Privacy policy
01Who is responsible
SFN Creative, represented by Samuel Ferreira (sfncreative27@gmail.com), is responsible for processing the personal data collected through the website sfncreative.tech.
02Data collected
We only collect what you provide directly through the contact form:
- Name
- Email address
- Company name (optional)
- Phone number (optional)
- The message you send
With your consent, we also collect anonymous navigation data through Google Analytics 4: pages visited, session time, and traffic source. That data is aggregated and does not identify you.
03What the data is used for
- Replying to your message
- Sending the proposal or quote you asked for
- Improving the site based on navigation, where consent was given
Your data is never used for spam, unsolicited marketing, or sale to third parties.
04Legal basis (LGPD, Law 13.709/2018)
- Consent for analytics cookies
- Legitimate interest for replying to contact messages
- Performance of a contract where a commercial relationship exists
05Who the data is shared with
Contact messages are stored on Supabase, on a server in the us-east-1 region (United States), encrypted in transit and at rest. Nothing is sold, rented, or shared, with these exceptions:
- Supabase Inc. stores the contact form messages
- Google LLC receives anonymous analytics data, only with your consent
06How long the data is kept
Contact data is kept for up to 2 years after the last contact, or until you ask for deletion. Analytics data is kept for 14 months, the GA4 default.
07Your rights (LGPD, Art. 18)
At any time, you may:
- Confirm whether your data is being processed
- Access the data we hold about you
- Correct incomplete or outdated data
- Request deletion of your data
- Withdraw consent
- Request data portability
To exercise any of these, email sfncreative27@gmail.com with the subject "Privacy" and your request. We reply within 15 business days.
08Cookies
The site uses two kinds:
- Essential, required for the site to work (language preference, admin panel session). These cannot be disabled.
- Analytics, from Google Analytics 4, to measure how the site is used. Only with your explicit consent.
You can change your preference at any time by clearing the browser local storage or by getting in touch.
09Security
The site enforces HTTPS, sets security headers (CSP, HSTS, X-Frame-Options), validates data in the database itself, and controls access with authentication.
10Contact
Data controller: Samuel Ferreira
Email: sfncreative27@gmail.com