Studio Luz e Cor

Privacy Policy

This privacy policy explains how Studio Luz e Cor collects, uses, and protects your personal information when you use our online platform and services. Studio Luz e Cor is committed to protecting your privacy and handling your data in a transparent and lawful manner, in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and Brazil's Lei Geral de Proteção de Dados (LGPD).

Information We Collect

We collect various types of information in connection with your use of our site and services. This may include:

* **Identity and Contact Data:** Such as your name, email address, phone number, and physical address when you contact us, book services, or register on our site.
* **Payment Data:** Information required to process payments for services, such as credit card details or other payment method information.
* **Service Data:** Details about the services you request or use, including specifics about portrait sessions, product shoots, event coverage, retouching needs, workshop attendance, or studio rentals.
* **Image Data:** Photographs, videos, or other visual content you provide to us or that we create for you as part of the services. We handle this content with care and according to specific agreements for the services provided.
* **Technical Data:** Information about your device, browsing actions, and patterns, including IP address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our online platform.
* **Usage Data:** Information about how you use our site, products, and services.
* **Marketing and Communications Data:** Your preferences in receiving marketing from us and our third parties and your communication preferences.

How We Collect Your Information

We collect data through different methods:

* **Direct Interactions:** You may give us your Identity, Contact, Payment, and Service Data by filling in forms or corresponding with us by post. This includes personal data you provide when you:
* Request information about our services;
* Book or purchase our services;
* Create an account on our site;
* Subscribe to our publications;
* Attend a workshop or event;
* Give us feedback.
* **Automated Technologies or Interactions:** As you interact with our site, we may automatically collect Technical and Usage Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies.
* **Third Parties:** We may receive personal data about you from various third parties and public sources, such as analytics providers or payment service providers.

How We Use Your Information

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

* To perform the contract we are about to enter into or have entered into with you (e.g., providing photography services, processing payments, arranging studio rental).
* Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (e.g., improving our services, maintaining site security, communicating with you about our services).
* Where we need to comply with a legal or regulatory obligation.
* Where we have your clear consent to do so (e.g., sending marketing communications, using your images in a portfolio – separate consent will be sought for this).

We may use your Identity, Contact, Technical, Usage, and Marketing and Communications Data to form a view on what we think you may want or need, or what may be of interest to you. You have the right to withdraw consent to marketing at any time.

Sharing Your Information

We may share your personal data with trusted third parties to help us provide our services:

* **Service Providers:** We work with external service providers for functions like payment processing, website hosting, data analytics, marketing assistance, and professional services (e.g., legal, accounting). These third parties are obligated to protect your data and use it only for the purposes for which it was disclosed.
* **Legal and Regulatory Requirements:** We may disclose your information if required by law, court order, or governmental regulation, or if we believe such action is necessary to comply with legal obligations, protect our rights or property, or ensure the safety of our users or the public.
* **Business Transfers:** In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances, you can ask us to delete your data; see Your Legal Rights below for further information.

Your Data Protection Rights

Under certain data protection laws, you have rights regarding your personal data. These rights may include:

* **Request access** to your personal data.
* **Request correction** of the personal data that we hold about you.
* **Request erasure** of your personal data.
* **Object to processing** of your personal data.
* **Request restriction of processing** of your personal data.
* **Request the transfer** of your personal data to you or to a third party (data portability).
* **Withdraw consent** at any time where we are relying on consent to process your personal data.

If you wish to exercise any of the rights set out above, please contact us using the details provided in the "Contact Us" section below. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

Cookies and Similar Technologies

Our online platform uses cookies and similar technologies to collect information about your browsing actions and patterns. Cookies are small text files stored on your device. They help us to provide you with a good experience when you browse our site and also allow us to improve our site. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this site may become inaccessible or not function properly.

International Data Transfers

Your personal data may be transferred to and processed in countries outside of Brazil or the European Economic Area (EEA) where data protection laws may differ from those in your jurisdiction. When we transfer your data to countries outside of Brazil or the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

* We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data.
* Where we use certain service providers, we may use specific contracts approved for use in your jurisdiction which give personal data the same protection it has in your jurisdiction.

Links to Other Websites

Our site may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our site, we encourage you to read the privacy policy of every website you visit.

Changes to This Privacy Policy

We may update this privacy policy from time to time. Any changes will be posted on this page. We encourage you to review this privacy policy periodically to stay informed about how we are protecting your information.

Contact Us

If you have any questions about this privacy policy or our data practices, please contact us by postal mail at:

Studio Luz e Cor
Rua Augusta, 350
Conjunto 52
São Paulo, São Paulo
01305-000
Brazil