Privacy
Policy.
Transparency is part of a good relationship, too.
Learn how we handle your data and how to exercise your rights.
Last updated: October 2, 2026.
Who is responsible for your data
Estúdio Hiru Design, presented on this site as Estúdio Hiru, is responsible for processing the personal data received through contacts and activities described in this policy.
For privacy questions or requests relating to your data, email thiago@estudiohiru.com.br.
This policy applies to browsing this site and to contacts initiated through its channels. Details about data processing for a specific project may be set out in the relevant proposal or contract.
What data may be processed
When you contact us: your name, email address, phone number, company, and information about your brand or project that you choose to share. The briefing buttons open your email app; your message is sent when you choose to send it.
While you browse: the site infrastructure may log your IP address, date and time of access, requested URL, and browser or device information for operation, troubleshooting, and security.
Please send only the information needed to respond to your request. Avoid including sensitive data, such as health information, identity documents, or third-party data that is not needed for the project.
How we use your data
We use contact information to reply to messages, understand your brand’s needs, prepare proposals, and carry out requested projects. Technical data helps keep the site available and investigate errors or unauthorized access.
Legal bases vary by purpose: pre-contractual steps and performance of a contract for proposals and projects; compliance with legal obligations where necessary; and legitimate interest in protecting and operating the site, while respecting data subjects’ rights. Where an activity relies on consent, it will be requested specifically and can be withdrawn.
Cookies and site technologies
Cookies are small files your browser may store to enable website functions. WordPress uses technical cookies for administrative access. An essential cookie also stores your consent preferences.
The site uses Google Analytics for traffic statistics and Google Ads and Meta Pixel technologies for campaign measurement. Statistics and marketing cookies depend on the choices made in the preferences panel. Browsing the site does not, by itself, authorize optional cookies. Google Consent Mode communicates these choices to the tags; when cookies are denied, limited measurement may occur without storing cookies in those categories.
You can accept optional cookies, reject them, or choose your preferences, and revisit your choice using the site’s cookie button. You can also view, delete, or block cookies in your browser. Blocking necessary cookies may affect functions that rely on them. We do not currently use a newsletter.
For more details, see our Cookie Policy.
Fonts and external services
The site uses fonts provided by Google Fonts. To load these fonts, your browser may connect to the service’s servers, sharing technical information such as your IP address and request data. See Google Privacy Policy for information about how the provider processes data.
When you open an external link or send an email, you also use services governed by their own privacy policies. This policy describes Hiru’s data processing and does not replace those policies.
Who we may share data with
Processing may involve hosting, infrastructure, and email providers as needed to maintain the site and respond to messages. For projects, professionals and suppliers should only access information needed for the contracted work.
Data may also be provided to comply with a legal obligation or order from a competent authority, or to exercise legal rights. Access and sharing should respect the purpose of processing and the needs of each case.
Processing outside Brazil
Infrastructure, email, or font services may use servers located outside Brazil. When processing under Hiru’s responsibility involves international data transfers, the applicable rules and safeguards under the LGPD and ANPD regulations must be followed.
You can request information about providers and processing related to your data through the privacy contact listed on this page.
How long we retain data
Information is kept only as long as needed for the purpose for which it was collected. Messages and proposals may be retained while support or negotiations are ongoing; project data may be kept for the duration of the contractual relationship and for as long as needed to meet legal obligations or exercise rights.
Technical logs are retained according to operational and security needs and obligations that apply to the infrastructure. When retention is no longer necessary, data should be deleted or anonymized, except where the law permits retention.
Protecting your information
Access to data should be limited to people who need it for the purposes described here. Technical and organizational measures should be appropriate to the nature of the information and the risks of processing.
No digital environment is completely secure. If an incident may create significant risk or harm to data subjects, we will investigate and notify as required by law. If you identify a possible data exposure involving Hiru, contact us at the email address in this policy.
Your rights and how to exercise them
Under Brazil’s LGPD, you may request:
• confirmation that your data is being processed and access to it;
• correction of incomplete, inaccurate, or outdated information;
• anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data;
• data portability, as allowed by applicable regulations;
• information about data sharing and the possibility of refusing consent;
• withdrawal of consent and deletion of data processed on that basis, subject to legal exceptions;
• objection to unlawful processing and review of exclusively automated decisions, where applicable.
Send your request to thiago@estudiohiru.com.br, specifying the right you wish to exercise. We may request proportionate information to verify your identity and protect your data. Requests are handled free of charge and within the applicable legal time limits. If we cannot fulfill a request, we will explain why.
You may also seek guidance or submit a request to Brazilian National Data Protection Authority (ANPD).
Children and teenagers
The site offers professional branding, naming, and visual identity services and is not intended to collect children’s data. If you believe information about a child or teenager was submitted without appropriate safeguards, contact us so we can review the situation and take appropriate steps.
Updates to this policy
This policy may be updated to reflect changes to the site, services, or legal requirements. The current version and its last-updated date will be available on this page. Significant changes to data processing will be communicated through appropriate channels.
Legal reference: Brazilian General Data Protection Law — Law No. 13,709/2018.