Privacy policy

Who is responsible

LAETITIA ZOE ANGELETTI · CNPJ 51.161.078/0001-29

Studio Casa Sua determines how information submitted through this website is used. This policy covers enquiries, project briefs, custom forms, community subscriptions and browsing.

Information we receive

• Enquiries and projects: your name, email, form answers and information you choose to share, such as the project location, budget, timing and preferences.
• Attachments: the files you upload, their names, sizes and formats. Avoid sharing sensitive data or other people’s information without permission.
• Community subscriptions: the email address you provide for the newsletter.
• Technical information: referring pages, language, submission time and browser information; hosting infrastructure may also process IP addresses and access logs for security.
• Optional measurement: with your permission, Google Analytics can measure visits, pages and website interactions.

Required fields are marked on forms. Without the information needed for your enquiry, we may be unable to respond or assess a project. File uploads are optional.

Purposes and legal grounds

• Responding to an enquiry and assessing a proposal: steps you request before entering a contract, or performance of a contract where applicable.
• Newsletter subscriptions and optional measurement: your consent, which you can withdraw at any time.
• Preventing abuse of forms and infrastructure: our legitimate interest in keeping the service secure, balanced against your rights.
• Meeting statutory requirements: legal obligations where applicable; establishing or defending legal claims may rely on legitimate interests.

Cookies and browser storage

The website stores your language and cookie choices locally in your browser. The project brief can also save draft answers on this device so that you can continue later; selected files are not saved in this draft. Start a new brief or clear the site’s browser data to remove this information.

When configured, Analytics and the tag manager load after you accept optional cookies. Choose “Necessary only” to decline, or change your decision using “Cookies” in the footer. Withdrawing permission reloads the page without those scripts; you can also delete cookies already stored through your browser settings.

Service providers and external content

The website uses Vercel for hosting, Supabase for form data and file storage, and Google Analytics for optional measurement. Custom forms may also send notifications to the team’s email or integrations configured by the Studio, when enabled.

Opening Cal.eu scheduling, an external Framerate video or links to Instagram and Pinterest may disclose technical data to those services, along with information you provide directly. Their own privacy policies apply to those activities. Access to submissions and attachments requires team authorisation; uploaded files use private storage and temporary links in the dashboard.

International processing

The Studio’s work between Brazil and Europe and the services it uses can involve processing outside your country, including outside the EEA or UK. Where a restricted transfer occurs, applicable law requires an appropriate mechanism, such as an adequacy decision or contractual safeguards, including EU standard contractual clauses and UK transfer arrangements where required. Contact the Studio for information about destinations and applicable safeguards, or to request a copy of them.

Retention and protection

Retention is determined by the purpose: handling your enquiry and project relationship; maintaining a newsletter subscription until you withdraw consent; and keeping records for applicable legal requirements or the establishment or defence of legal claims. You may ask the Studio for the period relevant to your case and for deletion of information no longer needed.

Form responses stored in the database are encrypted and attachments are kept in private storage. These measures reduce risk, but no system is completely secure. Browser drafts remain on your device until removed; keep this in mind on a shared computer.

Your rights in the EEA and UK

Subject to the applicable conditions, you can request access, correction, erasure, restriction and portability of your data, and withdraw consent without affecting earlier lawful processing. The Studio responds within the applicable statutory period, normally one month under the GDPR frameworks, with any lawful extension explained to you.

You have the right to object to processing based on legitimate interests because of your particular circumstances, and to object to direct marketing at any time. Contact the Studio using the details below to exercise these rights.

You can complain to the data protection authority in your EEA country of residence, work or the alleged infringement, or to the UK Information Commissioner’s Office (ICO). Additional rights under other local laws may apply; contact the Studio about your location. Choosing English does not limit those rights.

Children and policy updates

The website presents design and project services and does not intentionally request children’s data. Contact the Studio if you identify a child’s information submitted through the site so that it can assess the appropriate action. This policy may change as the website or applicable rules change; the date above identifies the current version.

Privacy enquiries

Contact Studio Casa Sua to request access, correction or deletion, withdraw consent or ask about your data. Mark your request “Privacy” and include the email address used for your submission. We may ask for the minimum information needed to verify your identity.

Authorities and further information

• ICO — make a complaint
• EDPB — EEA data protection authorities
• ICO — privacy information