Privacy Policy
A plain explanation of what data we collect, why, and your rights under Brazil's LGPD (Law 13.709/2018).
Last updated: TODO
Who we are
Granite Key Development, registered name TODO, CNPJ TODO, business address TODO, Rio de Janeiro, RJ. We are the controller of the data described here. Privacy contact: joshua@granitekeygroup.com. Data protection officer: TODO.
What data we collect
- What you send in the form: name, WhatsApp or phone, email, neighbourhood or address of the property, property details, what you want renovated, budget range, timeline and best time for a visit.
- Messages and photos you send us by email or WhatsApp.
- Browsing data, if we switch on analytics (Google Analytics) or chat (Tawk.to). These use cookies and collect data such as pages visited and device type.
Why we use it
- To reply to you, arrange the visit and prepare the quote, based on your consent and on steps prior to a contract (LGPD art. 7, I and V).
- To carry out the renovation contract, if you hire us.
- To meet legal and tax obligations.
- To understand how the site is used and improve it, based on our legitimate interest or your consent where required.
We don't sell your data and we don't use it for marketing without your permission.
Who we share it with
Only those who need it to provide the service: the Granite Key Development team and suppliers who help us operate, such as the form service (FormSubmit), our email provider, website hosting (Netlify) and, if switched on, the analytics and chat tools. Some of these suppliers store data outside Brazil, with the safeguards the LGPD requires.
How long we keep it
Requests that don't become a contract are kept for up to TODO months and then deleted. Client data is kept for the length of the contract and for the periods the law requires.
Your rights
At any time you can ask for: confirmation that we process your data, access, correction, anonymisation, portability, deletion, information about sharing, and withdrawal of consent. Just write to joshua@granitekeygroup.com. You can also complain to Brazil's National Data Protection Authority (ANPD).
Security
We take reasonable steps to protect your data, such as restricted access and secure connections (HTTPS). No system is completely immune to failure, and we will tell you and the ANPD about any significant incident.
Changes to this policy
If this policy changes, we will publish the new version on this page with the date it was updated.
The Portuguese version of this policy is the reference version.