Privacy Policy
Last updated: 10 September 2026
This policy explains what personal data we collect when you visit this website or buy one of our products, why we collect it, who we share it with, how long we keep it, and the rights you have over it. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR), the UK GDPR and the Brazilian LGPD.
1. Who is responsible for your data
The controller of the personal data processed through this website is:
47.709.347 DOUGLAS ANDRADE BRAZ DE OLIVEIRACNPJ 47.709.347/0001-71
Rua 14B, Sala 01
Setor Garavelo, Goiânia — GO, 74354-150
Brazil
soporteyumi@gmail.com
Represented by Douglas Andrade Braz de Oliveira. We have not appointed a Data Protection Officer, as we are not required to under Art. 37 GDPR. All privacy requests are handled directly at the email address above.
2. What data we collect
2.1 Data you give us at checkout
When you buy a product, you provide your name, email address, country and — where required for tax purposes — your billing address. This is collected on the checkout page operated by Digistore24, which then transmits the order data to us so we can deliver the product and provide support.
2.2 Payment data
We never see, receive or store your payment details. Card numbers, PayPal credentials and bank details are collected and processed entirely by Digistore24 GmbH and its payment partners. We only receive confirmation that a payment succeeded, was refunded, or was charged back.
2.3 Data you give us by writing to us
If you email us or use the form on our contact page, we process the name, email address and the content of your message so we can answer you.
2.4 Data collected automatically
When you load a page, our hosting provider records technical data in server log files: IP address, date and time of the request, the page requested, the referring page, browser type and operating system. This is necessary to deliver the site and to detect abuse.
2.5 Cookies and similar technologies
We set cookies and, with your consent, allow third-party tracking technologies to set them. Details are in section 5.
3. Why we process it, and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Delivering the product you bought and providing support | Name, email, order data | Performance of a contract — Art. 6(1)(b) GDPR |
| Issuing invoices and meeting tax and accounting obligations | Name, billing address, order data | Legal obligation — Art. 6(1)(c) GDPR |
| Answering your messages | Name, email, message content | Legitimate interest — Art. 6(1)(f) GDPR |
| Operating and securing the website | Server log data | Legitimate interest — Art. 6(1)(f) GDPR |
| Sending you emails about the product you bought and related offers | Name, email | Consent — Art. 6(1)(a) GDPR, withdrawable at any time |
| Attributing an order to the campaign or link it came from | UTM parameters from the link you arrived through, request data | Legitimate interest — Art. 6(1)(f) GDPR |
| Measuring page performance and advertising | Cookie identifiers, device and usage data | Consent — Art. 6(1)(a) GDPR, given via the cookie banner |
4. Third-party services we use
We keep the list short on purpose. These are the only services that receive personal data in connection with this website.
4.1 Digistore24 — payment processing and order handling
Digistore24 GmbH (Germany) operates the checkout, processes the payment as authorised reseller, issues the invoice and handles refunds. It receives your name, email, billing country and payment data. Digistore24 acts as an independent controller for this processing. See digistore24.com/page/privacy.
4.2 Meta Pixel — advertising measurement
With your consent we load the Meta Pixel, provided by Meta Platforms Ireland Ltd. It uses cookies to record that you visited a page or completed a purchase, so we can measure our advertising and build audiences. It may transmit your IP address and a pseudonymous identifier to Meta. You can withdraw consent at any time by clearing this site's data in your browser, which makes the cookie banner appear again. See facebook.com/privacy/policy.
4.3 Google Analytics and Google Ads — measurement
With your consent we may load Google Analytics and Google Ads conversion tracking, provided by Google Ireland Ltd, for the same purpose: to understand which pages perform and to measure advertising. IP anonymisation is enabled. See policies.google.com/privacy.
4.4 Utmify — campaign attribution
We use Utmify (Utmify Tecnologia Ltda, Brazil) to read the campaign parameters attached to
the link you arrived through — the standard utm_source, utm_medium,
utm_campaign values and similar — and to carry them through to the Digistore24
checkout, so that we can tell which advertisement or link an order came from. It stores those
parameters in your browser for the duration of your visit and transmits them, together with
technical request data such as your IP address, to Utmify.
