(15) 97403-5171 (15) 2105-0808 R. Henrique dos Santos Flores, 174 · Sorocaba/SP

Privacy Policy

Updated on

This Privacy Policy explains how Gifatto Collectible Mineral Design (“Gifatto”, “we”) processes the personal data of people who visit gifatto.com.br and contact us, in line with Brazilian Law No. 13,709/2018 (General Data Protection Law, LGPD).

1. Data controller

Gifatto Collectible Mineral Design, CNPJ 23.485.401/0001-84, located at R. Henrique dos Santos Flores, 174, Parque Industrial Prestes (Éden), Sorocaba, SP, 18086-799, Brazil.

Privacy contact: WhatsApp +55 15 97403-5171 or phone +55 15 2105-0808.

2. Data we collect

Data you give us through the contact form:

  • name;
  • email;
  • phone/WhatsApp (optional);
  • collection of interest and message (optional).

Data collected automatically, in a technical and aggregated way:

  • country of origin and the page you came from (stored with the form);
  • anonymous browsing metrics, such as pages visited and performance, through Cloudflare Web Analytics, which does not use cookies and does not identify you personally.

We do not knowingly collect sensitive data or data from children.

3. How we use your data

  • To reply to your message and send the catalog and information about the pieces you asked for (legal basis: pre-contractual steps at your request).
  • To continue the conversation on WhatsApp when you submit the form (legal basis: pre-contractual steps and your consent when starting the chat).
  • To improve the website and understand how it is used, anonymously (legal basis: legitimate interest).
  • To comply with legal obligations, where applicable.

We do not sell or rent your personal data.

4. Who we share it with

Your data may be processed by providers that help us run the website, always limited to what is necessary:

  • Cloudflare: website hosting, security and storage of form messages;
  • WhatsApp (Meta): when you choose to continue the conversation in the app;
  • Google Maps: the map on the contact page is loaded by Google;
  • Instagram (Meta): the video on the About page only loads if you click to watch it.

Some of these providers may process data outside Brazil, with safeguards compatible with the LGPD.

5. How long we keep it

We keep form data for as long as needed to serve you and maintain the business relationship, and for up to 24 months after the last contact, unless the law requires a longer period. After that, the data is deleted or anonymized.

6. Cookies

The website does not use advertising or tracking cookies. We only use technical storage that is essential for it to work. Third-party content, such as the Google map and the Instagram video, may set their own cookies when loaded; the video only loads if you click to watch it.

7. Your rights

Under the LGPD, you may at any time:

  • confirm whether we process your data and access it;
  • correct incomplete or outdated data;
  • request anonymization, blocking or deletion;
  • request portability;
  • withdraw consent;
  • get information about sharing.

To exercise your rights, contact us using the details in section 1. You may also file a complaint with Brazil’s National Data Protection Authority (ANPD).

8. Security

We take technical and organizational measures to protect your data, such as encrypted connections (HTTPS) across the whole site and restricted access to the information we receive.

9. Changes to this policy

We may update this policy to reflect changes to the website or the law. The date of the last update appears at the top of this page.