Privacy policy

Courtesy translation. In case of doubt, the Portuguese version prevails.

Who the controller is

Ateliê Marylu. Privacy contact: felippemenezes1982@gmail.com.

What data we collect and why

• Registration (name, email, phone, password): so you can access your account and follow your orders. Your password is stored irreversibly (hashed); not even the store can read it.
• Sign-in with Google (optional): we receive from Google only your name, email and a code that identifies the account. We never receive your password. You can disconnect it in My account → Google account.
• Delivery address: to calculate shipping and send your order.
• Order and payment data: to fulfil the purchase contract and tax obligations. Card details are entered in the payment provider's environment and never pass through the store.
• Access records (date, time and IP): required by Brazil's Internet Civil Framework and used for security (for example, blocking intrusion attempts).

Who we share it with

Only with those needed to complete the purchase: payment provider, carrier/Correios and the website hosting service. We do not sell data.

Cookies

We use only essential cookies: sign-in, protection against form fraud, your chosen language and the cart stored in your browser. We do not use advertising cookies.

How long we keep it

Account data: for as long as the account exists. Orders and invoices: for the period required by tax law (5 years). Access records: 6 months.

Your rights

In My account → Personal data you can download your data or delete your account. If there are orders, identification data is anonymized and the sale record is kept only for the legal period. For corrections or questions, contact us through the channels above.