LGPD
Privacy Policy
Last updated: August 05, 2026
Courtesy translation. This site is operated from Brazil and governed by Brazilian law (LGPD — Law No. 13,709/2018). In case of any conflict or ambiguity, the Portuguese-language version prevails.
View in PortugueseThis policy explains what personal data is collected on this site, why, who it's shared with, and how you can exercise your rights, in compliance with Brazil's General Data Protection Law (Law No. 13,709/2018 — LGPD).
1. Who is the controller
The controller of the data processed on this site is Kleber Menezes, Product Designer & UX, based in Londrina/PR, Brazil. Contact: menezesmkt@gmail.com.
2. What data is collected
The only personal data actively collected is what you provide yourself in the contact form, plus technical access data generated automatically by browsing:
| Data | Purpose | Legal basis |
|---|---|---|
| Name | Identify who is sending the message and personalize the reply. | Performance of preliminary procedures prior to a contract (LGPD Art. 7, V) |
| Reply to the contact. | Performance of preliminary procedures prior to a contract (LGPD Art. 7, V) | |
| Company (optional) | Give context to the project before replying. | Performance of preliminary procedures prior to a contract (LGPD Art. 7, V) |
| Project type | Route the message to the intended kind of work. | Performance of preliminary procedures prior to a contract (LGPD Art. 7, V) |
| Message | Understand the challenge or request. | Performance of preliminary procedures prior to a contract (LGPD Art. 7, V) |
| Date/time and policy acceptance | Prove informed consent was given at submission (burden of proof). | Compliance with a legal obligation (LGPD Art. 8, §1) |
| Technical access data (IP, user agent) | Security, fraud prevention and troubleshooting. | Legitimate interest (LGPD Art. 7, IX) |
3. Cookies and local storage
legal.privacy.s3Body
4. Who the data is shared with
No data is sold. Contact form data passes through the processors below to enable sending and receiving your message, including reCAPTCHA's anti-spam check. Google Analytics 4 also processes browsing data for usage measurement:
| Processor | Purpose | Country |
|---|---|---|
| Resend (Resend, Inc.) | Transactional delivery of the email generated by the contact form. | United States |
| Google LLC (Gmail) | Receiving and storing messages in the menezesmkt@gmail.com inbox. | United States |
| Google LLC (Analytics 4) | Site usage measurement via Google Analytics 4 (gtag.js). | United States |
| Google LLC (reCAPTCHA) | Protecting the contact form against automated submissions (spam). | United States |
| Hosting provider | Running the application and technical access logging for security. | Brazil or the United States, depending on the infrastructure in use |
5. International transfer
Resend and Google LLC (Gmail, Analytics 4 and reCAPTCHA) run infrastructure in the United States, so that data may be processed outside Brazil (LGPD Art. 33). These companies maintain their own privacy policies and international compliance mechanisms — see the links in the table above.
6. Retention
Contact messages are kept in the controller's email inbox for as long as needed to reply and, after that, according to the email provider's own retention policy. This site does not keep its own database of received messages — nothing is stored on the server beyond sending via Resend.
7. Security
The site is served over HTTPS with HSTS and applies a Content Security Policy. Google Analytics 4 (gtag.js) loads for usage measurement and Google reCAPTCHA protects the contact form against automated submissions; the required domains are allowed in the CSP. Typefaces are hosted locally (via next/font).
8. Your rights
As the data subject, you may request at any time:
- Confirmation that data processing is taking place
- Access to the data
- Correction of incomplete, inaccurate or outdated data
- Anonymization, blocking or deletion of unnecessary data or data processed in violation of the law
- Portability of data to another service provider, upon express request
- Deletion of personal data processed with consent
- Information about public and private entities with which the controller shared data
- Information about the right to withhold consent and the consequences of doing so
- Withdrawal of consent
- Review of decisions made solely on the basis of automated processing
To exercise any of these rights, write to menezesmkt@gmail.com. Requests will be answered within a reasonable time, as required by the LGPD.
9. Children's data
This site is not directed at children or teenagers and does not intentionally collect data from minors without the appropriate consent of a legal guardian.
10. Changes to this policy
This policy may be updated to reflect changes to the site or to the law. The last-updated date is always shown at the top of this page.
11. Data Protection Officer and National Data Protection Authority
Questions, complaints or requests about data processing can be sent to menezesmkt@gmail.com. If you don't receive a satisfactory response, you may also file a complaint with Brazil's National Data Protection Authority (ANPD), at gov.br/anpd.
Kleber Menezes · Londrina/PR