privacy policy.

Who we are

p.ontu is a web studio based in Brazil. The controller responsible for personal data collected through this website is Matheus Massa Ruggi, in Brazil, who can be reached at pontucontact@gmail.com.

As a small processing agent under Brazilian ANPD Resolution CD/ANPD No. 2/2022, we have not appointed a data protection officer (encarregado). For anything about your data, write to pontucontact@gmail.com.

This policy explains what data we collect, why, who receives it and what rights you have under the EU General Data Protection Regulation (GDPR) and the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados, LGPD, Law 13.709/2018).

What data we collect

We collect only what is needed to answer you and to run the site:

• Quote requests: the name, email, WhatsApp or phone number, business, country, service needed, current site and message you enter in the form.
• WhatsApp and email: the messages and contact details you share when you contact us through those channels.
• Technical data: when you load a page, your browser sends standard technical data such as your IP address, browser type and the page requested to the services that deliver the site and its fonts.

Sending the form is optional and not required by law or contract. Without your name, email and message, however, we cannot answer your request. All other fields are optional.

Why we use it and on what legal basis

• To answer your request and prepare a quote. GDPR Art. 6(1)(b) and LGPD Art. 7, V: steps taken at your request before a contract.
• To deliver the site securely and display it correctly, including its fonts. GDPR Art. 6(1)(f) and LGPD Art. 7, IX: our legitimate interest in running a working, secure website, which does not override your rights because only the minimum technical data is used for it.
• To meet legal obligations, such as keeping records required by law. GDPR Art. 6(1)(c) and LGPD Art. 7, II.

We do not sell personal data, use it for advertising or make automated decisions about you.

Who receives your data

We use the following third parties, each only for the purpose described:

• Adobe Fonts (Adobe Inc.): delivers the typefaces used on this site. Adobe receives your IP address to deliver the fonts and states that it does not store it or set cookies to serve fonts. It also receives information about the fonts served for billing and licensing.
• Web3Forms: receives the content of the quote form and forwards it to our email. How it handles submissions, and for how long it keeps them, is described in the Web3Forms privacy policy.
• Google (Gmail): our email provider, where quote requests and emails you send us are received and stored.
• WhatsApp (WhatsApp LLC / Meta Platforms): if you choose to message us on WhatsApp, your conversation is handled by WhatsApp under its own privacy policy.
• Cloudflare Workers (Cloudflare, Inc.): hosts and serves this website and processes technical request data, such as IP addresses, to do so.

International transfers

The controller is in Brazil, and some of these providers process data in other countries, including the United States. Where the GDPR or the LGPD requires it, these transfers rely on the safeguards the providers offer, such as standard contractual clauses. You can ask for more information about these safeguards at pontucontact@gmail.com.

How long we keep it

We keep quote requests and related messages for as long as needed to answer you and, if we work together, for the duration of the project and any period required by law. After that we delete them.

Technical request logs (such as IP addresses) are kept by the providers listed above for the periods set in their own policies.

Cookies

This site does not set cookies and does not store anything in your browser. If we ever add a tool that needs cookies, we will ask for your consent first and update this policy.

Your rights

Depending on where you live, you have the right to:

• Confirm whether we process your data and access it;
• Correct incomplete, inaccurate or outdated data;
• Request deletion, anonymisation or restriction of processing;
• Object to processing based on legitimate interest;
• Receive your data in a portable format;
• Know which third parties we share your data with;
• Withdraw consent at any time, where processing relies on it;
• Lodge a complaint with a supervisory authority: in the EU, your local data protection authority; in Brazil, the ANPD (Autoridade Nacional de Proteção de Dados).

To exercise any of these rights, email pontucontact@gmail.com. We may ask you to confirm your identity first. We reply within one month for requests under the GDPR (Art. 12(3)) and within 15 days under the LGPD (Art. 19, II).

Security

The site is served over HTTPS, and we limit access to your data to what is needed to handle your request. No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.

Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect data from children.

Changes to this policy

We may update this policy. The date at the top shows when it last changed.