Privacy Policy

This policy explains how Estampa Aqui collects and uses personal data when you use our website or buy from us. The data we collect depends on how you use the site, for example whether you browse as a visitor or create an account:

• Account details: your name, email address and password, which is stored in protected form.
• Order details: delivery address, phone number, the products you buy and your order history.
• Designs: the images and text you upload or create in our design tool.
• Payment information: payments are processed by our payment provider; we receive confirmation of payment but never your full card number.
• Technical data: device and browser type, IP address and the pages you visit, collected through cookies and similar technologies.

We use your information to provide the service you ask for: to create and manage your account, print and deliver your orders, process payments and keep you informed about the status of your orders.

We also use it to answer your questions, prevent fraud, keep the site secure and understand how the site is used so that we can improve it. If you opt in, we will send you news about new designs and promotions; you can unsubscribe at any time using the link in each email.

Under Brazil's General Data Protection Law (Lei Geral de Proteção de Dados, or LGPD), every use of personal data needs a legal basis. Depending on the purpose, ours are performing our contract with you, complying with legal obligations, our legitimate interest in running and improving the store and, where required, your consent.

Cookies are small files stored on your device. We use essential cookies and similar technologies, such as local storage, to keep you signed in, remember your cart and protect the site. The site cannot work properly without them.

With your permission, we also use analytics cookies to understand which pages are visited and how the site performs. You can change your choices at any time, and you can block or delete cookies in your browser settings, although blocking essential cookies may stop parts of the site from working.

We do not sell your personal data. We share it only with service providers that help us run the store, and only the data each one needs to do its job:

• Payment processor: to process Pix, card and boleto payments and to prevent fraud.
• Shipping carriers: your name, address and phone number, so that they can deliver your order.
• Hosting providers: to run the website and to store account data and design files securely.
• Email service: to send order confirmations and, if you agree, our newsletter.

These providers may use your data only on our instructions. Some of them may process data outside Brazil; when that happens, we require safeguards consistent with the LGPD. We may also disclose information when required by law or by an order from a competent authority.

The LGPD gives you rights over your personal data. At any time, you can ask us to:

• confirm whether we process your data and give you access to it;
• correct incomplete, inaccurate or outdated data;
• anonymize, block or delete data that is unnecessary, excessive or processed unlawfully;
• transfer your data to another service provider;
• tell you which public and private entities we share your data with;
• withdraw your consent, where we rely on it, and delete the data processed on that basis.

To exercise any of these rights, contact us using the details in the Contact section. We may ask you to confirm your identity before acting on a request. You also have the right to file a complaint with Brazil's National Data Protection Authority (ANPD).

We keep personal data only for as long as we need it for the purposes described in this policy. Account information is kept while your account is active, and order and invoice records are kept for the periods required by tax and accounting rules.

Uploaded design files are kept so that you can reorder or edit them later, and you can ask us to delete them at any time. When data is no longer needed, we delete or anonymize it.

We use technical and organizational measures to protect your data, including encrypted connections (HTTPS), restricted access to personal information and securely stored passwords. Card details are handled by our payment processor.

No online service can be completely secure, so we cannot guarantee absolute security. If we become aware of a security incident that may put you at risk, we will notify you and the relevant authorities as required by law.

If you have questions about this policy or want to exercise your rights, contact our data protection officer (encarregado) at [email protected].