Privacy
This page explains what personal data Umbra processes when you use this site, what for, on what legal basis, who it is shared with, how long it is kept, and how to exercise your rights. Umbra is a Brazilian company, so this processing is governed by Brazil's General Data Protection Law (Law 13,709/2018, the LGPD). We extend the same rights to every visitor, wherever you are.
What we collect
Through the contact form: name, email, message, the line of interest, the budget range and the page language. When you visit, as with any website, the server and the network that delivers the pages log technical connection data: IP address, date and time, page visited and browser. Audience is measured in aggregate, without identifying you. We use no cookies: neither tracking nor advertising.
What we use it for
Form data is used to answer you and, if you wish, to prepare a proposal. Technical data is used to deliver the pages, protect the site against attacks and keep the access logs that Brazil's Internet Civil Framework (Marco Civil da Internet) requires. We don't sell data, don't use it for advertising, and make no automated decisions about you.
Legal basis
Form: steps prior to entering a contract, at your request; you are the one reaching out about a service (LGPD, Art. 7, V). Technical data: compliance with a legal obligation, for keeping access logs (LGPD, Art. 7, II, and Marco Civil da Internet, Art. 15), and legitimate interest in keeping the site secure and measuring audience in aggregate (LGPD, Art. 7, IX).
Who we share it with
Only with the providers that make the site work, each in its own role: Resend, which delivers the form message by email; our email provider, where it arrives; Cloudflare, which delivers the pages and filters attacks; and the provider that hosts the server. Resend and Cloudflare are in the United States, so your data may be processed there. Transferring form data abroad relies on it being necessary to answer the contact you requested (LGPD, Art. 33, IX).
How long we keep it
Form data: for as long as needed to answer you and, if a proposal moves forward, for the length of the business relationship and the legal periods that follow from it. Without a reply or continuation, we delete it within 24 months. Access logs: 6 months, kept confidential, as the Marco Civil da Internet requires.
Your rights
At any time, free of charge, you can request: confirmation that we process your data; access to it; correction; anonymization, blocking or deletion of anything unnecessary or excessive; portability; information on who we share it with; and to object to processing that does not comply with the law (LGPD, Art. 18). We respond within 15 days. If you are not satisfied, you can complain to Brazil's National Data Protection Authority (ANPD).
Security
The site is served over HTTPS only, every code change goes through an automated security scan, and access to form data is limited to whoever answers the contact. If an incident may bring you relevant risk or harm, we will notify you and the ANPD, as the LGPD requires (Art. 48).
Contact
The controller of the data processed on this site is 62.437.273 ALIFY ALVES LOPES DA SILVA, a Brazilian sole proprietorship (MEI), CNPJ 62.437.273/0001-55, which operates the Umbra brand. To exercise your rights or ask anything about privacy, write to [email protected].