RukinPTEN

Privacy Policy

Last updated: 21 October 2026

Who we are

This website belongs to Rukin, visual artist, and is run by Creative Road Arte e Design Ltda, CNPJ 31.089.583/0001-00, based in São Paulo, Brazil. We are the controller of the personal data described here, under Brazil's General Data Protection Law (Law 13,709/2018, LGPD).

For anything about your data, write to [email protected]. As a small processing agent, we have not appointed a data protection officer (ANPD Resolution 2/2022); this email is our contact channel.

What we collect and why

  • Contact form: name, email and message, to reply to you.
  • Calendar order: name, email, phone, CPF and full address, to ship your order by Correios, issue the invoice and talk to you about delivery.
  • Newsletter: your email and the page language, to send the quarterly letter. You are only added after confirming through the email we send.
  • Payment: handled by Mercado Pago. Your card or account details stay with Mercado Pago; we only receive the payment confirmation.
  • Browsing: we use no tracking cookies and no visitor analytics. The site only stores your language choice in your browser. Our technical providers log data such as your IP address to deliver the site and protect it from abuse.

Legal bases

  • Performance of a contract: to process and deliver your order (LGPD art. 7, V).
  • Legal obligation: to issue the invoice and keep tax records (art. 7, II).
  • Consent: for the newsletter, which you can cancel at any time (art. 7, I).
  • Legitimate interest: to answer contact messages and keep the site secure (art. 7, IX).

Who we share data with

We never sell or rent personal data. We use these services, which process data on our behalf and only for the purposes above:

  • Cloudflare: website hosting and email forwarding (United States).
  • Formspree: receives the contact and order forms (United States).
  • Brevo: newsletter delivery (France, European Union).
  • Mercado Pago: payments (Brazil).
  • Correios: delivery of your order (name, address, phone and CPF).
  • Our accountant: issuing the invoice (name, CPF and address).
  • Google Fonts: provides the site's fonts; your browser connects to Google to load them (United States).
  • ViaCEP: when you type your CEP in the order form, it is looked up to fill in your address (Brazil).

Some of these services are outside Brazil. This international transfer follows LGPD art. 33, with providers that apply data protection safeguards.

How long we keep data

  • Orders and invoices: for the period required by tax law, usually 5 years.
  • Contact messages: up to 2 years after our last conversation.
  • Newsletter: until you unsubscribe. Every letter has a link to do so.

Your rights

At any time you can ask for: confirmation that we process your data; access to it; correction of incomplete or wrong data; anonymisation, blocking or deletion of unnecessary data; portability; deletion of data processed with your consent; information about who we share it with; and withdrawal of consent (LGPD art. 18).

Write to [email protected] and we will reply within 15 days. You can also file a complaint with Brazil's National Data Protection Authority (ANPD).

Security

The site uses an encrypted connection (https), and we choose providers with recognised security measures. No system is completely secure: if an incident could put you at risk, we will tell you and notify the ANPD.

Minors

The site is not aimed at people under 18, and we do not knowingly collect data from minors.

Changes to this policy

We may update this policy. The date at the top shows the version in force; important changes will be announced on the site.