Privacy policy

This policy describes, in plain language, how Catarina Nábya — Arquitetura & Interiores handles personal data collected through this website, in compliance with the Brazilian General Data Protection Law (Law nº 13.709/2018 — LGPD) and equivalent international standards (GDPR for EU/UK visitors).

1. Controller and DPO

The data controller is Catarina Nábya — Arquitetura & Interiores, a self‑employed professional based in Parauapebas — PA, Brazil. Catarina Nábya herself acts as the Data Protection Officer. For any matter related to privacy, exercising your rights or complaints, please write to projetos@catarinanabya.com.br.

2. Data we collect

We only collect data strictly necessary to reply to your contact:

• Contact form: name, email and the content of the message you voluntarily send.
• Browsing data: anonymous and aggregated usage metrics (pages visited, device, traffic source) via analytics that do not identify individuals.
• Direct WhatsApp and email: the information you voluntarily share through those channels.

We do not request or store sensitive data (national IDs, health, financial or biometric data) through the website.

3. Purpose of processing

The data submitted through the form is used exclusively to (i) reply to your contact, (ii) draft and send commercial proposals when requested, (iii) conduct any contractual relationship that follows and (iv) comply with legal obligations. We do not use your data for profiling, targeted advertising or commercial transfer to third parties.

4. Legal basis

Processing is based on the following legal bases:

• Consent — when you submit the form or initiate contact voluntarily.
• Performance of a contract or pre‑contractual steps — to draft proposals and deliver services.
• Legitimate interest — for aggregated usage metrics, always respecting your expectations and rights.

5. Sharing and processors

To run the site we work with service providers (processors), who handle data only following our instructions and under confidentiality clauses. These providers cover technical functions such as website hosting, anonymous usage metrics and transactional email delivery for the form.

An up‑to‑date list of processors and their purposes is available on request via projetos@catarinanabya.com.br. We do not sell, rent or transfer your data to third parties for marketing.

6. International data transfers

The processors above may handle data on servers located outside Brazil. Transfers occur under the safeguards offered by those providers and under internationally recognised security standards (Standard Contractual Clauses where applicable).

7. Cookies

This site uses only strictly functional cookies (preserving navigation preferences) and anonymous usage metrics. We do not use advertising, remarketing or cross‑site tracking cookies. You can disable cookies in your browser settings at any time.

8. Information security

We adopt reasonable technical and administrative measures to protect personal data against unauthorised access, loss, alteration or improper disclosure — including TLS/HTTPS in all communications, restricted access with multi‑factor authentication for email accounts and administrative tools, and periodic review of access permissions.

9. Your rights

You have the right, at any time and free of charge, to:

• Confirm whether processing is taking place;
• Access your data;
• Correct incomplete, inaccurate or outdated data;
• Request anonymisation, blocking or deletion of unnecessary data;
• Port data to another service or product provider;
• Delete data processed under consent;
• Be informed about public and private entities with whom data was shared;
• Withdraw consent at any time.

To exercise any right, please write to projetos@catarinanabya.com.br. We reply within 15 days.

10. Retention

Messages submitted through the form are kept for as long as needed to fulfil the purpose — generally up to 24 months after the last contact. After that, data is deleted or anonymised, except where a legal, contractual or judicial duty requires otherwise.

11. Children

This site is not intended for people under the age of 18 and we do not knowingly collect data from minors. If we identify such collection, the data will be deleted immediately.

12. Complaints

If you believe the processing of your data is not in line with the law, you can file a complaint with the Brazilian Data Protection Authority (ANPD) via the official channel at gov.br/anpd — or, for EU/UK visitors, with your local supervisory authority.

13. Changes

This policy may be reviewed periodically. When there is a relevant change, we will publish the new version on this page with the corresponding date. Material changes will be communicated through the available channels when there is active processing of your data.