Privacy Policy

Last updated: September 29, 2026

This policy explains, in plain language, how loumart.com.br handles personal data under Brazil's General Data Protection Law (LGPD — Law No. 13,709/2018). In short: this site has no ads, doesn't ask for your data and only uses cookies if you allow it. Basic audience is measured by a self-hosted tool, without cookies and without identifying you.

1. Who is responsible

The data controller is Thiago Lourenço Martins (LouMart Lab), Joinville, SC, Brazil. For any privacy matter, including exercising your rights, write to thiagoloumart@gmail.com. This address also acts as the data protection contact for data subjects and for Brazil's data protection authority (ANPD).

2. What data is processed

When you browse: the server automatically keeps a technical access log (IP address, date and time, page visited, browser and operating system). This is needed for the site to work and to protect it from attacks.
When you get in touch: if you click "Let's talk", the conversation happens on WhatsApp, and I only receive what you choose to send (such as your name, number and message). The same applies to LinkedIn or email.
The site has no forms, no sign-up and processes no sensitive data.

3. Why, and on what legal basis

Access log: security and operation of the site, based on legitimate interest (LGPD art. 7, IX). Contact messages: to reply to you and, where relevant, to discuss a project or job opportunity, based on pre-contractual steps at your request (art. 7, V) and legitimate interest. Data is never sold or used for advertising.

4. Cookies and analytics

Without your consent, this site uses no cookies. To know how many people visit and which parts are read most, I use Umami, an analytics tool installed on the site's own server: it uses no cookies, doesn't store your IP address and doesn't identify you (it counts visits in aggregate: country, language, referring page, how far the page was read and clicks on the contact button), based on legitimate interest (LGPD art. 7, IX). These figures stay on the server and are not shared. Only if you click "Accept" on the cookie notice does the site also load Google Analytics (Google) and Microsoft Clarity (Microsoft), which use cookies to measure how the site is used and produce heatmaps and anonymized session replays (anything typed is masked), based on your consent (LGPD art. 7, I). You can change your choice at any time under "Cookie settings" in the footer. There are no ad pixels. Fonts, images and videos are served from the site's own server.

5. How long data is kept

The access log is deleted automatically within 14 days. Contact messages are kept only as long as needed for the conversation and any professional relationship, and are deleted on request, unless the law requires otherwise. If you accept cookies, Google Analytics keeps data for up to 14 months and Microsoft Clarity follows Microsoft's own retention periods.

6. Who data is shared with

No one, except: the server's hosting provider (located in the European Union, subject to the GDPR, with an adequate level of protection — LGPD art. 33); if you accept cookies, Google and Microsoft, which may process data in the United States under the contractual safeguards provided for in art. 33; and the platforms you choose to contact me on (WhatsApp, LinkedIn, GitHub, email), which follow their own privacy policies. Data may also be disclosed under an order from a competent authority.

7. Links to other sites

The site links to WhatsApp, LinkedIn, GitHub and other addresses. Once you click, those services' own rules apply, and I don't control them.

8. Your rights

Under LGPD art. 18 you may, at any time: confirm whether I process your data; access it; correct incomplete or outdated data; request anonymization, blocking or deletion of unnecessary or excessive data; request portability; request deletion of data processed with consent; learn who it was shared with; and withdraw consent. Just email the address above. I reply within 15 days. You may also file a complaint with the ANPD.

9. Security

The site uses encrypted connections (HTTPS), the server has restricted access and monitoring, and only the minimum data is processed. No system is 100% secure, but if an incident could put you at risk, you and the ANPD will be notified, as the law requires.

10. Children

This site is intended for professionals and companies and is not directed at anyone under 18.

11. Changes to this policy

This policy may be updated. The date of the latest version is always shown at the top of this page.