Privacy policy

1. Who we are

Setstate is the controller of the personal data described in this policy.

For any privacy question, write to info@setstate.info

2. Data we collect

We collect only what you send us and what our hosting needs to keep the site running. There are no accounts and no payments on this site.

• —Enquiry form: your name, business name and email address, the service you need, and anything you write in the brief
• —Server logs: your IP address, browser type, and the pages you requested and when, recorded by our hosting provider for security and to limit abuse of the enquiry form

3. Legal bases for processing

• —Enquiries: steps taken at your request before entering into a contract — answering you and preparing a quote (LGPD art. 7, V; GDPR art. 6(1)(b))
• —Server logs: our legitimate interest in keeping the site secure and available (LGPD art. 7, IX; GDPR art. 6(1)(f))
• —Legal obligations: where the law requires us to keep or disclose data (LGPD art. 7, II; GDPR art. 6(1)(c))

4. How we use your data

• —Reply to your enquiry and prepare a quote or tender response
• —Carry out any project that follows from it
• —Keep the site secure and stop automated abuse of the form
• —Comply with legal obligations

We do not add you to a mailing list, and we make no automated decisions about you.

5. Cookies and tracking

This site sets no cookies of its own and uses no analytics, advertising or tracking tools. Its fonts are served from our own domain, so loading a page does not contact any third party.

6. Data sharing

We do not sell your personal data. We share it only with the providers that run the site and deliver your enquiry:

• —Vercel — hosting, delivery, and the firewall that protects the enquiry form
• —Resend — delivering your enquiry to our inbox by email
• —Our email provider — storing our correspondence with you
• —Public authorities, when required by law

7. International data transfer

Vercel and Resend process data outside Brazil, including in the United States. Where data leaves Brazil we transfer it only on the terms the LGPD allows (arts. 33 to 36) and, for visitors in the EU or UK, on the terms the GDPR allows.

8. Data security

The site is served only over HTTPS, with strict transport security enforced. The enquiry form limits the size of everything it accepts, and enquiries are read only by the people who handle them.

9. Retention

We keep an enquiry for as long as we need it to respond. If it does not lead to a project, we delete it within 12 months. If it does, we keep it for as long as the project and our legal obligations require. Server logs are kept briefly by our hosting provider and then deleted automatically.

10. Your rights

Under the LGPD (art. 18) you have the right to:

• —Confirm whether we process your data
• —Access your data
• —Correct incomplete, inaccurate or outdated data
• —Have unnecessary or unlawfully processed data anonymised, blocked or deleted
• —Receive your data in a portable form
• —Know who we have shared your data with
• —Object to processing that does not comply with the law

If you are in the European Union or the United Kingdom, the GDPR or UK GDPR gives you equivalent rights: access, rectification, erasure, restriction, portability and objection.

To exercise any of these rights, write to info@setstate.info

You can also complain to Brazil's National Data Protection Authority (ANPD) or, in the EU or UK, to your local data protection authority.

11. Contact

If you have questions about this policy or your data, write to info@setstate.info

12. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it last changed.