Privacy Policy
Last updated: October 24, 2026
Your privacy matters. This Policy explains how we handle personal data of visitors to diegomangabeira.com (the "Site") and of people who contact us. We process data in accordance with Brazil's General Data Protection Law (Lei nº 13.709/2018, "LGPD") and, where applicable, the EU and UK General Data Protection Regulation ("GDPR").
1. Controller and contact
The data controller is Mangabeira Academy (CNPJ 49.220.842/0001-48), Rua Bom Jesus, 212, sala 1904, Juvevê, Curitiba/PR, CEP 80035-010, Brazil. For any privacy matter, including exercising your rights, write to hello@diegomangabeira.com.
2. Data we process
- Technical data: IP address, browser and device type, pages visited and timestamps, logged automatically by our hosting provider.
- Contact data: your name, email address and the content of your message when you email us, for example a speaking or consulting inquiry.
The Site has no forms or accounts. If you accept analytics cookies, Google Analytics also collects usage data (pages viewed, referrer, device and approximate location); if you decline, it does not load. Newsletter sign-ups, call bookings and podcast listening happen on third-party platforms (Substack, Cal.com, Spotify), which handle that data under their own policies.
3. Why we use it
| Purpose | Legal basis |
|---|---|
| Measuring visits with Google Analytics | Consent, given in the cookie notice and revocable at any time (LGPD art. 7, I; GDPR art. 6(1)(a)) |
| Keeping the Site secure and running | Legitimate interest (LGPD art. 7, IX; GDPR art. 6(1)(f)) |
| Replying to your messages and inquiries | Steps prior to a contract or legitimate interest (LGPD art. 7, V and IX; GDPR art. 6(1)(b) and (f)) |
| Meeting legal obligations | Legal obligation (LGPD art. 7, II; GDPR art. 6(1)(c)) |
4. Who we share it with
We do not sell personal data. We share it only with service providers we need to run the Site and answer you:
- Netlify: website hosting.
- Google Analytics (Google): visit statistics, only if you accept analytics cookies.
- Our email provider: to receive and answer your messages.
- Public authorities: when required by law or court order.
Some providers are located outside Brazil or your country, which may involve international data transfers made with appropriate safeguards (LGPD art. 33; GDPR chapter V).
5. How long we keep it
We keep messages for as long as needed to handle your request and any resulting relationship, and access logs for 6 months as required by Brazil's Marco Civil da Internet. After that, data is deleted or anonymized unless the law requires us to keep it.
6. Your rights
You may, at any time:
- ask whether we process your data and get a copy of it;
- correct incomplete, inaccurate or outdated data;
- ask for deletion, anonymization or restriction of data;
- object to processing based on legitimate interest;
- ask for data portability;
- know who we share your data with;
- lodge a complaint with Brazil's ANPD or your local data protection authority.
To exercise your rights, write to hello@diegomangabeira.com. We will reply within the timeframe required by law.
7. Security
The Site is served over an encrypted connection (HTTPS), and we take reasonable technical and organizational measures to protect personal data. No system is completely risk-free; if a relevant incident occurs, we will notify affected people and authorities as required by law.
8. Children
The Site is intended for adults. We do not knowingly collect data from children.
9. Changes to this Policy
We may update this Policy from time to time. The version in force is always the one published on this page.
Back to diegomangabeira.com