Privacy policy
This policy explains how we handle personal data on pedromaiamkt.com and when we provide the Vitrine Digital service. We keep it short and plain.
1. Who is responsible
Pedro Maia | Marketing Digital is operated by 50.322.896 Pedro Felipe Maia Rodrigues, registered in Brazil as an individual entrepreneur (CNPJ 50.322.896/0001-01), Rio de Janeiro, Brazil. This company is the controller of the data described below.
To exercise a right or ask a question, use the contact form on the home page and choose the message "Privacy" in the text. We answer within 30 days.
2. What we collect
- Contact form: your name, email, business name, city, the optional link to your Google profile, your message, the time of the request and your consent.
- Server logs: IP address, time, page requested and browser type, kept for a short time for security and then deleted automatically.
- If you become a customer: information about your business and profile, the content you approve, the manager invitation, and billing records. Card details are handled by an external payment processor and are not stored by us.
- Public information about your business from Google Maps, your website and your Instagram, used to prepare the free reading of your profile. This is information the business has chosen to publish.
3. What we do not do
This site sets no cookies, uses no analytics, no advertising pixels and no trackers. It stores nothing in your browser. We do not sell or share personal data for advertising.
4. Why we use it, and the legal basis
- To answer your request and, if you wish, to start the service: steps taken at your request before a contract (GDPR art. 6(1)(b); LGPD art. 7, V).
- To keep a record of your consent when you tick the box (GDPR art. 6(1)(a); LGPD art. 7, I).
- To keep the site secure and to reach out to businesses about their public profile, with an easy way to opt out: legitimate interest (GDPR art. 6(1)(f); LGPD art. 7, IX).
- To meet tax and accounting duties once you are a customer: legal obligation.
5. Data from your Google profile
When you invite us as a manager, we can only do what a manager can do. We do not store data obtained from Google's services for more than 30 days. If we change something on the account, we tell you within 48 hours. You can remove us whenever you want, and control returns to you alone within seven business days.
6. Who receives data
Our hosting provider (the server where this site runs), a payment processor once payments are active, and Google as the platform that hosts your profile. We do not sell data. Because we operate from Brazil, data may be processed in Brazil and in the country of our hosting provider. Where the law requires safeguards for transfers from the European Union or the United Kingdom, we apply them.
7. How long we keep it
- Contact requests: up to 12 months after the last contact, unless a contract starts.
- Customer records: while the service lasts and for the period the law requires for tax records.
- Server logs: a short rotation, automatic.
8. Your rights
Under GDPR, UK GDPR and LGPD you may ask for access, correction, deletion, restriction, portability, to object to processing and to withdraw consent at any time. You may also complain to your data protection authority: in Portugal the CNPD, in the United Kingdom the ICO, in Brazil the ANPD. If you are in the United States, we do not sell or share your personal information.
9. Security and children
We use encrypted connections (HTTPS) and limit access to the server. This service is for businesses and is not directed to anyone under 18.
10. Changes
If we change this policy in a way that matters, we update the date above. Older versions are available on request.