LGPD · Law 13.709/2018
Privacy Policy
Last updated: [CONFIRM date]
[CONFIRM — this document is a structural template within the mockup. It must be reviewed by a lawyer and completed with the company's real details before launch. No company name, CNPJ, address, email or period below is real.]
1. Data controller
The controller of personal data processed through this site is [CONFIRM registered company name], CNPJ [CONFIRM], registered office at [CONFIRM full address], Florianópolis — Santa Catarina, Brazil.
Privacy contact: [CONFIRM DPO email]. Data Protection Officer: [CONFIRM name or “not applicable”].
2. What we collect and why
| Data | When | Purpose | Legal basis (LGPD art. 7) |
|---|---|---|---|
| Name | Contact form | Identify who got in touch | Pre-contractual steps (item V) |
| Phone / WhatsApp | Contact form | Reply to the enquiry | Pre-contractual steps (item V) |
| Contact form | Reply to the enquiry | Pre-contractual steps (item V) | |
| City / area | Contact form | Assess the service area | Pre-contractual steps (item V) |
| Description of the job | Contact form | Prepare the quote | Pre-contractual steps (item V) |
| Photos sent via WhatsApp | When you send them | Assess the job and quote | Pre-contractual steps (item V) |
| Analytics cookies | Browsing, if permitted | Measure site usage | Consent (item I) |
| Marketing cookies | Browsing, if permitted | Measure campaigns | Consent (item I) |
3. Cookies
Essential cookies keep the site working and remember your consent choice; they cannot be switched off. Analytics and marketing cookies are off by default and are only enabled if you tick the matching option in the banner. You can revisit your choice at any time by clearing site data in your browser.
| Category | Default | Examples | Retention |
|---|---|---|---|
| Essential | Always on | Consent record (stored in your browser) | [CONFIRM] |
| Analytics | Off | [CONFIRM tool — e.g. Google Analytics 4] | [CONFIRM] |
| Marketing | Off | [CONFIRM tool — e.g. Meta Pixel] | [CONFIRM] |
4. WhatsApp
The buttons on this site open a WhatsApp conversation with a pre-filled message. From the moment you send that message, the processing of your data in that app is also governed by Meta Platforms' privacy policy, over which we have no control.
5. Sharing
We do not sell personal data. We share it only with processors necessary to deliver the service:
- Website hosting — [CONFIRM]
- Analytics tool, if permitted — [CONFIRM]
- WhatsApp / Meta Platforms, when you start the conversation
- Public authorities, where legally required
International transfers: [CONFIRM — likely, if hosting or analytics sit outside Brazil. State the countries and safeguards.]
6. How long we keep it
Contact data and enquiries: [CONFIRM period]. Consent records: [CONFIRM period]. After that, data is deleted or anonymised, unless a legal retention duty applies.
7. Your rights (LGPD art. 18)
At any time, free of charge, you may request:
- confirmation that processing exists;
- access to your data;
- correction of incomplete, inaccurate or out-of-date data;
- anonymisation, blocking or deletion of unnecessary or non-compliant data;
- portability to another provider;
- deletion of data processed on the basis of consent;
- information about who we share your data with;
- information about your right to refuse consent and the consequences;
- withdrawal of consent.
To exercise any of these, write to [CONFIRM email]. We will reply within the statutory period. You may also petition the ANPD, Brazil's data protection authority.
8. Security
We apply technical and administrative measures to protect personal data. [CONFIRM measures — e.g. HTTPS, access control, backups]. In the event of a significant security incident we will notify you and the ANPD under art. 48.
9. Minors
This site is not directed at people under 18 and does not knowingly collect children's data. No image on this site depicts children or minors.
10. Changes
We may update this policy. The date at the top shows the last revision. Material changes will be flagged on the site.
Who the controller is
Controller: Marmoraria Sul da Ilha, Florianópolis (SC), Brazil. [CONFIRM the full legal entity name, CNPJ and workshop address — none of it is published anywhere]. The only public channel we could identify is the Instagram profile @marmorariasuldailha, which sits behind a login wall. [CONFIRM the WhatsApp number, phone, e-mail and the data protection officer — LGPD art. 41].
What the form and WhatsApp collect
The form asks for a name, WhatsApp number, e-mail, neighbourhood, the type of work and a message. The finish board assembles your specification — material, edge, sink, backsplash and finish — and carries it into the WhatsApp message. None of it is sent on its own: you decide to send. The legal basis is your consent alongside pre-contractual dealings. The details are used to prepare the estimate and run the job. [CONFIRM the retention period — we suggest 24 months after last contact for estimates that do not become contracts, and the applicable tax period where an invoice is issued].
Photographs you send
A photograph of your kitchen is personal data about your home. It is used only to quote and carry out the work, and it does not go to social media or onto the website without your written permission, case by case. The same applies to the photograph of the finished job.
Templating and installation at your home
Templating and installation happen at your address, which means an address, a time, and sometimes access conditions and building rules. That data exists to carry out the work and nothing else. [CONFIRM whether the team is in-house or subcontracted — if subcontracted, the installer is a data processor and needs a contract].
Price and estimate
No price is published on this site. Under art. 31 of the Brazilian Consumer Code and Decreto 5.903/2006, a displayed price must be clear and say exactly what it includes — per linear metre or per m², installed or not, cutouts, backsplash and sealing in or out. A bare “from R$” on a countertop is exposure, not a hook. A prior written estimate is your right (art. 40) and binds the supplier for 10 days from receipt unless otherwise agreed.
Warranty
The statutory warranty is 90 days for durable goods and services (CDC art. 26, II). Anything longer exists only in writing (art. 50). The stone warranty and the installation warranty are separate, and engineered quartz usually carries its own manufacturer warranty with conditions we have not described here because we have not read them. [CONFIRM the warranty terms in writing].
What this site does not claim
No stone name, no engineered-quartz brand, no price, lead time, founding year, team size, project count, certification, award or review rating appears in this build without being marked [CONFIRM]. Nothing has been published about dust-control practice or PGR status — the crystalline silica in engineered quartz is far too serious a subject to be used as a marketing argument before it has been verified.