Privacy Policy

Gurgel Hub ("we", "our" or "the company") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, store and protect the information provided through gurgelhub.com.br (the "Site").

This policy complies with the Brazilian General Data Protection Law (LGPD) — Law 13.709/2018 — and the European Union's General Data Protection Regulation (GDPR), as applicable to the user's jurisdiction.

By using the Site, you agree to the practices described in this Policy.

Data you provide: when you get in touch through the contact form or the Site's channels (WhatsApp, email), we may collect: full name, email address, message/project description and phone number (if contacted via WhatsApp).

Data collected automatically: the Site is static and, by default, does not use tracking cookies. With your consent (cookie banner shown on your first visit), we may enable third-party analytics tools (e.g. Google Analytics, Meta Pixel) to understand how the Site is used — see section 9 (Cookies) for details. Hosting providers and CDNs may technically log: IP address, access date and time, browser type and operating system and referrer — standard server logs, not used to identify or track individual users.

What we do NOT collect: advertising cookies, sale of data to third parties, or sensitive data (racial origin, religious beliefs, political opinion, health, sexual life, biometrics).

Data provided through the contact form is used exclusively to: (1) respond to your request — projects, quotes, questions or partnership proposals; (2) provide services — if you become a client, project-related communication; (3) legal obligations — when required by law, regulation or court order.

We do not use your data for: marketing or newsletters (we have no email list), profiling/segmentation, or sale/rental to third parties.

Under the LGPD (Art. 7) and the GDPR (Art. 6), processing is based on: consent (Art. 7, I) — you provide data voluntarily when contacting us; contract performance (Art. 7, V) — data required to provide the service; legal obligation (Art. 7, II) — retention of logs required by law. You may withdraw consent at any time (see your rights section).

We do not share your personal data with third parties, except: service providers (Hostinger — hosting/IP logs; WhatsApp/Meta — communication initiated by you) and legal obligations (court order or competent authority). The site is hosted in Brazil; WhatsApp operates under US jurisdiction if you choose to use it.

Contact messages (email) are kept for up to 2 years after the last interaction; client data (projects), for the duration of the project + 5 years (tax/contractual obligations); server logs and WhatsApp data, according to Hostinger and Meta/WhatsApp policies. After the retention period, data is permanently deleted.

Technical measures: 100% static site (no database accessible through the site, form without its own backend), HTTPS/SSL on all traffic, tracking cookies only with consent (see section 9) and image protection (right-click and drag blocking — a cosmetic measure, not real security).

When Directus is integrated (future): contact data stored on Perifa's server (Hostinger), API token used only at build time (never in the browser) and admin access protected by a strong password and 2FA (if available).

Limitations: no system is 100% secure; we take reasonable measures, but cannot guarantee that interception by third parties will not occur.

Under the LGPD (Arts. 18 onwards) and the GDPR (Arts. 15-22), you may request: access (copy of your data), correction, deletion ("right to be forgotten"), portability, objection to processing, consent withdrawal and information about usage.

To exercise them, email danigurgel@gurgelhub.com.br with your full name, the right you wish to exercise and any information that helps identification. Response time: 15 business days (LGPD) / 30 days (GDPR).

The Site uses two types of local storage: essential (always active, required for the Site to work) and analytics (optional, only enabled with your consent).

Essential: browser sessionStorage to control the page transition curtain (gh-page-transition), the image zoom transition (gh-image-transition), to remember whether the intro has been seen (gh-intro-visited), and to store your choice in the cookie banner (gh-cookie-consent) — temporary or minimal data, not sent to any server and without personal information.

Analytics (optional): by accepting the cookie banner shown on your first visit, we may enable third-party tools (e.g. Google Analytics, Meta Pixel) to understand how the Site is used (pages visited, session time, traffic source) — never information that identifies you personally. You can decline at any time via the banner itself; declining does not affect your use of the Site.

The site is hosted in Brazil (Hostinger). If you use WhatsApp, Meta processes data in the US and other jurisdictions; EU users have their data protected by standard contractual clauses (SCCs). For users in Brazil, the LGPD (Art. 33) allows international transfers to countries with an adequate level of protection.

The Site is not directed at individuals under 18 and does not knowingly collect children's data. If you believe we have collected data from a minor, please contact us so we can delete it.

We may update this Policy periodically; the date of the latest update appears at the top. Material changes (e.g., adopting analytics, changing providers, integrating a CMS with a backend) will be reflected here and, if necessary, notified on the Site.

Questions about this Policy or about how your data is handled: danigurgel@gurgelhub.com.br, WhatsApp +55 11 98905-6081, Instagram @gurgel_hub, LinkedIn danigurgelcasanova — São Paulo, Brazil. Data controller: Dani Gurgel — Gurgel Hub.