Privacy Policy

This page explains what personal data the Como Conseguir Cliente blog (blog.italomoia.com) collects, why it collects it, how long it keeps it, who it is shared with, and what you can do about it. It describes how the system actually behaves, not a generic template.

Who the controller is

The data controller is Ítalo Moiá, an individual, responsible for the blog and the newsletter. Contact for any privacy matter: suporte@italomoia.com.

What data is collected, and when

Subscription happens through the form on the blog. The only field you fill in is your email address. When the form is submitted, the system records, as evidence of consent:

the email address you typed;
the IP address the subscription came from;
the browser user agent (what your browser sends by itself);
the address of the page where the form was submitted, the page language and the position of the form on the page;
the date and time of consent.

Subscription is double opt-in: right after you submit, you get an email asking you to confirm. Until you click the confirmation link your address does not join the list and no newsletter issue is sent to you. The date and time of that confirmation are recorded as well.

The form has a hidden anti-spam trap field (a honeypot) and a per-IP submission limit, so bots cannot subscribe somebody else's address.

Emails that are sent

Individual tracking is turned off in the newsletter platform. Opens and clicks are not tied to a specific person: there is no record that you, individually, opened or clicked anything. What exists is aggregate campaign numbers, such as how many were sent and how many opens in total, with no way to tell who.

Comments

Comments run on Remark42, self-hosted. Login is anonymous: you pick a nickname, no email and no social account required. What is stored is the nickname, the comment text, the page it belongs to and the date. Comment text is public by nature, so do not write anything there you would not want published.

Browsing the blog

The blog uses no Google Analytics and no third-party analytics script. There is no social pixel and no advertising cookie. The only thing the blog itself stores in your browser is your light or dark theme choice, kept in localStorage, which never leaves your device. The comment system may set a session cookie of its own when you comment.

What each piece of data is used for

Email address: to send the newsletter issues and the subscription confirmation email. Nothing else.
IP, user agent, page, language, date and time of subscription: to prove, if questioned, that consent was given, when and from where.
IP at form submission: also to limit repeated attempts and block automated subscriptions.
Nickname and comment text: to publish the comment on the page.

Legal basis

Processing of newsletter data relies on the data subject's consent, under article 7, item I, of Brazilian Law 13.709/2018 (LGPD). Consent is given when you submit the form and confirmed when you click the link in the confirmation email.

IP, user agent, date and time are recorded because the law puts the burden of proving consent on the controller (LGPD, article 8, §2). Using the IP to stop bots and form abuse relies on legitimate interest (LGPD, article 7, item IX), limited to the security of the form itself.

Comments are published at the request of whoever writes them, which is also consent (article 7, item I).

Data is never sold, rented or handed over to anyone. There is a single processor involved:

Resend (smtp.resend.com), the service that performs the technical delivery of the emails. To deliver a message, Resend receives the recipient's email address and the content of the email. Its infrastructure sits outside Brazil, so there is an international transfer of data, grounded on the data subject's specific consent (LGPD, article 33, item VIII).

The newsletter platform (Listmonk) and the comment system (Remark42) are self-hosted, under the controller's own control. The subscriber base does not pass through any third-party marketing platform.

Data may also be provided to a public authority when a legal order requires it.

How long data is kept

While the subscription is active: the email address and the consent record stay in the newsletter database.
After unsubscribing: the subscription is marked as cancelled and the record is kept precisely so that you stop receiving emails and so the request can be shown to have been honoured. Nothing is sent from that point on.
If you ask for full deletion: the preferences page has a wipe option that removes the profile, the subscriptions and the associated history, with no way back.
Comments: stay published as long as the post exists, or until you ask for removal.

Your rights and how to exercise them

The LGPD (article 18) guarantees you, at any time and free of charge: confirmation that processing exists, access to the data, correction of incomplete or outdated data, anonymisation, blocking or deletion of unnecessary or unlawfully processed data, portability, information about who the data was shared with, information about the option not to consent, and withdrawal of consent.

Most of that you can do yourself, without asking anyone. Every newsletter email carries a link to your preferences page in the footer. There you can:

export your data, downloading what is stored about you (profile, subscriptions, campaign views and clicks);
wipe everything, deleting the profile entirely;
block yourself, which stops any future sending;
manage preferences and change which lists you are subscribed to.

If you would rather talk to a person, or the request does not fit those options, write to suporte@italomoia.com. You get an answer within 15 days.

How to leave the newsletter

There are three ways, all of them valid:

the unsubscribe link in the footer of any email that is sent;
the unsubscribe button your email provider shows at the top of the message, which works because every send carries the List-Unsubscribe header in one-click mode;
an email to suporte@italomoia.com.

Unsubscribing is immediate and requires no justification, no login and no answering any question.

Children and teenagers

The content is aimed at adults running a business. There is no intentional collection of data from people under 18. If you know of a subscription in that situation, write to suporte@italomoia.com and it gets deleted.

Changes to this policy

If anything changes in how the system works, this page is updated and the last updated date at the top changes with it. A change that broadens the use of your data is announced by email before it takes effect.

Contact

Ítalo Moiá, controller. suporte@italomoia.com.