Privacy Policy

Agency LP (“Agency LP”, “we”, “us”, or “our”) respects your privacy. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the rights you have under applicable data-protection laws, including the Brazilian General Data Protection Law (LGPD — Lei nº 13.709/2018) and, where applicable, the EU General Data Protection Regulation (GDPR).

By using our website or contracting our services, you acknowledge that you have read and understood this policy.

1. Who we are

Agency LP is a website-design service operating from Brazil. The data controller for the purposes of LGPD/GDPR is Agency LP. You can reach us at agenciamktl.p@gmail.com.

2. Information we collect

We only collect the data we actually need to deliver our service. Specifically:

• Identification & contact data — name, email, phone/WhatsApp number, business name, country.
• Project brief data — content, copy, images, brand assets, and any other materials you upload or share to enable us to build your website.
• Payment data — processed entirely by third-party payment providers (Stripe, PayPal). We never store full card numbers; we only retain a transaction reference and the last 4 digits when shown by the provider for accounting purposes.
• Technical & usage data — IP address, browser, device, operating system, pages visited, time on page, referring URL. Collected via cookies and analytics tools (see Section 6).
• Communication data — content of emails, WhatsApp messages, and other communications you exchange with us.

3. How we use your data

We process your personal data on the following lawful bases and for the following purposes:

• Contract performance — to deliver the website you ordered, communicate progress, send invoices, and provide support.
• Legal obligation — to meet tax, accounting, and consumer-protection requirements.
• Legitimate interest — to improve our service, prevent fraud, secure our systems, and (where permitted) send you transactional communications about projects you have requested.
• Consent — for non-essential cookies, analytics, and any marketing emails. You may withdraw consent at any time.

4. Who we share your data with

We do not sell your data. We share strictly what is necessary with trusted processors:

• Payment processors — Stripe, PayPal (handling of transactions).
• Hosting & infrastructure — Vercel, Cloudflare (delivery of your website and ours).
• Analytics — privacy-respecting analytics providers used to measure aggregate website performance.
• Professional advisors — accountants and lawyers when strictly necessary.
• Authorities — when required by law or court order.

Some of these processors may be located outside Brazil or the EU. When that is the case, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or the recipient's adherence to recognised privacy frameworks.

5. Data retention

We keep your personal data only as long as necessary to fulfil the purposes for which it was collected. Specifically:

• Project & communication data: kept for up to 5 years after project delivery, for warranty, support, and tax purposes.
• Payment records: kept for at least 5 years to meet tax obligations.
• Marketing data: kept until you unsubscribe or request deletion.
• Analytics data: retained in aggregated, non-identifiable form.

6. Cookies & similar technologies

We use a minimum set of cookies. Strictly necessary cookies (for example, those that remember your form input) do not require consent. Analytics and performance cookies are only set after you accept them via the consent banner. You can clear or block cookies in your browser settings at any time.

7. Your rights

Under LGPD, GDPR, and equivalent laws, you may exercise the following rights free of charge:

• Confirmation that we are processing your data and access to it.
• Correction of incomplete, inaccurate, or outdated data.
• Anonymisation, blocking, or deletion of unnecessary or excessive data.
• Portability of your data to another provider.
• Information about public and private entities with which we have shared your data.
• Withdrawal of consent at any time.
• Objection to processing that is based on legitimate interest.
• Lodging a complaint with the Brazilian National Data Protection Authority (ANPD) or your local supervisory authority.

To exercise any of these rights, email us at agenciamktl.p@gmail.com. We respond within 15 days.

8. Data security

We use industry-standard measures (TLS encryption in transit, access controls, encrypted backups, principle of least privilege) to protect your data. Despite our best efforts, no system is 100% secure; in the unlikely event of a data breach affecting your personal data, we will notify the ANPD and affected individuals as required by law.

9. Children's privacy

Our services are not directed at people under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, please contact us so we can delete it.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be announced on our website or by email when we hold one for you.

11. Contact

For any privacy-related question or request, contact us at agenciamktl.p@gmail.com.