Privacy Policy

Data controller

Sanaoperas Ltda., based in Blumenau, Santa Catarina, Brazil, is the controller of personal data processed through this website. For any privacy matter, write to sanaoperas@gmail.com.

Data collected

Through the contact form, we collect:

• name;
• organization or company, if provided;
• email;
• phone number, if provided;
• subject and message;
• visit origin — only the domain the visitor came from, not the full page address;
• campaign parameters present in the page address (utm_source, utm_medium, utm_campaign, utm_content and utm_term), when available;
• language of the site used;
• date and time of the request and of consent.

Abuse protection

To protect the form against spam and automated submissions, we use Cloudflare Turnstile. At the time of submission, it analyzes technical signals from the browser and the connection, including the IP address, solely to tell people from bots. The IP address is also used, transiently, to limit repeated submissions. The IP address is not stored with your message.

Purposes

• responding to the contact and the request sent;
• recording the request;
• keeping a history of the relationship with those who contacted us;
• analyzing, in aggregate, where contacts come from.

Legal basis

Processing is based on the data subject's consent, given in the contact form, and, where applicable, on preliminary procedures related to a contract at the data subject's request (LGPD, art. 7, items I and V).

What we do not do

• We do not sell personal data.
• We do not use fingerprinting techniques to identify visitors.
• We do not collect personal data beyond what is needed to respond to the contact.
• This website currently does not use advertising cookies or third-party tracking tools.

Providers and sharing

Data is processed by Cloudflare, the provider of this website's infrastructure, solely to operate contact handling: hosting and running the website (Cloudflare Workers), spam protection for the form (Cloudflare Turnstile) and storing the messages received in a database (Cloudflare D1). Because Cloudflare's infrastructure is global, data may be processed on servers located outside Brazil.

We do not sell or transfer the data to third parties. Data may also be shared when required by law or by a competent authority.

Security

Access to the data is restricted to the people responsible for handling contacts, with reasonable technical and administrative measures to protect it against unauthorized access, loss or alteration.

Retention period

Data is kept for as long as needed to handle the request and maintain the history of the relationship, subject to applicable legal obligations. Once the purpose is fulfilled, data is deleted or anonymized, unless its retention is required or permitted by law.

Your rights

Under the LGPD, you may request at any time:

• confirmation that processing takes place;
• access to your data;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
• data portability;
• information about who the data has been shared with;
• withdrawal of consent and deletion of data processed on that basis.

Contact

To exercise your rights or ask questions about this policy, write to sanaoperas@gmail.com.

Changes to this policy

This policy may be updated, for example when we adopt new providers. The date of the latest update will always be shown at the top of this page.