Transparency

Privacy Policy

How we collect, use and protect your personal data, in compliance with Brazil's General Data Protection Law — LGPD (Law nº 13.709/2018).

Effective from May 2026

1. Who is the Data Controller

The controller of personal data collected through this website is:

  • Company name: Zafalon Cortinas e Decorações Ltda.
  • CNPJ (Brazilian tax ID): 31.976.755/0001-50
  • Address: R. Prof. João de Oliveira Torres, 330 — Vila Regente Feijó, São Paulo - SP, Brazil
  • Privacy contact channel: contato@marengodecor.com.br

2. What data we collect and how

Data provided voluntarily

When filling out the visit scheduling or quote request form, we collect:

  • Full name
  • Email address
  • Phone number / WhatsApp
  • Message or description of interest (when provided by the visitor)

This data is only collected when the visitor actively provides it. The website does not passively collect personal data without the user's knowledge.

Automatically collected data

The website uses navigation analysis tools to understand how visitors interact with its content:

  • Google Tag Manager (GTM): a tag management tool that allows tracking tools to be activated and controlled centrally, without changing the website code.
  • Google Analytics 4 (GA4): a traffic analysis tool that collects aggregated and anonymised data about pages visited, browsing time, access source and device type. It does not collect names, email addresses or any individually identifiable data.

Data collected via GA4 is processed by Google LLC. GA4 is configured with IP anonymisation enabled. For more information, visit policies.google.com/privacy.

Contact via WhatsApp Business

The website provides access to Marengo Decor Atelier's WhatsApp Business channel. By initiating a conversation through this channel, the visitor voluntarily shares their phone number and message content with the atelier. This information is used exclusively to respond to the initiated contact and is not integrated into any marketing database.

3. How we use your data and the legal basis

We process your personal data only for the purposes described below, always based on one of the legal grounds set out in Article 7 of the LGPD:

Responding to quote and scheduling requests

Name, email, phone number, message

Art. 7, V — performance of a contract or pre-contractual steps

Navigation analysis and website improvement

Anonymised behavioural data via GA4

Art. 7, IX — legitimate interest of the controller

WhatsApp customer service

Phone number, conversation content

Art. 7, V — pre-contract performance; Art. 7, I — consent

We do not use personal data for automated marketing, advertising segmentation, selling data to third parties, or any purpose other than those described above.

4. Data sharing

Marengo Decor Atelier does not sell, rent or trade personal data. Sharing occurs only in the following cases, strictly necessary for website operation:

  • Google LLC (GA4 and GTM): for anonymised navigation analysis. Subject to Google's Privacy Policy.
  • Meta Platforms / WhatsApp: when using the WhatsApp channel, conversations travel through Meta's infrastructure. Subject to WhatsApp's Privacy Policy.
  • Public authorities: when required by law, court order or applicable regulation.

5. How long we retain your data

  • Form data (quotes and scheduling): retained for the period necessary to fulfil the request and, after the commercial relationship ends, for up to 5 (five) years, in accordance with the civil statute of limitations (Brazilian Civil Code, Art. 206, § 5).
  • Analytics data (GA4): retained according to the retention policy configured in GA4, with a maximum period of 14 months.
  • WhatsApp conversations: retained in the atelier's history while there is an active commercial interest, and may be deleted upon the data subject's request.

6. Your rights as a data subject

Under Articles 17 to 22 of the LGPD, you have the following rights regarding your personal data:

  • Confirmation: to know whether we process your data.
  • Access: to obtain a copy of the data we hold about you.
  • Correction: to request the update or rectification of incomplete, inaccurate or outdated data.
  • Anonymisation, blocking or deletion: of unnecessary, excessive or unlawfully processed data.
  • Portability: to request the transfer of your data to another service provider, where applicable.
  • Withdrawal of consent: to withdraw consent given at any time, without prejudice to processing carried out beforehand.
  • Information about sharing: to know with which public or private entities we share your data.

To exercise any of these rights, contact us at contato@marengodecor.com.br with the subject line "LGPD — [Right Requested]". We will respond within 15 (fifteen) business days.

7. Data security

We adopt adequate technical and organisational measures to protect personal data collected against unauthorised access, loss, alteration or improper disclosure, including secure transmission via HTTPS and restricted access to received contact information. No system is absolutely secure; in the event of an incident affecting your data, we will communicate the occurrence within the deadlines set by the LGPD and inform you of the measures taken.

8. Cookies

The website uses cookies for the purposes described below:

  • Essential cookies: required for the basic functioning of the website. No consent required.
  • Analytics cookies (GA4): used to measure traffic and navigation behaviour in an aggregated and anonymised manner.

You can configure your browser to block or delete cookies. In this case, some website features may be affected.

9. Links to third-party websites

The website may contain links to social media profiles (such as Instagram) and other external pages. This Privacy Policy applies exclusively to the marengodecor.com.br website. The atelier is not responsible for the privacy practices of third-party websites and recommends reading the privacy policy of each platform accessed.

10. Data of minors

This website is not directed at persons under 18 years of age and does not intentionally collect personal data from children or adolescents. If inadvertent processing of minors' data is identified, we will proceed to immediate deletion.

11. Changes to this Policy

This Privacy Policy may be updated periodically to reflect operational, technological or regulatory changes. The current version will always be available on this page, with the update date indicated in the document header. Relevant changes will be communicated prominently on the website.

12. Applicable law and jurisdiction

This Policy is governed by the laws of the Federative Republic of Brazil, in particular Law nº 13.709/2018 (LGPD) and the Internet Civil Framework (Law nº 12.965/2014). To resolve any disputes not resolved directly, the courts of São Paulo, SP, Brazil are elected as the competent jurisdiction, with waiver of any other, however privileged.

13. Privacy contact channel

To exercise your rights, ask questions or file complaints regarding the processing of your personal data:

If there is no satisfactory response, the data subject may file a complaint with the Brazilian National Data Protection Authority (ANPD) through the portal gov.br/anpd.

Version: May 2026