This Privacy Policy explains, in plain language, what personal data the Singing Craft website collects, how it is used, who it is shared with and what your rights are. It follows Brazil’s General Data Protection Law (Law No. 13,709/2018, “LGPD”) and, for visitors in the European Economic Area and the United Kingdom, the principles of the GDPR.
1. Who we are
Singing Craft (singingcraft.com) is a project of the Full House of the SPIRIT movement, registered in Brazil under CNPJ 34.680.685/0001-86, under the responsibility of André Mello. We are the controller of the personal data processed on this website.
Contact for privacy and data protection matters: [email protected].
2. What data we collect
We collect only the data needed for each purpose:
| Situation | Data |
|---|---|
| Browsing the website | IP address, browser and device type, pages visited and cookies (see section 5). |
| Comments | Name, email, website (optional), the comment text, IP address and browser data, also used for spam detection. |
| Contact form | Name, email, subject and message. |
3. How we use your data
- Replying to messages sent through the contact form or by email.
- Publishing and moderating comments on articles.
- Complying with legal obligations, such as keeping records required by law.
- Keeping the website secure and running, preventing fraud, spam and unauthorized access.
4. Legal bases
We process data based on your consent (for example, when you send a message or accept non-essential cookies), on compliance with legal obligations, and on our legitimate interest (website security and spam prevention), in line with Article 7 of the LGPD and Article 6 of the GDPR.
5. Cookies
Cookies are small files stored in your browser. We use:
- Essential cookies: needed for the website to work and to remember your privacy choices.
- Performance and preference cookies: help us understand how the website is used and improve your experience. They are only enabled with your permission.
- Advertising cookies: if ads are shown on article pages (Google AdSense), Google and its partners may use cookies to serve ads, according to your consent choices and Google’s own policies.
When you visit the website, you can accept, reject or customize cookies in the privacy notice. You can also delete or block cookies in your browser settings.
6. Who we share data with
We do not sell or rent personal data. We share only what is necessary with service providers that help us run the website:
- Website hosting (HostGator), where the website, comments and messages are stored.
- Email (Google/Gmail), used to receive and reply to messages.
- Embedded fonts and content: the website loads fonts from Google Fonts and may display videos or images from other websites. These services may receive your IP address and follow their own privacy policies.
We may also share data when required by law or by order of a competent authority. Some of these services may store data outside Brazil and outside your country, always with appropriate safeguards.
7. How long we keep data
- Contact messages: for as long as needed to reply and follow up on the matter.
- Comments: for as long as they remain published. Their metadata helps us recognize and approve future comments.
8. Your rights
As a data subject, you may at any time and free of charge request:
- Confirmation that we process your data, and access to it.
- Correction of incomplete, inaccurate or outdated data.
- Anonymization, restriction or deletion of unnecessary data or data processed unlawfully.
- Portability of your data to another provider.
- Deletion of data processed based on your consent, and information about the possibility of not consenting.
- Information about who we share your data with.
- Withdrawal of your consent.
To exercise any of these rights, write to [email protected]. You may also lodge a complaint with Brazil’s National Data Protection Authority (ANPD) or with the data protection authority in your country.
9. Children
This website is intended for a general audience and does not knowingly collect personal data from children under 13. If you believe a child has sent us personal data, please contact us so we can delete it.
10. Security
We take technical and administrative measures to protect data, such as a secure connection (HTTPS), restricted access to systems, strong passwords and backups. No system is completely free of risk, but we work to reduce it and, in the event of a relevant incident, we will notify the people affected and the competent authorities.
11. Uploaded images
If you upload images to the website, avoid images with embedded location data (EXIF GPS). Visitors can download and extract location data from images on the website.
12. Changes to this policy
This policy may be updated to reflect improvements to the website or changes in the law. The date of the last update appears at the top of the page.
13. Contact
For questions about this Privacy Policy, write to [email protected] or use the contact form in the website footer.