This is order attribution rather than behavioural profiling: it tells us which campaign
produced a sale, not who you are or what you do elsewhere on the web. We rely on our
legitimate interest in knowing which of our advertising actually works (Art. 6(1)(f) GDPR),
and the script is loaded on every page for that purpose. You can object to this processing at
any time by writing to soporteyumi@gmail.com, and
blocking the domain cdn.utmify.com.br in your browser prevents it entirely
without affecting the rest of the site.
4.5 Email delivery — [[EMAIL_TOOL_NAME]]
We use [[EMAIL_TOOL_NAME]] to deliver your product access and, if you consented, follow-up emails. It processes your name and email address on our behalf as a processor under a data processing agreement. Every marketing email contains a one-click unsubscribe link.
4.6 Hosting — [[HOSTING_PROVIDER]]
This website is hosted by [[HOSTING_PROVIDER]], which processes server log data on our behalf as a processor under a data processing agreement.
4.7 Google Fonts
Typefaces are loaded from Google Fonts. When a page loads, your browser connects to Google servers and your IP address is transmitted. If you prefer to avoid this, the fonts can be self-hosted on request.
5. Cookies
A cookie is a small text file a website stores in your browser so it can remember something between page loads. We use two kinds:
- Necessary. One entry in your browser's local storage records whether you accepted or declined the cookie banner, so we do not ask again on every page. This is set without consent because the site cannot function correctly without it, and it contains no personal data.
- Analytics and advertising. Set by Meta and Google only after you press “Accept” on the banner. They record page views and purchases in a pseudonymous form.
How to refuse or remove them. Press “Decline” on the banner and no analytics or advertising technology is loaded at all. You can also delete cookies and site data for this domain in your browser settings, or block them entirely — the site will continue to work. In Chrome, Firefox, Safari and Edge this is under Settings → Privacy.
6. Who else receives your data
Only the services listed in section 4, and only to the extent each one needs. We do not sell personal data and we do not share it with data brokers. We may disclose data where we are legally required to do so by a competent authority.
7. Transfers outside the EEA
Some of the services above are operated by companies based in, or with infrastructure in, the United States, and we ourselves are established in Brazil. Where personal data leaves the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses, by an adequacy decision (Brazil and the EU–US Data Privacy Framework, where the provider is certified), or by your explicit consent. You may request a copy of the relevant safeguards from us at any time.
8. How long we keep it
- Order and invoice data: for the retention period required by tax law, which is up to 10 years.
- Support correspondence: up to 3 years after the matter is closed.
- Email marketing data: until you unsubscribe or ask us to delete it.
- Server log files: up to 30 days, then deleted or anonymised.
- Analytics and advertising cookies: according to each provider's own retention period, typically no longer than 24 months.
9. Your rights
Under the GDPR and equivalent laws you have the right to:
- Access — obtain confirmation of whether we process your data and a copy of it (Art. 15).
- Rectification — have inaccurate data corrected (Art. 16).
- Erasure — have your data deleted where we have no overriding obligation to keep it (Art. 17).
- Restriction — have processing limited while a dispute is resolved (Art. 18).
- Portability — receive your data in a machine-readable format (Art. 20).
- Objection — object to processing based on legitimate interest, and to direct marketing at any time (Art. 21).
- Withdraw consent — at any time, without affecting processing already carried out (Art. 7(3)).
- Complain — lodge a complaint with your local supervisory authority, or in Brazil with the ANPD.
To exercise any of these, write to soporteyumi@gmail.com. We answer within 30 days and we do not charge for it. We may ask you to confirm the email address used for your order so we do not disclose data to the wrong person.
10. Children
Our products are sold to adults. This website is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has given us personal data, write to us and we will delete it.
11. Security
This site is served exclusively over HTTPS. Access to order and support data is limited to the people who need it to deliver the product. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the sensitivity of the data we hold — which is deliberately kept to a minimum.
12. Changes to this policy
If we add a tool or change how we process data, we update this page and change the date at the top. Material changes affecting existing customers will also be announced by email.