01Who handles your data
1.1. The company that decides what happens to the personal data submitted through this site is Studio Connecta, a marketing and technology agency with operations in São Paulo.
1.2. For anything involving personal data, including exercising the rights in item 10.2, message us on WhatsApp at +55 (11) 96862-9449 and say the subject is privacy. A person reads it and replies.
1.3. This policy covers the studioconnecta.com site and the forms it presents.
02What we collect
2.1. What you provide. The site has seven collection points: assessment request, WhatsApp popup, service subscription, creative briefing, client onboarding, customer service rating, and meeting booking. Beyond the fields in each one, the site asks for nothing else.
- Identification and contactName, email, and phone number. That is the minimum on every form.
- Business contextService of interest, the channels you already use, your challenges, budget range, company size, and timeline. It lets the conversation start on the right subject.
- Registration detailsOnly when you subscribe, so we can issue the contract and the invoice. A company provides its business details and address; an individual provides full name and Tax ID (CPF). In both cases we also take the contacts of the person in charge and, when it is someone else, of the legal representative.
- Project contentBriefing and onboarding gather information about the business, the approvers, and the services you signed up for, plus attachments.
- Acceptance and sourceYour acceptance of this policy and the address of the page you were on when you submitted.
2.2. What the site records on its own. On every submission, the server records the IP address, the technical browser data and the date and time, to respond to a security incident, curb abuse, and prove when a contact came in.
03Why we process each piece of data
- Replying to youGetting back to you, building the assessment, and sending a proposal. Legal basis: preliminary procedures at the data subject's request, under art. 7, V of Brazil's LGPD (General Data Protection Law).
- Performing the contractIssuing the contract and the invoice, setting up the project, and delivering the service. Legal basis: performance of a contract (art. 7, V).
- Routing your requestGetting your message to the right person on the team. Legal basis: legitimate interest (art. 7, IX), with the right to object.
- Protecting the serviceBlocking automated submissions, fraud, and abuse. Legal basis: legitimate interest (art. 7, IX), with the right to object.
- Complying with the lawKeeping access logs, tax documents, and accounting records. Legal basis: legal or regulatory obligation (art. 7, II).
- Measuring the audienceAs item 6 describes. Legal basis: legitimate interest (art. 7, IX), with the right to object.
- Sending commercial follow-upsWith people who have already contacted us, as item 7 describes. Legal basis: legitimate interest (art. 7, IX), with an opt-out in every message.
04Who we share it with
4.1. Third-party channels. The WhatsApp app is operated by Meta: once the conversation starts, its content runs through the platform, under the platform's rules. The booking page embeds Google Calendar, which receives what you fill in there, under Google's policy, and sends us an invite. To avoid both, use the form on this site.
4.2. At Studio Connecta we do not sell personal data and we do not pass it on to third parties for advertising. We also share data when there is a court order, a request from a competent authority, or a need to exercise rights in legal proceedings.
05How long we keep it
- Form dataFor as long as the business relationship lasts and for up to 5 years after the last contact. The period follows the decision cycle in our market, where someone asks for an assessment one year and comes back to talk two or three seasons later.
- Contract and tax recordsFor the periods the law requires, counted from the issue date, with access restricted to that purpose.
- Project attachmentsThey stay with the project record and go when the record goes.
- Technical logsFor the period set by the hosting service and by applicable law, in particular the Marco Civil da Internet (Brazil's internet law).
You can ask us to delete your data before these periods end, at any time through the channel in item 1.2, except for what the law requires us to keep.
06Cookies and measurement
6.1. This site does not use advertising cookies, remarketing, or social network pixels. No technology here builds a profile of you to show you ads, on this site or anywhere else.
6.2. We use Google Analytics 4, loaded through Google Tag Manager, to measure the audience in aggregate numbers: how many people visit, which pages they move through, where they came from, and roughly what region they are in. Google processes this data outside Brazil. We do not use this measurement to identify you or to make automated decisions about you.
The site also saves your light or dark theme preference on some internal pages. That preference lives in your browser's local storage, it is not a cookie, and it never leaves your device.
6.3. How to turn it off. Install the official Google Analytics opt-out browser add-on, block third-party cookies in your browser settings, or register your objection through the channel in item 1.2. You can also delete the cookies already stored. The site keeps working in any of these cases.
6.4. The site sends nothing to the measurement that identifies you: name, email, phone, and ID numbers stay out. The measurement records the page, where the visit came from, and interactions with buttons and forms.
07Commercial messages
7.1. Anyone who leaves their contact details in a form on this site may hear back from Studio Connecta: the reply with your assessment, a proposal, a follow-up on the conversation, and, from time to time, content tied to the service that prompted the contact. Legal basis: legitimate interest (art. 7, IX), in the relationship you opened yourself.
7.2. We do not buy lists, we do not import third-party databases, and we do not write to anyone who never came to us through the channels in this policy.
7.3. How to opt out. Click the unsubscribe link at the bottom of any email we send, reply to the email asking to be removed, or file the request through the channel in item 1.2. On WhatsApp, just tell us you no longer want to hear from us. We process it within 5 business days, and opting out applies to everything we send.
08Security
8.1. All traffic runs over an encrypted connection (HTTPS), with forced redirect and a strict transport policy. The forms save data through parameterized queries, which closes the classic door to database injection.
8.2. Database passwords and integration keys stay out of the published code, in a file the server blocks from the public. In the restricted areas, the password is stored in scrambled form, which does not allow the original to be recovered.
8.3. Attachments. Briefing and onboarding files sit outside the site's public folder.
8.4. No system is immune to incidents. If a security incident happens that poses a relevant risk to your rights, Studio Connecta notifies you and Brazil's National Data Protection Authority, as set out in art. 48 of the LGPD.
09Minors
9.1. This site speaks to companies and professionals, not to anyone under 18. We do not ask for data on children or teenagers in any of our forms. If we identify a contact in that situation without a guardian's authorization, we delete the record.
10Changes and your rights
10.1. We update this policy when the site or the law changes. The date of the last update sits at the top of this page. If a change alters how we use data you already gave us, we highlight it here before it takes effect.
10.2. Your rights. You can confirm whether we process your data, access what we hold, correct anything incomplete, inaccurate, or out of date, request portability, and find out who we share it with. You can ask for the anonymization, blocking, or deletion of data that is unnecessary, excessive, or processed in a way that does not comply with the law. You can object to processing based on legitimate interest, learn what happens if you do not consent, and withdraw a consent whenever you want. These are the rights in art. 18 of the LGPD.
To exercise any of them, use WhatsApp +55 (11) 96862-9449: we answer within 15 days. We may ask for extra information to confirm your identity, which protects you from requests third parties make in your name. You can also file a complaint with Brazil's National Data Protection Authority (ANPD).