Privacy Policy

The controller of your personal data is Priscila Medina Gubert - ME, CNPJ 07.331.609/0001-92, with registered business address at Avenida Orleães, 104 — Guarujá — Porto Alegre, RS — 91770-620 — Brazil. Privacy requests are handled by email.

Privacy, cancellation and refund contact: contact@tecendosom.com

• Identity and contact data: full name, email address, phone number including international dialling code, and date of birth.
• Location data you supply: country, state and city, and any address details you choose to provide in the enrolment form. We do not require a full street address to deliver the course.
• Enrolment profile: profession or occupation, musical and vocal background, previous course experience, learning preferences, goals and motivation for joining, and your time zone (detected from your browser or selected by you) so we can show and send class times in your local time.
• Payment transaction metadata: purchased package, amount, currency, payment status, payment or checkout session references and the payment provider used. Card numbers, CVV and full banking credentials are entered directly with the payment provider and are never collected, seen or stored by us.
• Account and access records: membership/member-area credentials issued to you, access status, class attendance where applicable, and the access period you purchased.
• Support and communications: emails, messages and any content you send us, including recovery or assistance requests.
• Device and log data: IP address, browser and device type, pages viewed, timestamps and technical error logs, generated when you use the site or when our systems record a request.
• Cookies and local/session storage: strictly necessary storage for the session, security and the enrolment/checkout flow, plus optional analytics and marketing technologies.
• Attribution data: UTM parameters, referrer, gclid and fbclid. These are only stored and transmitted when you have given the corresponding analytics/marketing consent.

• To perform our contract with you (LGPD Art. 7, V; GDPR Art. 6(1)(b)): processing your enrolment, delivering the course and live sessions, issuing member-area access, sending service messages such as confirmations, class times, schedule changes and access details, and handling refunds.
• To comply with legal obligations (LGPD Art. 7, II; GDPR Art. 6(1)(c)): tax, accounting and consumer-protection record keeping, and responding to lawful requests.
• Legitimate interests (LGPD Art. 7, IX; GDPR Art. 6(1)(f)): keeping the site secure and preventing fraud and abuse, maintaining and debugging our systems, understanding aggregate demand, and contacting people who started an enrolment to help them complete it. We balance these interests against your rights and freedoms and you may object at any time by writing to contact@tecendosom.com.
• Consent (LGPD Art. 7, I; GDPR Art. 6(1)(a)): optional analytics and marketing technologies, campaign attribution data, and optional marketing or WhatsApp communications. Consent is always optional, is never bundled with the purchase, and can be withdrawn at any time as easily as it was given.

Where you request that access or performance begins during the withdrawal period, we record that acknowledgement (with its timestamp and document version) because it is necessary to perform the contract and to evidence compliance with consumer law.

We share personal data only with providers that support the operation of this website and the course, under contractual confidentiality and security obligations, and only to the extent needed:

• Lovable / Lovable Cloud and Supabase — website hosting, application infrastructure, database and secure storage of enrolment records.
• Stripe — payment processing, fraud prevention and payment records.
• PayPal — payment processing, only if and while that payment option is enabled and chosen by you.
• Wise — receipt of international bank transfers when you choose that payment method.
• Zoom — delivery of live online sessions.
• Taskade — student onboarding, member area and automated course communications.
• Make — automation between the systems above, where used.
• Hostinger and related email infrastructure — sending and receiving email.
• Google Analytics — audience measurement, loaded only after you give analytics consent.

We do not sell your personal data and we do not share it with third parties for their own independent marketing.

The course is international and several providers listed above operate outside Brazil, including in the United States and the European Union. When personal data is transferred internationally, we rely on appropriate safeguards permitted by applicable law, such as standard contractual clauses, adequacy decisions, or the transfer being necessary to perform a contract with you or at your request.

We do not apply arbitrary fixed periods. We keep personal data for as long as it is needed for the purpose it was collected for, and afterwards only where a legal or defensive reason applies. In practice we use the following criteria:

• enrolment and access data: while your access period is active and while you may need support or proof of purchase;
• payment and tax records: for the periods required by tax, accounting and consumer law;
• records of consent and legal acknowledgements: while they may be needed as evidence of compliance;
• marketing contacts: until you withdraw consent or object;
• security and technical logs: for a short operational period, unless an incident requires longer.

We use encrypted connections (HTTPS), access controls, database row-level security, secret management for credentials, and providers with recognised security practices. We never receive full card data. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security, but we take reasonable and appropriate technical and organisational measures and will notify you and the competent authority of incidents where the law requires it.

Under the Brazilian LGPD, and under the GDPR / UK GDPR where they apply to you, you can request: confirmation that we process your data; access to it; correction of incomplete or outdated data; anonymisation, blocking or deletion of unnecessary or excessive data; portability; information about the entities we share data with; information about the consequences of refusing consent; withdrawal of consent; restriction of processing; objection to processing based on legitimate interests or to direct marketing; and review of decisions based solely on automated processing where applicable.

Write to contact@tecendosom.com. We reply within the deadlines set by applicable law and may ask for information to confirm your identity. You also have the right to complain to the Brazilian data protection authority (ANPD) or, where applicable, to your local supervisory authority in the EU or the UK.

Strictly necessary storage keeps you logged in, secures the session and allows enrolment and checkout to work. It cannot be switched off without breaking the service.

Optional analytics and marketing technologies, including Google Analytics and campaign attribution parameters (UTM, referrer, gclid, fbclid), stay disabled until you actively allow them. Rejecting them does not limit your access to the course in any way.

Change your cookie and privacy preferences

This course is intended for adults. People under the age of majority in their country may only enrol and participate with the express authorisation and supervision of a parent or legal guardian, who is responsible for the enrolment and for the data provided. If we learn that we have collected data from a minor without proper authorisation, we will delete it.

We may update this policy to reflect changes in the service, our providers or the law. The effective date at the top of the page always shows the current version, and material changes will be communicated by email or through the website.

Related documents: Terms of Service and Refund Policy.