legal
Privacy Policy
Last updated: September 28, 2026
This policy explains what personal data we collect when you use felipefontoura.com (the “Site”) or buy courses, digital products, workshops, subscriptions or consulting under the Felipe Fontoura brand (“we”, “us”), why we use it, and the rights you have.
1. Who is responsible
We are responsible for the personal data described here. For any privacy question or request, including as data protection officer (encarregado under Brazil’s LGPD), use our contact page.
2. What we collect
- Data you give us: name, email, mobile number (WhatsApp and/or SMS) and messages you send when you subscribe, request free material, buy or get in touch. When you sign up, we link the visit’s campaign parameters to your record, to know which content brought you.
- Purchase data: what you bought, amount, currency, country and billing details. Payments are processed by Stripe or another payment provider; we never see or store your full card number.
- Usage data: pages visited, device, browser, approximate location, referrer and campaign parameters (UTM, ad click IDs), collected through cookies and similar technologies.
3. Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Deliver what you bought, give access, support | Performance of a contract |
| Newsletter, WhatsApp or SMS messages and product updates | Consent (you can withdraw at any time) |
| Analytics and advertising cookies | Consent, where the law requires it |
| Improve the Site, prevent fraud, secure the Services | Legitimate interest |
| Tax, accounting and legal obligations | Legal obligation |
4. Who we share it with
We don’t sell personal data for money. We share it with providers that process it on our behalf: payments (Stripe), hosting and delivery (Cloudflare), email delivery (Amazon Web Services), messaging (WhatsApp, by Meta, and SMS providers), course platforms, analytics (Google) and advertising (Google, Meta). We may also share data with authorities when the law requires, and with a successor in a merger or sale of the business.
5. Cookies
Essential cookies keep the Site and checkout working. Analytics and advertising cookies (Google Tag Manager, Google Analytics, Google Ads, Meta) measure visits and campaigns; where the law requires your consent, they are only used with it, and you can withdraw consent at any time. You can also block or delete cookies in your browser and opt out of personalized ads in each provider’s settings.
6. International transfers
Our providers may process data outside your country, including in the United States. We rely on the safeguards the law requires, such as standard contractual clauses.
7. Retention and security
We keep data only as long as needed for the purposes above or as required by law (for example, tax records), then delete or anonymize it. We protect it with reasonable technical and organizational measures; no system is completely secure.
8. Your rights
Depending on where you live, you can ask to access, correct, delete or export your data, object to or restrict its use, withdraw consent, and not be subject to decisions based only on automated processing. Email us to exercise any right; we answer within the deadline set by your local law. You can also complain to your data protection authority.
9. Regional information
Brazil (LGPD)
You have the rights in article 18 of Law 13.709/2018. You can contact our data protection officer at the email above, and file a complaint with the ANPD.
European Union, European Economic Area and United Kingdom (GDPR and UK GDPR)
The legal bases are listed in section 3. Transfers outside the EEA and the UK use standard contractual clauses or another valid mechanism. You can complain to the supervisory authority of your country (in the UK, the ICO).
United States
Residents of states with privacy laws (such as California, Colorado, Connecticut, Virginia and others) may have the right to know, access, correct and delete their data, and to opt out of targeted advertising and “sharing” of personal data. To opt out, email us or use a browser signal such as Global Privacy Control where the law recognizes it. We don’t discriminate against you for exercising these rights.
Latin America
Residents of Argentina (Law 25.326, authority: AAIP), Mexico (LFPDPPP, ARCO rights), Chile (Law 19.628) and Colombia (Law 1581 of 2012, authority: SIC) can exercise their rights of access, rectification, cancellation and objection by emailing us.
10. Children
The Services are not directed to people under 16, and we don’t knowingly collect their data. If you believe a child sent us data, contact us and we will delete it.
11. Changes and contact
We may update this policy; the new version is posted here with a new date. For privacy requests and questions, see our contact page.