Privacy Policy

21Carmo is operated by Victor Carmo Silva (CNPJ 44.019.250/0001-49), registered at Avenida Nossa Senhora do Sabará, 4350, Brazil. For the purposes of Brazil's General Data Protection Law (LGPD) and any applicable international data protection rules, 21Carmo acts as the data controller for information collected through this website.

We collect information in two ways: what you give us directly, and what your browser shares automatically.

• Contact form data: name, email address, selected vertical and message content, submitted when you write to us through the contact page.
• Direct email: anything you send to contact@21carmo.com, including your address and any details in the message.
• Usage data: IP address, browser type, device type, pages visited and referring site, collected automatically through standard web server logs and analytics.
• Cookies: small files that support basic site functionality and, where enabled, analytics. See Section 4.

We use the information above to:

• Reply to inquiries and scope potential projects;
• Operate, secure and improve this website;
• Understand aggregate visitor patterns, such as which pages are most useful;
• Comply with legal and tax obligations applicable to a registered Brazilian business.

We do not sell personal data, and we do not use contact form submissions for unrelated marketing without your separate consent.

This site may use essential cookies required for basic functioning, and — where enabled — analytics cookies to understand traffic at an aggregate level. You can block or delete cookies through your browser settings at any time; doing so may affect some non-essential functionality but will not prevent you from reading the site.

We may rely on third-party infrastructure providers — such as our hosting provider and analytics tools — to operate this site. These providers process data strictly to deliver their service to us and are bound by their own privacy and security terms. We do not share your contact form submissions with advertising networks.

We keep inquiry and correspondence data only as long as needed to respond, maintain a business record of the relationship, or meet legal and tax retention requirements under Brazilian law — after which it is deleted or anonymized.

If you are in Brazil, the LGPD (Lei Geral de Proteção de Dados) gives you the right to confirm whether we process your data, access it, correct inaccuracies, request anonymization or deletion, request portability, and revoke consent at any time. If you are elsewhere, equivalent rights under your local data protection law apply where relevant.

To exercise any of these rights, contact us using the details in Section 10 — we'll respond directly, without requiring you to navigate a support ticket system.

We apply reasonable technical and organizational measures — such as HTTPS encryption in transit and restricted access to correspondence — to protect the information you share with us. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

This website is intended for business use by adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy as our practices or applicable law evolve. The "Last updated" date at the top of this page always reflects the current version. Material changes will be reflected here before they take effect.

Questions about this policy, or requests related to your personal data, can be sent directly to our team.