Privacy Policy
Here I explain, without unnecessary legalese, what personal data this site processes, why, for how long and how you stay in control of all of it.
Last updated:
Who is responsible for your data
The controller of the personal data processed on this site is Valter Furtado, CNPJ 48.247.014/0001-30, who is responsible for the ovalterfurtado.com.br website and the O Valter Furtado brand.
For any privacy matter, including exercising your rights, write to contato@ovalterfurtado.com.br. This is the data subject communication channel required by Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018).
What this policy covers
This policy applies to the ovalterfurtado.com.br website in all languages and to the contacts that start there (form, email and WhatsApp). The demo versions of client websites shown in the portfolio and the third-party websites I recommend have their own policies.
What data I process and why
I process the minimum needed for each purpose:
| Data | Purpose | Legal basis (LGPD) | Retention period |
|---|---|---|---|
| Contact form: name, email, WhatsApp, company or website, interests, industry, budget range, timeline, message, language and source page | Replying to your inquiry, understanding your needs and preparing a proposal | Preliminary procedures related to a contract, at your request (Art. 7, V), and legitimate interest (Art. 7, IX) | Up to 24 months after the last contact. If it leads to a contract, for the term of the contract plus the applicable legal periods |
| Email and WhatsApp conversations: whatever you choose to send | Customer service and negotiation | Preliminary procedures related to a contract (Art. 7, V) and legitimate interest (Art. 7, IX) | Same period as the form |
| Form security: IP address converted into an irreversible code (hash), plus the date and time of submission | Blocking spam and abuse attempts | Legitimate interest (Art. 7, IX) | Up to 24 hours |
| Server access logs: IP address, date, time, page accessed and browser | Site security and compliance with a legal obligation | Compliance with a legal obligation (Art. 7, II) and legitimate interest (Art. 7, IX) | Up to 6 months, the period set by Art. 15 of Brazil's Internet Civil Rights Framework (Marco Civil da Internet) |
| Usage analytics (Microsoft Clarity): pages visited, clicks, scrolling, device type and browser, approximate region and cookie identifiers | Understanding how the site is used and improving the experience | Consent (Art. 7, I), which you can withdraw at any time | For the period set by Microsoft for Clarity, or until you withdraw your consent |
| Preferences: your cookie and animation choices, stored in your browser | Respecting your choices on future visits | Legitimate interest (Art. 7, IX) | Cookie choices: 12 months. Animation: until you clear your browser data |
Please don't send health data, documents or passwords through the form. They aren't needed for a first contact.
What I don't do with your data
- I don't sell or rent personal data.
- I don't use your data for automated decisions that affect you.
- I don't turn on analytics or marketing tools without your consent.
- I don't add you to email lists without your specific permission.
- This site is not directed at anyone under 18 and does not knowingly collect their data.
Who the data may be shared with
I share data only when it is necessary for the purpose, and always with providers that offer security guarantees:
- Hostinger: website and email hosting, where the access logs and form messages are stored.
- Microsoft (Clarity): usage analytics, only if you accept analytics cookies.
- WhatsApp (Meta): when you choose to talk there, the conversation is also subject to WhatsApp's terms and privacy policy.
- Public authorities: when there is a legal obligation or a court order.
International transfers
Some providers may process data outside Brazil, for example on servers in the United States or Europe. In these cases, the transfer is based on the grounds set out in Art. 33 of the LGPD, such as contractual clauses and protection guarantees offered by these providers.
How I protect data
This site was built to collect little and expose even less:
- An always-encrypted connection (HTTPS with HSTS).
- Browser security policies (CSP) that block unauthorized scripts.
- A static site, with no public database and no exposed admin panel.
- A form with server-side validation, spam protection and a limit on attempts.
- Access to messages restricted to the person responsible for handling them.
No system is 100% immune. If a security incident occurs that could create a relevant risk or harm, you and Brazil's National Data Protection Authority (ANPD) will be notified, as required by the LGPD.
Your rights
Under the LGPD (Art. 18), you may request, at any time and free of charge:
- confirmation that I process your data, and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary data or data processed in noncompliance with the law;
- portability of your data to another provider;
- deletion of data processed on the basis of consent;
- information about who your data has been shared with;
- information about the possibility of not giving consent and the consequences of refusing;
- withdrawal of consent;
- objection to processing carried out on other legal grounds, in case of noncompliance with the law.
To exercise any of these rights, write to contato@ovalterfurtado.com.br. I may ask for information to confirm your identity before responding, to protect you. The full response is provided within 15 days.
If you are not satisfied, you can file a complaint with the ANPD through its website, gov.br/anpd.
If you are outside Brazil
If you access the site from the European Union, the United Kingdom or another country with a data protection law, you also have the rights provided by your local law, such as access, rectification, erasure, restriction, portability and objection, and you can lodge a complaint with your country's data protection authority. The legal bases equivalent to those described above are consent, steps taken at your request before entering into a contract, and legitimate interest.
Changes to this policy
This policy may be updated to reflect changes to the site or to the law. The date of the last update appears at the top of the page. Significant changes will be highlighted on the site.