Privacy Policy
Effective October 23, 2026. This is a translation; in case of any discrepancy, the Portuguese version prevails, without prejudice to any mandatory rights you have under the law of your country.
- This site uses no tracking cookies, analytics, advertising pixels or visitor profiling.
- We only collect the data you send through the contact form, to answer your request.
- We do not sell or rent personal data.
- You can ask to access, correct or delete your data at any time at contact@ahronluccas.com.
1. Who is responsible for your data
Ahron Luccas Gomes (controller)
Brazilian company registration (CNPJ): 53.128.821/0001-01
Mogi das Cruzes – SP, Brazil
Privacy contact: contact@ahronluccas.com
As a small-scale processing agent under Brazilian ANPD Resolution CD/ANPD No. 2/2022, no formal data protection officer is appointed. The address above is the channel for data subjects and authorities.
2. What data we process, why, and on what legal basis
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, phone/WhatsApp (optional), project type (optional), message, language and the page the message was sent from. | To answer your enquiry and prepare a service proposal. | Pre-contractual steps at your request (LGPD art. 7, V; GDPR art. 6(1)(b)). |
| IP address, date and time of contact form submissions and of access to the admin area. | Keeping application access records as required by Brazilian law. | Legal obligation under Brazil's Internet Civil Framework, art. 15 (LGPD art. 7, II); for visitors protected by the GDPR, legitimate interest (art. 6(1)(f)). |
| Technical browser and device signals and IP address, analysed by the anti-bot check (Cloudflare Turnstile). | Preventing spam and automated attacks on the form. | Legitimate interest in site security (LGPD art. 7, IX; GDPR art. 6(1)(f)). |
| Technical connection data (IP address, browser, requested page) handled by the hosting infrastructure. | Delivering pages and videos and protecting the site against abuse. | Legitimate interest (LGPD art. 7, IX; GDPR art. 6(1)(f)). |
Please do not send sensitive data (for example, health information) or other people's data through the form. If that happens, it will be deleted.
3. Cookies and browser storage
The public site does not use cookies. It only uses the browser's session storage (sessionStorage) to remember your position on the page and the open video when you switch languages. This stays on your device, is never sent to us and is erased when the tab is closed. That is why there is no cookie banner.
The admin area, used only by the site owner, uses a strictly necessary session cookie for login.
4. Who we share data with
We only share data with providers that help us run the site, and only as far as necessary:
- Cloudflare, Inc. (United States): hosting, content delivery, video storage, security and anti-bot check (Turnstile). Cloudflare's policy.
- Resend (United States): delivering the message you write in the form to our mailbox. Resend's policy.
- The email provider hosting the mailbox that receives messages sent to contact@ahronluccas.com.
- Public authorities, when required by law or court order.
We do not sell, rent or hand over personal data for advertising.
5. International transfers
Because Cloudflare and Resend are based in the United States, your data may be processed outside Brazil and outside your country. These transfers are necessary to handle the contact you requested and rely on the contractual data protection safeguards offered by those providers (LGPD art. 33; for the GDPR, safeguards such as standard contractual clauses under art. 46).
6. How long we keep data
- Contact form messages: up to 12 months after the last contact. If the contact leads to a contract, the necessary data is kept for as long as the contract and legal or tax obligations require.
- Access records (IP, date and time): 6 months, then deleted automatically.
- Providers' technical data: for the period set in each provider's policy.
7. Your rights
Under the LGPD (art. 18) and, where applicable, the GDPR (arts. 15–22), you can, free of charge:
- confirm whether we process your data and access it;
- correct incomplete, inaccurate or outdated data;
- request anonymisation, blocking or deletion of unnecessary or excessive data, or data processed unlawfully;
- request data portability;
- know who we share your data with;
- object to processing based on legitimate interest, where applicable;
- request deletion of your data, except where the law requires us to keep it.
To exercise your rights, write to contact@ahronluccas.com. We may ask for information to confirm your identity. We reply within 15 days. You may also complain to Brazil's ANPD (gov.br/anpd) or to the data protection authority of your country.
8. Security
We use encrypted connections (HTTPS), an anti-bot check, a restricted admin area protected by a strong password, password storage only as a hash, and login attempt limits. No system is completely invulnerable; if a security incident may pose a relevant risk, we will notify affected people and the authorities as required by law.
9. Minors
The site is intended for professional engagements and is not directed at anyone under 18. If we learn that a minor sent data without parental authorisation, it will be deleted.
10. Links to other sites
Links to WhatsApp, Instagram and Discord lead to third-party services with their own privacy policies, which apply when you use them.
11. Changes to this policy
This policy may be updated. The effective date at the top shows the current version. Relevant changes will be highlighted on this page.