Privacy policy

Last updated: 14 October 2026.

This policy explains how Studio D1 Arquitetura handles personal data, in line with the Brazilian General Data Protection Law (Law 13,709/2018, LGPD).

1. Who is the controller

The data controller is Studiod1 Arquitetura Construção e Design Ltda., CNPJ 43.803.764/0001-28, based in Angra dos Reis, RJ, Brazil. Contact for any privacy matter: studiod1.angra@gmail.com.

2. What data we collect

Through the briefing form we collect only what you provide:

  • name, email and phone or WhatsApp;
  • preferred language and contact channel;
  • project details: type, location, approximate area, timing, whether you already own a site or property and, if you wish to say, the investment range;
  • the text of your message.

3. What we use it for, and the legal basis

We use this data to reply to you and to prepare a proposal, on the basis of your consent (LGPD, art. 7, I) and of preliminary steps relating to a possible contract (art. 7, V).

If you tell us you do not yet have a site or property, we record this only to guide our response. We do not pass your data to Canaã Imóveis de Luxo, or to any other company, without your specific consent.

4. Who we share it with

We do not sell personal data. We use providers that process data on our behalf (processors), only to run the site and the form:

  • Resend, to send emails;
  • Cloudflare Turnstile, for the form's anti-spam check;
  • Railway, to host the site.

5. How long we keep it

We keep the brief for as long as needed to deal with your request. If no engagement follows, we delete the data within 24 months. If one does, we keep it for the term of the contract and of the applicable legal obligations.

6. Your rights

Under article 18 of the LGPD you may, at any time: confirm that we process your data; access it; correct it; request anonymisation, blocking or deletion; request portability; find out who we share it with; and withdraw consent. To exercise any of these rights, write to studiod1.angra@gmail.com. You may also complain to the Brazilian data protection authority (ANPD).

7. Cookies and audience measurement

This site does not use non-essential cookies or advertising tools. When audience measurement is on, we use a cookieless service that records visits and clicks (such as clicks on WhatsApp) in aggregate, without identifying people. If we later adopt tools that use cookies, we will ask for your consent first.

8. Security

We use encrypted connections (HTTPS), security headers, protection against automated submissions and restricted access to the data we receive. No system is infallible; in the event of an incident that may pose a significant risk to you, we will notify you and the ANPD, as the law requires.

9. Changes to this policy

We may update this policy. The date of the last update appears at the top of the page.