Who is responsible
FLR Works is a trade name operated by Erik Florencio, an individual operating in Brazil. For purposes of the Brazilian General Data Protection Law (LGPD, Law No. 13.709/2018), Erik Florencio is the controller of the personal data processed through this website. This policy applies to visitors and to people who write to us through the Contact page. The Contact page is our channel for any question or request about your personal data.
Information we may receive
- What you send us. When you use the contact form: your name, your e-mail address, the type of project, your project description and, if you choose to provide them, your company or business name and a reference link. Please do not send sensitive personal data, or unnecessary personal data about other people, in the free-text fields unless we have asked for it and it is needed for your enquiry.
- Technical and security data. Like any website, the servers that deliver the site and process the form receive technical information about each request, such as IP address, browser and device details and the time of the request. The anti-abuse check on the form also looks at signals from your browser to tell people from bots (see “Service providers”).
- Website usage statistics. We use Vercel Web Analytics to understand visits and page views through aggregated statistics. These may include the page URL, referring website, approximate location, device type, browser and operating system. The analytics dashboard does not identify individual visitors.
- If you write to us directly. If you contact us using an e-mail address or another channel shown on the Contact page, we receive whatever you send.
How we use it
- To read and answer your enquiry and to assess whether and how we can help.
- To communicate with you about a possible project.
- To operate the site and the contact channel, and to keep them secure.
- To detect and prevent spam, abuse and automated misuse of the form.
- To understand aggregated website usage and improve its content and usability.
- To comply with legal obligations that apply to us, where relevant.
We do not sell your personal information.
Legal bases
Depending on the context, we rely on the following bases under the LGPD:
- steps prior to entering into a contract, at your request, when you send a project enquiry and we answer it;
- our legitimate interests in operating and improving the website, understanding aggregated usage, keeping the contact channel secure and preventing abuse, applying the safeguards the law requires and taking your rights and expectations into account;
- compliance with legal or regulatory obligations that apply to us.
We do not treat sending the contact form as consent, and we do not ask you to tick a consent box. Where we ever rely on your consent, you can withdraw it at any time.
Service providers
We rely on the following providers to run the site and the contact form. They handle information on our behalf or provide the infrastructure the site runs on, under their own terms and privacy policies:
- Vercel hosts and delivers the website and runs the server code that receives the form. It also applies rate limits to the form endpoint to limit abuse, which involves processing request information such as IP addresses. Its Web Analytics service provides aggregated traffic statistics without tracking cookies or exposing identifiable visitor profiles in our dashboard.
- Resend is the e-mail delivery service that sends the contents of the contact form to us.
- Cloudflare Turnstile is the anti-bot check used on the form. It runs in your browser when you send a message and may process technical and browser signals to decide whether the request comes from a person. It may also use technical storage in your browser for that purpose.
The messages we receive are kept in the mailbox we use to run the studio, which is provided by an e-mail service we use for our own correspondence. Each provider may receive information about you only as needed to perform its part of the service.
International processing
Because some service providers operate internationally, personal data may be processed in the United States and, depending on the provider and its subprocessors, in other jurisdictions:
- Hosting, request handling and website analytics (Vercel): data may be processed in the United States and in other locations used by Vercel and its subprocessors.
- E-mail delivery of your message (Resend): the data Resend handles for us is stored and processed in the United States.
- Anti-bot and security check (Cloudflare Turnstile): technical security signals are processed through Cloudflare’s global infrastructure.
These providers may process personal data internationally for the hosting, analytics, e-mail-delivery, security and anti-abuse purposes described above. Questions about this processing or requests concerning your personal data can be submitted through the Contact page.
Cookies and similar technologies
This site does not use advertising or marketing trackers. Vercel Web Analytics provides aggregated website statistics without using tracking cookies. To estimate visitors, Vercel derives a temporary identifier from the incoming request; its visitor session is automatically discarded after 24 hours. We also use limited technical storage in your browser: your light or dark theme choice is remembered on your device, and a short-lived record keeps the opening animation from replaying during the same browsing session. This storage stays on your device and is not used to identify you. The infrastructure providers described above, and Cloudflare Turnstile on the contact form, may also use cookies or similar technical storage that are necessary for security and for the service to work. You can clear or block browser storage in your browser settings, but the contact form may then not work.
If we add other analytics or tracking technologies in the future, we will update this policy first and, where the law requires it, ask for your consent.
How long we keep information
We have no fixed retention schedule. We keep enquiries and related correspondence for as long as needed to respond, to assess or carry out a project with you, and to keep reasonable records of our business communications, and we delete or anonymize them when they are no longer needed for those purposes or when the law requires. Our providers keep their own technical logs according to their own policies. Aggregated website statistics are retained according to the Vercel Web Analytics service settings and applicable retention policies.
Your rights
Under Article 18 of the LGPD, and depending on the circumstances (not every right applies in the same way to every situation), you may ask us for:
- confirmation that we process your personal data;
- access to that data;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of data that is unnecessary, excessive or processed in a way that does not comply with the law;
- portability of your data, subject to applicable regulation and legal limits;
- information about the public and private entities with which we share your data;
- deletion of personal data processed on the basis of your consent, subject to the cases in which the law allows us to keep it;
- information about the possibility of not giving consent and its consequences;
- withdrawal of your consent, where consent is the legal basis that applies to the processing.
You also have the right to petition the Brazilian National Data Protection Authority (ANPD) and, where they apply, other competent bodies such as consumer-protection authorities.
To make a request, use the Contact page and say that your message is a privacy request. We may need to confirm who you are before acting on it, and some requests may be limited by legal obligations or by the rights of others.
Security
We use reasonable technical and organizational measures to protect the information that reaches us, including encrypted connections to the site, anti-bot verification and rate limiting on the contact form, and keeping secret keys on the server side. No website or transmission over the internet is completely secure, so we cannot guarantee absolute security.
Children
This site is meant for businesses and adults and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has sent us personal information, contact us through the Contact page and we will take appropriate steps to remove it.
Links to other sites
The site may link to other websites and services, such as our social profiles or a messaging app. Their own privacy practices apply once you leave this site, and we are not responsible for them.
Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top shows when it last changed, and the current version is always the one on this page.
Contact
For questions about this policy or about how we handle your information, use the Contact page of this website.