Privacy Policy

Who we are

NOREAH is a website design and development studio. This policy explains how we handle personal data collected on this website. We follow Brazil’s General Data Protection Law (LGPD) and, for visitors in the European Union and the United Kingdom, the GDPR.

Data controller: [full name or company name], [tax ID], [business address]. Privacy contact: [email].

What we collect

Quote form: name, email or WhatsApp, project type and the message you write.

Purchases: name, email, phone, billing country and payment status, which we receive from Stripe when you pay. Card details are handled only by Stripe, which follows the PCI DSS security standard. We never see your full card number.

Browsing analytics (only with your consent): pages visited, time on site, device type and approximate city, collected by analytics cookies.

Technical data: our hosting provider logs IP addresses and browser details to keep the website running and secure. Fonts and scripts are served from our own website, so no other company learns about your visit unless you accept analytics.

How we use it

To answer quote requests and talk about your project; to process purchases, deliver the project and issue receipts; to understand how the website is used and improve it (only with consent); and to meet legal obligations.

Legal bases

Performance of a contract, or steps taken at your request before one (quotes and purchases); consent (analytics cookies); legitimate interest (website security and fraud prevention); and legal obligation (tax and accounting records).

Sharing and international transfers

We do not sell personal data. These providers process data on our behalf: Netlify (hosting), Formspree (quote form), Stripe (payments) and Google Analytics (only if you accept). They are mainly located in the United States, and transfers rely on standard contractual clauses or other safeguards required by the LGPD and the GDPR.

Cookies

We use browser storage to remember your cookie choice (necessary) and Google Analytics cookies only if you click "Accept". You can change your choice at any time under "Cookie preferences" in the website footer.

How long we keep it

Quote requests: up to 2 years after our last contact. Purchases and receipts: for as long as tax law requires (in Brazil, at least 5 years). Browsing analytics: up to 14 months.

Your rights

You can ask us to confirm whether we process your data and to access, correct, delete or port it, to restrict or object to processing, and to withdraw consent at any time. Write to [email] and we will reply within 15 days. You can also complain to Brazil’s data protection authority (ANPD) or to the data protection authority of your country.

Security

The website uses HTTPS, and only the people who need the data to serve you can access it.

Changes

We may update this policy. The date of the latest update is shown at the top of this page.