Privacy Policy

This policy explains what data the Atelier Gustavo Gomes website collects, why it collects it, and what you can ask about it. It applies to ateliergustavogomes.fluxxoag.com.br and to the shop hosted on it.

Who is responsible for your data

Gustavo Spinelli Gomes Vachi LTDA
Company number (CNPJ) 17.592.761/0001-82
Rua José do Patrocínio, 1135 · Marechal Floriano · Caxias do Sul/RS · Brazil · 95020-080
Email: gomesoficioarte@gmail.com
WhatsApp: (54) 98121-9955

What data we collect

When you buy

Name, email, delivery and billing address, phone and, when the invoice requires it, your tax number (CPF). Without that data we cannot charge, invoice or deliver.

When you create an account

Email and password. The password is stored encrypted: not even the studio can read it.

When you are only browsing

The server records IP address, browser and pages visited, like any web server. Those records are used for security and for diagnosing faults.

When you write on WhatsApp

The contact buttons open a conversation on WhatsApp. From there the conversation lives in the app, under Meta's rules, and the studio then has the phone number you used.

What this website does NOT do

There is no audience analytics tool, social network pixel or advertising cookie on this website. We do not sell, rent or trade customer data with anyone.

Cookies

We only use the cookies the site needs to work:

• Cart and session: they hold what you put in the cart while you browse.
• Login: they keep you signed in to your account, if you created one.

You can block cookies in your browser. If you block them, the cart and the login stop working.

Who the data is shared with

• Mercado Pago, to process the payment. Card details are typed into their environment and the studio never has access to the card number.
• The courier or the post office, only what is needed to deliver: name, address and phone.
• Hostinger, which hosts the site and therefore stores the database.
• Google Fonts. The site's typeface is loaded from Google's servers, which receive your IP address in that request.

How long we keep it

Order data is kept for the period required by tax law, counted from the purchase. Account data is kept while the account exists. Server access logs are kept for six months, as required by Brazil's Internet Civil Framework.

Your rights

Brazil's General Data Protection Law (Law 13.709/2018) guarantees that you can ask, at any time, for:

• confirmation that we process your data, and access to it;
• correction of incomplete or wrong data;
• anonymisation, blocking or deletion of unnecessary data;
• portability to another provider;
• deletion of data processed with your consent;
• information about who we share it with;
• withdrawal of consent.

To exercise any of these, write to gomesoficioarte@gmail.com. We reply within 15 days.

One honest caveat: data from an order already invoiced cannot be deleted before the tax deadline, because tax law requires us to keep it.

Security

The whole site runs on HTTPS, passwords are encrypted and administrative access is restricted. No system is impenetrable, but if there is an incident that puts you at risk, we will tell you and Brazil's Data Protection Authority.

Under 18s

The shop is not aimed at people under 18 and we do not knowingly collect data from children or teenagers. If that happens by mistake, write to us and we will delete it.

Changes to this policy

If we change anything, the date below changes with it. The version published here is always the one that applies.

Last updated: 16 September 2026.