Privacy Policy
Last updated: July 4, 2026
Summary: we only collect what you type into our contact form yourself (name, email, budget range, and message), to reply to your request. We don't use tracking cookies or sell your data to anyone. That information is sent by email through Resend, our transactional email provider based in the United States. You can request access to, correction of, or deletion of your data at any time through our contact form.
Who we are
Maré Digital ("we"), Brazilian company registration (CNPJ) 48.270.830/0001-65, is the controller of the personal data processed through this site, under Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018) and, for EU/UK visitors, the GDPR.
We don't yet have a formally designated Data Protection Officer. Small businesses, sole proprietors, and startups are exempt from that requirement under ANPD Resolution No. 2/2022, provided they keep an open communication channel with data subjects. Ours is described in the "Contact" section below.
What data we collect
We only collect personal data when you voluntarily fill out this site's contact form.
Contact form
Data collected: name, email, budget range, and the message you write.
Purpose: to reply to your project inquiry or business contact, nothing beyond that.
Legal basis: performance of pre-contractual steps requested by you (LGPD Art. 7, V), or, alternatively, our legitimate interest in responding to business inquiries we receive (LGPD Art. 7, IX), equivalent to GDPR Art. 6(1)(b)/(f).
International data transfer
Resend processes data on servers located in the United States. For Brazilian visitors, this is an international personal-data transfer under LGPD Art. 33.
Brazil has no adequacy decision for the United States. Resend is certified under the EU-US and UK-US Data Privacy Framework and maintains a Data Processing Agreement (DPA) with Standard Contractual Clauses (SCCs) as a further safeguard, mechanisms recognized under European regulation, which we treat as our best-practice benchmark for this transfer.
When you accept analytics cookies, Google also processes usage data on servers that may be located outside Brazil. Google states, in its own privacy policy, compliance with the EU-US and Swiss-US Data Privacy Framework and the UK Extension.
This is the most sensitive point of our data operation, and we keep it under ongoing review with specialized legal counsel.
How long we keep your data
We don't store contact-form data in any database on the site. It reaches us only as an email message, kept for as long as needed to respond to your inquiry and, after that, per our inbox's and Resend's own retention practices.
Your rights
Under LGPD Art. 18 and, equivalently, GDPR Arts. 13 to 22 for visitors in the European Union, you have the right to:
- Confirmation that we are processing your data
- Access to your data
- Correction of incomplete, inaccurate, or outdated data
- Anonymization, blocking, or deletion of unnecessary data or data processed unlawfully
- Portability of your data to another service provider
- Deletion of personal data processed with your consent
- Information about which public and private entities we share your data with
- Information about the option to withhold consent and the consequences of doing so
- Withdrawal of consent at any time
We respond to any request within 15 days, per LGPD Art. 19.
How to exercise your rights
To exercise any of these rights, reach out through the form below or by email at [email protected].
Children's privacy
This site is not directed at anyone under 18, and we don't knowingly collect data from children or teenagers.
Security
This site is served exclusively over HTTPS, with HSTS enabled. Your browser is instructed to never load it over an unencrypted connection.
We apply industry-standard security headers: clickjacking protection, MIME-sniffing blocked, a restrictive referrer policy, and browser-level blocking of camera, microphone, and geolocation access.
Since we don't keep a database of your personal data, the surface area for a breach is inherently minimal.
Changes to this policy
We may update this policy periodically to reflect changes in the law or in how we operate. The date at the top of this page ("Last updated") always reflects the current version.
Complaints to an authority
If you're in Brazil, you can file a complaint with the National Data Protection Authority (ANPD).
File a complaint with ANPD →If you're in the European Union or the United Kingdom, you can file a complaint with your country's data protection authority.
Contact
Questions about this policy or how we handle your data? Reach out through the form below or by email at [email protected].