1. Who handles your data This website belongs to Gabriel Santana [tax ID to be confirmed], a 3D artist, who decides how the personal data collected here is used. The site is built and maintained by WebsitesRecife, acting only as a technical service provider under our instructions.
2. How we use your data - Contact form: we use your name, email, phone or WhatsApp (if provided), project type and message only to reply to your request. Submitting the form is the request that allows this use (Brazilian LGPD, art. 7, V; GDPR art. 6(1)(b)). - Spam protection: we use Google reCAPTCHA to block automated submissions. - Admin panel: we keep user accounts (name, email, protected password and two-factor code) and a log of when and from where the panel was accessed (IP and date), as required by Brazil’s Internet Civil Framework (art. 15).
3. How long we keep it - Contact messages: 24 months after the last contact. - Admin accounts: while access is active and up to 30 days after it ends. - Admin access logs: at least 6 months. - Admin session cookie: deleted when the session ends.
4. Who we share it with We do not sell or rent your data. To reply to you, the form data is sent to Gabriel by email and WhatsApp and recorded in an internal Google spreadsheet. It therefore passes through these providers: Google (reCAPTCHA and Google Sheets, United States), Meta (WhatsApp), the email provider used for sending and the hosting provider where the site and database are stored. We do not use third-party marketing or analytics tools.
5. International transfer The site and database are hosted on a server located in the United States, so your data may be processed outside Brazil. The formal safeguard required for this transfer is being put in place. Meanwhile we apply technical security controls, and this section will be updated once the safeguard is concluded.
6. Cookies We only use one essential technical cookie to keep the admin login active. It is not used for tracking or advertising. If we ever add measurement cookies, we will ask for your consent first.
7. Your rights You may request access, correction, portability or deletion of your data (unless we are legally required to keep it) and object to processing. This site makes no automated decisions about you. To exercise these rights, write to contato@gabrielsantana3d.com.
8. Visitors from the European Union If you are in the European Union, the General Data Protection Regulation (GDPR) may also apply, with rights equivalent to those in section 7, exercised through the same channel.
9. Security Passwords are stored with strong hashing, the second authentication factor is encrypted and access to the admin panel requires two-step verification.
10. Changes This policy may be updated. The date at the top shows the latest version.