Legal · Updated September 29, 2026

Privacy Policy

How I collect, use and protect the data of people who visit the website and get in touch with me.

01Who is responsible

This website is maintained by Cleiton Avi, a brand designer with a studio in Rio do Sul, Santa Catarina, Brazil. I am the one who decides how your data is used, and I am the person you talk to about anything in this policy.

  • Controller: Cleiton Avi Design Studio, CNPJ (Brazilian company ID) 36.758.958/0001-93
  • Privacy contact: contato@cleitonavi.com

This policy follows Brazil’s General Data Protection Law (Law 13.709/2018, the LGPD).

02What data I collect

I only collect what is needed to reply to you and understand how the website is used.

  • Project form: full name, company or project, email, WhatsApp, website or Instagram, how you found me, and your answers about the company’s moment (size, revenue range, timeline, your role, how the decision is made and the context you wrote).
  • Quick message: full name, email, subject and message.
  • Browsing: pages visited, reading time, device type and where the visit came from, collected by analytics and advertising cookies only if you allow them.
  • Technical data: IP address and browser information, logged automatically by the server for security.

I don’t ask for documents, bank details or sensitive information through the website.

03What I use it for

  • Replying to your message and preparing a reply or a proposal that makes sense for your moment.
  • Sending the confirmation of receipt to your email.
  • Organizing ongoing conversations, so no contact gets lost.
  • Understanding how the website is used and what needs to improve.
  • Measuring ad results, when you allow it.

I don’t use your data to send newsletters or promotions unless you ask.

04Legal bases

  • Preliminary procedures for a contract, at your request (art. 7, V): when you fill out the form to talk about a project.
  • Consent (art. 7, I): for analytics and advertising cookies. You can withdraw it at any time.
  • Legitimate interest (art. 7, IX): to keep the website secure and running.
  • Compliance with a legal obligation (art. 7, II): to keep records required by law, such as tax records, when there is a contract.

05Who I share it with

Your data is not sold or rented. For the website to work, I use a few third-party services that process data on my behalf and follow my instructions:

  • Website hosting and email delivery, to receive the form and send the confirmation.
  • Notion, where I organize the messages I receive.
  • Vercel, which processes the form submission.
  • Google Analytics and Microsoft Clarity, for usage analytics, with your consent.
  • Meta (Pixel), for ad measurement, with your consent.

Some of these services store data outside Brazil. In those cases, the transfer follows what the LGPD allows (art. 33), with companies that adopt compatible protection standards.

I may also share data if an authority requires it by law.

06How long I keep it

  • Contacts that didn’t become a project: up to 2 years after the last conversation. After that, I delete them.
  • Clients: for the duration of the project and for the periods the law requires for tax and contract records.
  • Cookies: for the period of each one, described in the Cookie Policy.

If you ask me to delete your data sooner, I will, except for what the law requires me to keep.

07Your rights

Under the LGPD (art. 18), you can ask me at any time for:

  • Confirmation that I process your data, and access to it.
  • Correction of incomplete or outdated data.
  • Anonymization, blocking or deletion of unnecessary data.
  • Portability to another provider.
  • Information about who I share your data with.
  • Withdrawal of consent and deletion of the data processed based on it.

Just write to contato@cleitonavi.com. I reply within 15 days. If you feel your request was not met, you can also contact Brazil’s National Data Protection Authority (ANPD).

08Security

I use an encrypted connection (HTTPS), restricted access to the tools where the data is stored and passwords with two-step verification. No system is completely immune, but if an incident puts your data at risk, I will notify you and the ANPD, as the law requires.

09Minors

The website and my services are aimed at companies and professionals. I don’t knowingly collect data from people under 18. If that happens by mistake, I delete it as soon as I find out.

10Changes to this policy

I may update this policy when the website or the law changes. The date at the top of the page shows the latest version. If the change is relevant, I will announce it here on the website.

Questions? Write to contato@cleitonavi.com.