Privacy Policy
Estúdio Luz e Forma is committed to protecting the privacy of visitors to our online platform and users of our services. This policy outlines how we collect, use, disclose, and protect your personal information in compliance with applicable laws and regulations, including the General Data Protection Regulation (GDPR).
Data Controller
The data controller responsible for your personal information is Estúdio Luz e Forma, located at Rua Augusta, 75, 3rd Floor, São Paulo, São Paulo, 01305-000, Brazil.
Information We Collect
We collect information to provide and improve our services. The types of information we collect include:
Information you provide to us directly:
This includes information you give us when you contact us, book a service, fill out forms on our site, or communicate with us. This may include your name, email address, phone number, mailing address, project details, payment information, and any other information you choose to provide.
Information we collect automatically:
When you visit our site, we may automatically collect certain information from your device. This includes your IP address, browser type, operating system, referring URLs, pages visited, and the dates and times of your visits. We may also collect information about how you interact with our site.
Usage Data:
Information on how you use our site and services.
How We Use Your Information
We use the information we collect for various purposes:
To provide and fulfill our services, including portrait photography, commercial photography, event photography, product photography, photo retouching, videography, and studio rental.
To communicate with you about your bookings, inquiries, and our services.
To process payments for services rendered.
To personalize your experience on our site.
To send you marketing and promotional communications, where you have consented to receive them.
To improve our site and services.
To comply with legal obligations and protect our legal rights.
To prevent fraud and ensure the security of our services.
Legal Basis for Processing
Our legal basis for collecting and using your personal information will depend on the specific context in which we collect it. We will normally collect personal information from you where:
We need the personal information to perform a contract with you (e.g., to provide the photography services you have booked).
The processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms (e.g., for site improvement, fraud prevention).
We have your consent to do so (e.g., for sending marketing communications).
We need to process your personal information to comply with a legal obligation.
Data Sharing and Disclosure
We do not sell your personal information to third parties. We may disclose your personal information to the following categories of recipients:
Service providers:
Third-party vendors, consultants, and other service providers who perform services on our behalf, such as payment processing, website hosting, data analysis, marketing, and customer service. They only access your data to perform these tasks on our behalf and are obligated not to disclose or use it for other purposes.
Business transfers:
In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
Legal requirements:
If required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, (ii) protect and defend our rights or property, (iii) act in urgent circumstances to protect the personal safety of users of the service or the public, or (iv) protect against legal liability.
Data Security
We implement technical and organizational measures designed to protect the personal information we collect and process. However, no security system is impenetrable, and we cannot guarantee the absolute security of your data.
Data Retention
We retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax, or accounting requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
Your Data Protection Rights
Under GDPR and other applicable laws, you have the following rights regarding your personal information:
- The right to access: You have the right to request copies of your personal data.
- The right to rectification: You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
- The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
- The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
- The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
- The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
- The right to withdraw consent: If we have collected and processed your personal information with your consent, you have the right to withdraw your consent at any time.
To exercise these rights, please contact us using the details provided below. We will respond to your request in accordance with applicable data protection laws.
Cookies
We may use cookies and similar tracking technologies to collect and use personal information about you, including to serve personalized advertising. You can manage your cookie preferences through your browser settings.
Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page. You are advised to review this policy periodically for any changes.
Contact Us
If you have any questions about this privacy policy or our data practices, please contact us by mail at:
Estúdio Luz e Forma
Rua Augusta, 75, 3rd Floor
São Paulo, São Paulo, 01305-000
Brazil