Privacy Policy

This policy explains how we handle the personal data of people who visit this website or contact us through it, in accordance with Brazil's General Data Protection Law (Law No. 13,709/2018, LGPD). This English version is provided for convenience; in case of conflict, the Portuguese version prevails.

1. Who is responsible for your data

This website belongs to Chimiti Arquitetura LTDA, CNPJ (Brazilian company number) 33.456.043/0001-35, Av. Mauro Ramos, 1861, suite 802, Centro, Florianópolis, Santa Catarina, Brazil, postcode 88020-305 ("Chimiti Arquitetura" or "we"), the controller of the personal data processed through it.

For any matter concerning privacy and personal data, including exercising your rights, write to atendimento@chimitiarquitetura.com.br.

2. What data we collect

• Data you send us: when you fill in the contact form or reach us on WhatsApp, by phone or by e-mail, we receive what you provide, such as your name, phone or WhatsApp number, e-mail, city, type of project and your message.
• Browsing data: IP address, browser and device type, pages visited, date and time of access and the site you came from. Part of this data is logged automatically by the hosting server, and part by the analytics and advertising tools described in section 4.
• Visit source: when you arrive from an ad or a Facebook or Instagram link, we store in your browser, for up to 90 days, the click identifier (such as Google Ads' gclid or Meta's fbclid) and the campaign name. If you send the form, this information goes with your message, so we know which ad generated the contact.

We do not ask for documents or sensitive data through the website.

3. How we use the data

• To reply to you, prepare quotes and discuss your project. Legal basis: steps prior to entering into a contract, at your request (art. 7, V, LGPD).
• To provide contracted services and comply with legal and regulatory obligations, if you become a client (art. 7, II and V).
• To measure visits and the performance of the website and ads, learn which campaigns generate contacts and show Chimiti Arquitetura ads to people who have visited the site (remarketing). Legal basis: your consent, given in the cookie notice (art. 7, I).
• To keep the website secure and prevent fraud and abuse. Legal basis: legitimate interest (art. 7, IX).

We do not sell personal data or use it for purposes other than those described here.

4. Cookies and similar technologies

Cookies are small files stored in your browser. We use the following types:

• Necessary: make the website work and store your choice in the cookie notice. They do not require consent.
• Analytics: Google Analytics, installed through Google Tag Manager, shows how many people visit the site, how they arrive and which pages they view.
• Advertising: Google Ads and the Meta Pixel (Facebook and Instagram) measure actions such as form submissions and clicks on WhatsApp or phone links, and allow Chimiti Arquitetura ads to be shown to people who visited the site.

Analytics and advertising cookies are only used if you accept them in the notice shown on your first visit. You can change your mind at any time by deleting your browser's cookies or changing your choice in the notice. Refusing does not prevent you from using the site.

When you send the form and have accepted advertising cookies, your e-mail and phone number may be sent to Google and Meta in encrypted (hashed) form, only to measure which ads generated contacts. These companies do not receive your message.

5. Who we share data with

We only share data with companies that help us run the website and serve you, and only as needed:

• The website's hosting company, which logs access to the server.
• Google: Google Tag Manager, Google Analytics, Google Ads, YouTube, Google Fonts (the site's fonts) and Google Workspace (our e-mail).
• Meta: WhatsApp, when you contact us through it, and the Meta Pixel, for ads on Facebook and Instagram.
• The form e-mail delivery service, when the form is set up to send by e-mail.
• Public authorities, when required by law.

Videos on the Vlog only load the YouTube player when you click one of them, in privacy-enhanced mode (youtube-nocookie.com). From then on, YouTube may collect data under Google's privacy policy. Video thumbnails and the site's fonts are loaded from Google servers, which receive the visitor's IP address.

Each of these companies also processes data under its own privacy policy.

6. International transfers

Some of these companies, such as Google and Meta, store data on servers outside Brazil. In these cases, transfers follow the LGPD (art. 33), with the safeguards offered by those companies.

7. How long we keep data

• Contacts and quote requests: for as long as needed to handle the request and follow up on the proposal. After that, the data is deleted, unless you ask us to stay in touch.
• Clients: during the contract and, afterwards, for the periods required by law, such as tax and professional liability periods.
• Visit source stored in the browser: 90 days.
• Analytics and advertising tool data: for the period set in each tool.

8. Your rights

Under the LGPD, you may request at any time:

• confirmation that we process your data and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymisation, blocking or deletion of unnecessary data or data processed unlawfully;
• portability of your data to another provider;
• deletion of data processed based on your consent;
• information about who we share your data with;
• information about the possibility of not giving consent and its consequences;
• withdrawal of consent.

To exercise these rights, write to atendimento@chimitiarquitetura.com.br. We may ask for information to confirm your identity, and we will reply within the legal deadline. You may also lodge a complaint with Brazil's National Data Protection Authority (ANPD).

9. Security

The website uses a secure connection (HTTPS), access to data is restricted to our team and we work with reputable providers. No system is completely immune to failure; if an incident occurs that may cause relevant risk or harm, we will notify you and the ANPD, as the law requires.

10. Children and teenagers

The website is not intended for people under 18, and we do not knowingly collect data from children or teenagers.

11. Changes to this policy

We may update this policy to reflect changes to the website or the law. The date of the latest update is shown at the top of the page. See also our Terms of Use.