Legal
Privacy policy
This policy explains how Dartfold ("we") handles personal data on dartfold.online. It is written to comply with Brazil's Lei Geral de Proteção de Dados (Law 13.709/2018, "LGPD") and, where applicable, the EU General Data Protection Regulation ("GDPR").
Controller
The controller is Dartfold, based in Brazil. Contact for all privacy matters: support@dartfold.online.
What we collect
- Email correspondence: the address, name if given, and message content when someone writes to us.
- Purchase records: if a paid product is offered, the name, email, product and transaction reference provided by the payment processor. We do not receive or store full card numbers.
- Technical logs: our hosting provider records IP address, browser type, requested pages and timestamps to deliver the site and protect it from abuse.
Legal bases
- Performance of a contract, for purchases and refunds (LGPD art. 7, V; GDPR art. 6(1)(b)).
- Legitimate interest, for answering messages and keeping the site running and protected (LGPD art. 7, IX; GDPR art. 6(1)(f)).
- Legal obligation, for keeping tax and accounting records (LGPD art. 7, II; GDPR art. 6(1)(c)).
- Consent, for any optional cookies or tracking, where used (LGPD art. 7, I; GDPR art. 6(1)(a)).
Retention
Correspondence is kept for up to 24 months after the last message. Purchase records are kept for the period required by Brazilian tax law, generally five years. Hosting logs are kept for a short period set by the hosting provider, typically no more than 30 days.
Cookies and measurement
The site itself does not set advertising cookies. Advertising platforms used to promote the site may use their own pixels or cookies to measure whether an advertisement led to a visit. Where required by law, these run only with consent, and browser settings can block them at any time.
Sharing
We share data only with service providers needed to run the site, such as hosting, email and payment processing, and only to the extent necessary. We do not sell personal data.
International transfers
Some providers process data outside Brazil, including in the United States. Such transfers rely on the mechanisms allowed by LGPD art. 33 and, where applicable, GDPR Chapter V, such as standard contractual clauses.
Rights
Under LGPD and GDPR, people may request confirmation of processing, access, correction, anonymisation or deletion, portability, information about sharing, and withdrawal of consent, and may object to processing based on legitimate interest. Requests go to support@dartfold.online and are answered within 15 days.
Complaints may also be filed with Brazil's Autoridade Nacional de Proteção de Dados (ANPD) or, in the EU, with the local data protection authority.
Minors
The site is not directed at anyone under 18, and we do not knowingly collect data from minors.
Changes
If this policy changes, the date at the top will be updated. Significant changes will be noted on this page.