This is our communication channel for data subjects and Brazil’s National Data Protection Authority (ANPD).

2. Personal data we collect

We collect only what is needed to respond to you:

• Data you provide in the contact form: name, email and WhatsApp/phone (required) and, optionally, company, service of interest, budget range and your message.
• Data you send when contacting us by email or WhatsApp, such as name, phone number and conversation content.
• Technical access data, such as IP address, browser and device type, and access date and time, logged automatically by website hosting and the font service (see the sharing section).

We do not request sensitive personal data, such as health information, racial or ethnic origin, religious beliefs or political opinions. Please do not include this information in the message field.

3. Why we use your data and the legal basis

• Respond to your contact and prepare quotes or proposals you requested. Legal basis: preliminary contractual procedures at the data subject’s request (Article 7, V of the LGPD).
• Keep records of requests received and organise responses. Legal basis: legitimate interests (Article 7, IX), limited to what is strictly necessary (Article 10, paragraph 1).
• Protect the website against abuse, spam and fraud. Legal basis: legitimate interests (Article 7, IX).
• Comply with legal or regulatory obligations where applicable (Article 7, II), and exercise rights in judicial, administrative or arbitration proceedings (Article 7, VI).

Required contact form fields — name, email and WhatsApp/phone — are needed for us to respond to your request. Other fields are optional.

4. Who we share your data with

Digital S&D makes decisions about the data you send us. To run the website and respond to you, we use service providers that process this data to provide their services, within their contracts and their own privacy policies:

• Formspree (Formspree, Inc., United States): receives contact form submissions and forwards them to our email. Submissions are also stored on Formspree’s servers for the period defined by our plan and that service’s policy.
• Google (Gmail and Google Fonts): the email address that receives your messages is a Gmail address. The website’s fonts are also loaded from Google Fonts servers, which causes your browser to send Google technical data such as your IP address.
• Netlify (Netlify, Inc., United States): hosts the website and, like any hosting provider, may log technical access data such as your IP address.
• WhatsApp (Meta): if you click WhatsApp buttons to contact us, the conversation is also governed by WhatsApp’s terms and privacy policy.

We may also share data with public authorities where required by law or court order.

5. International data transfers

The providers named above — Formspree, Google and Netlify — are based in or store data in the United States. Your data may therefore be transferred outside Brazil. This transfer occurs where necessary to handle your contact and quote request, as provided for in Article 33 of the LGPD, particularly item IX together with Article 7, V and VI, and ANPD regulations.

6. How long we keep your data

We keep your data for as long as needed to fulfil the purposes described in this Policy, while handling your request and any resulting business relationship.

After that, we delete the data or retain it only as long as required or permitted by law, for example to comply with legal obligations or exercise rights (Article 16 of the LGPD).

7. Cookies and similar technologies

This website does not use its own cookies or audience analytics or advertising tools. We therefore do not display a cookie notice.

Third-party services mentioned in this Policy, such as hosting and fonts, may log technical access data under their own policies. If we start using cookies or analytics tools, we will update this Policy and request consent where required by law.

8. Your rights as a data subject

Under Article 18 of the LGPD, you may request the following from us at any time:

• confirmation of whether we process your data;
• access to your data;
• correction of incomplete, inaccurate or outdated data;
• anonymisation, blocking or deletion of unnecessary, excessive data or data processed in breach of the LGPD;
• portability of data to another service or product provider on express request and under ANPD regulations;
• deletion of data processed based on consent, except as provided for in Article 16 of the LGPD;
• information about the public and private entities with which we share your data;
• information about the option not to provide consent and the consequences of refusal;
• withdrawal of consent where processing is based on it.

You may also object to processing without consent if it breaches the LGPD (Article 18, paragraph 2), and petition the ANPD against us (Article 18, paragraph 1) or consumer protection bodies (Article 18, paragraph 8).

How to exercise your rights: email digitalsd.contato@gmail.com with your name and request. For your protection, we may ask for more information to confirm your identity. Requests are handled free of charge within the deadlines established by the LGPD (Article 19) and ANPD regulations.

9. Data security

We adopt reasonable technical and administrative measures to protect personal data against unauthorised access and accidental or unlawful destruction, loss, alteration, communication or disclosure (Article 46 of the LGPD), including restricted access to received messages and a secure HTTPS connection on the website.

No system is completely free of faults. If a security incident may cause significant risk or harm, we will notify you and the ANPD as required by Article 48 of the LGPD.

10. Children and teenagers

This website is intended for businesses and professionals, not children or teenagers. We do not intentionally collect data from people under 18. If you believe a minor has sent us data, contact us so that we can delete it.

11. Links to third-party websites

The website contains links to external services such as WhatsApp, Instagram, LinkedIn and YouTube. When accessing them, you become subject to their policies, for which we are not responsible.

12. Changes to this Policy

We may update this Policy to reflect changes to the website, the third-party services we use or legislation. The latest update date appears at the top of this page. See also the Terms of Use.

13. Contact and complaints

Questions, requests or complaints about this Policy: digitalsd.contato@gmail.com.

If you are not satisfied with our response, you may petition Brazil’s National Data Protection Authority (ANPD) through https://www.gov.br/anpd.