Privacy policy.

This Privacy Policy explains how Arisson Santos ("we", "our", or "us") collects, uses, and protects your personal information when you visit our personal website. We are committed to protecting your privacy and ensuring that your personal data is handled in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR).

Optional analytics runs only if you choose to accept it. Using this website does not itself grant analytics consent. You can change your choice through Cookie preferences in the footer.

Personal Information

We may collect personal information that you voluntarily provide to us, when you submit your first name, last name, email address, and message through the contact form:

• Contact us through our contact form

Automatically Collected Information

If you accept analytics, Google Analytics collects information about your device and your visit, including:

• Your IP address and general location
• Browser type and version
• Operating system
• Pages you visit and time spent on each page
• Referring website
• Device information

We use the information we collect for the following purposes:

• Website Analytics: To understand how visitors use our website and improve user experience
• Communication: To respond to your enquiries and provide customer support
• Content Improvement: To analyse which content is most popular and relevant to our audience
• Technical Support: To diagnose and resolve technical issues
• Legal Compliance: To comply with applicable laws and regulations

This website uses Google Analytics only after you accept analytics cookies. It helps us understand traffic, popular pages, usage patterns, performance, and functionality so we can improve the website and its content.

Google processes analytics information, such as device and browser details and page visits. Information may be processed outside the UK or EEA. See Google’s Privacy Policy for details of its processing.

Before acceptance, Google Analytics is not loaded. Rejecting analytics does not affect access to the website. You can withdraw consent at any time through Cookie preferences in the footer. You can also use the Google Analytics Opt-out Browser Add-on.

This website uses optional analytics cookies and local storage for your preferences.

Analytics cookies — optional

Google Analytics cookies are set only after you accept. They help us understand how visitors use the website. Rejecting analytics keeps tracking disabled; withdrawing consent disables further tracking and removes this site’s Google Analytics cookies.

Preferences

Your dark or light theme and analytics choice are stored locally in your browser. You can change the theme in the header and analytics choice through Cookie preferences in the footer. If browser storage is unavailable, choices apply for the current page. Clearing browser data removes saved preferences.

Contact form protection

The contact form loads Google reCAPTCHA when you submit a message to protect against spam. reCAPTCHA processes information about your browser and interaction. It is separate from optional analytics. Google’s Privacy Policy and Terms of Service apply.

Under the UK GDPR and EU GDPR, we process your personal data based on the following legal grounds:

• Legitimate Interest: To improve our website and provide a better user experience
• Consent: When you explicitly agree to the processing of your personal data
• Legal Obligation: To comply with applicable laws and regulations

We do not sell, trade, or otherwise transfer your personal information to third parties, except in the following circumstances:

• Formspree: Your contact details and message are sent to Formspree to deliver your enquiry. See Formspree’s Privacy Policy.
• Google reCAPTCHA: Used to protect contact submissions from spam.
• Google Analytics: As described above, for website analytics purposes
• Service Providers: We may share information with trusted third-party service providers who assist us in operating our website, conducting our business, or servicing you
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities
• Protection of Rights: We may disclose information to protect our rights, property, or safety, or that of our users or others

All third parties with whom we share data are required to maintain the confidentiality and security of your personal information.

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Secure data transmission using HTTPS encryption
• Regular security assessments and updates
• Limited access to personal data on a need-to-know basis
• Secure hosting and infrastructure

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specifically:

• Analytics Data: Retention is controlled by the Google Analytics property settings
• Contact Form Submissions: Retained for up to 2 years for customer service purposes
• Browser Preferences: Retained until you change your preferences or clear your browser data

When we no longer need your personal information, we will securely delete or anonymise it.

Under the UK GDPR and EU GDPR, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us using the information provided below. We will respond to your request within one month, though this period may be extended in certain circumstances.

Your personal information may be transferred to and processed in countries outside the UK and European Economic Area (EEA), particularly the United States where Google Analytics servers are located.

We ensure that any such transfers comply with applicable data protection laws by:

• Only transferring data to countries with adequate data protection laws
• Using standard contractual clauses approved by the European Commission
• Ensuring third parties provide adequate safeguards for your data

Our website is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately, and we will take steps to remove such information from our records.

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:

• Posting the updated policy on this page
• Updating the "Last updated" date at the top of this policy
• Providing notice through our website or other communication channels where appropriate

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK or your local data protection authority if you believe that we have not addressed your concerns adequately.