Privacy policy
Last updated: October 8, 2026
This policy explains what personal data Offero Studio processes, what for, who it is shared with and how you exercise the rights granted by Brazil's General Data Protection Law (Lei nº 13.709/2018, LGPD).
This is a translation. If it differs from the Portuguese version, the Portuguese version prevails.
Who the controller is
Offero Studio is a trade name of Denise Figueiredo de Rezende Ltda, a Brazilian company based in Campinas, São Paulo, Brazil. It is the controller of the data described here.
For anything about your data, including the requests listed under "Your rights", write to contact@offerostudio.com. This is the communication channel for data subjects and for Brazil's National Data Protection Authority (ANPD).
What data we process
- Browsing the site. The site has no forms, uses no advertising cookies and installs no tracking tools. Like any website, the hosting provider logs technical connection data (IP address, browser, date and time) to serve pages and protect the site against abuse.
- Language preference. If you switch languages, the choice is saved in your own browser, not on our servers.
- Contact. When you reach us on WhatsApp or by email, we process what you send: name, phone number, email address and the content of the conversation. The WhatsApp message comes pre-filled with the page you came from, so we know how you found us.
- Clients. To sign and deliver a project, we process the details needed for the contract and the invoice (name or company name, tax ID, address, email and phone) and the materials you send us for the project.
- Client portal. The file delivery portal uses email login. We store name, email and, when provided, phone number and profile photo, plus the project files and a record of who uploaded each one.
Why we use it and on what legal basis
- Replying to you and preparing a proposal: steps prior to a contract, at your request (art. 7, V).
- Delivering the contracted project and running the delivery portal: performance of a contract (art. 7, V).
- Issuing invoices and keeping accounting and tax records: compliance with a legal obligation (art. 7, II).
- Keeping the site secure and running, including technical access logs: legitimate interest (art. 7, IX), limited to what that requires.
We do not use your data for advertising, we do not sell or rent personal data and we make no automated decisions about you.
Who we share it with
We use providers that process data on our behalf, only for the purposes above:
- Cloudflare: site hosting and storage of portal files.
- Clerk: client portal login.
- Neon: portal database.
- Resend: portal emails.
- WhatsApp (Meta): messaging, when you choose to reach us there.
- Accountant: data needed for invoicing and tax obligations.
We also share data when the law or an order from a competent authority requires it.
International transfers
Some of these providers store or process data outside Brazil, mainly in the United States. These transfers are needed to perform our contract with you or fulfil your request (LGPD art. 33, IX) and are made with providers that adopt contractual and technical data protection safeguards.
Cookies
The public pages use no advertising or analytics cookies. The login service (Clerk) uses technical cookies needed to keep the client portal session. Because the site and the portal are the same application, these cookies may also be set on public pages; they are not used to follow your browsing.
How long we keep it
- Contacts that do not become projects: while the conversation is ongoing and for up to 12 months after the last contact.
- Client and contract data: during the project and for 5 years after the contract ends, the period of tax obligations and of possible legal claims.
- Client portal: while access is active. You can ask us to remove your account and files before that.
- Technical access logs: for as long as site security requires or the law demands.
Your rights
Under the LGPD (art. 18), you can ask at any time for:
- confirmation that we process your data, and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary or excessive data;
- portability of your data to another provider;
- deletion of your data, except what the law requires us to keep;
- information on who we share your data with;
- objection to processing based on legitimate interest.
To exercise any of them, write to contact@offerostudio.com. We reply within 15 days. If you are not satisfied with the answer, you can file a complaint with the ANPD at gov.br/anpd.
Security
The site only runs over an encrypted connection (HTTPS). The portal requires login, each client sees only the files of their own project and administrative access is restricted to the Offero team.
If a security incident could bring relevant risk or harm, we notify the affected data subjects and the ANPD, as the law requires.
Children and teenagers
The site and services are aimed at professionals and businesses. We do not knowingly collect data from anyone under 18.
Changes to this policy
When this policy changes, the date at the top is updated. Relevant changes are also emailed to clients with an active project.