Last updated:
In short: Booknando does not use cookies, analytics or advertising tools, and only collects personal data when you send it through the contact form or by email. That data is used to reply to you and to prepare proposals. You can ask for access, correction or deletion at any time by writing to contato@booknando.com.br.
1. Who is responsible for your data
The controller of the personal data processed on this site is Booknando Livros LTDA, Brazilian tax ID (CNPJ) 20.167.703/0001-16, registered at Av. Brasil, 4785, sala 203, Maringá, PR, 87014-070, Brazil, referred to here as Booknando. This policy follows Brazil's General Data Protection Law, Law 13,709/2018 (LGPD), and the Brazilian Civil Rights Framework for the Internet, Law 12,965/2014.
2. What data we collect
We collect only what the site needs to work and what we need to answer the people who contact us.
- Data you send through the contact form: full name, email, company or publisher (optional), service of interest (optional) and the content of your message. The same data may reach us by email when you write directly to contato@booknando.com.br.
- Access logs: like any website, our hosting server automatically records the IP address, date and time of access, pages visited and browser type. These logs are required by Article 15 of the Brazilian Civil Rights Framework for the Internet and are used only for security and technical diagnosis.
- Language preference: the site stores the language you chose in your browser's local storage (localStorage), under the key
booknando_lang_pref. That information stays on your device, is never sent to us or to third parties, and can be removed by clearing your browser data.
What we do not do: we do not use cookies, analytics tools, tracking pixels, behavioral advertising or social media buttons that track browsing. We do not collect sensitive personal data or data from children and adolescents. Web fonts are served from our own server, with no calls to third parties.
3. Why we use the data and on what legal basis
- To reply to your message and prepare a commercial proposal. Legal basis: steps prior to a contract, at your request (LGPD, Article 7, V), and our legitimate interest in answering the people who contact us (Article 7, IX).
- To keep the site's access logs. Legal basis: compliance with a legal obligation (Article 7, II).
- To protect the site and the form against spam, fraud and attacks. Legal basis: legitimate interest (Article 7, IX).
- To send marketing communications. We only do this with your consent (Article 7, I), which you can withdraw at any time through the same channel.
We do not sell personal data and we do not make automated decisions based on it.
4. Who we share data with
We share data only with the suppliers we need to run the site. They act as processors and receive only what they need:
- Web3Forms, which receives the content of the form and forwards it to our email.
- HostGator, which hosts the site and keeps the access logs.
Some of these suppliers may process data outside Brazil. In those cases the international transfer follows Article 33 of the LGPD. We may also share data when the law requires it or by order of a competent authority. Once you become a client, project data and files are governed by the contract and the non-disclosure agreement signed by both parties.
5. How long we keep data
- Contact messages: for as long as it takes to reply and, if a negotiation follows, for the duration of the business relationship and the legal retention periods for documents.
- Access logs: six months, as required by the Brazilian Civil Rights Framework for the Internet, unless a court orders otherwise.
- Language preference: until you clear your browser data.
After those periods the data is deleted or anonymized.
6. Your rights
Article 18 of the LGPD guarantees you, at any time and free of charge:
- confirmation that we process your data, and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of data that is unnecessary, excessive or processed unlawfully;
- portability of your data to another service provider;
- information about who we share your data with;
- information about the option of not giving consent and the consequences of refusing;
- withdrawal of consent and objection to processing, in the cases provided by law.
To exercise any of these rights, email contato@booknando.com.br with the subject "Personal data". We reply within 15 days. If you are not satisfied with our answer, you can file a complaint with Brazil's National Data Protection Authority (ANPD).
7. Data protection officer
The person in charge of personal data processing, as required by Article 41 of the LGPD, is Fernando Tavares. Contact: contato@booknando.com.br.
8. Security
The site is served exclusively over HTTPS, with security headers configured on the server. Data received through the form is accessible only to the people at Booknando responsible for answering it. Project files and content are handled under the non-disclosure agreements signed with each client and deleted when the work is finished.
9. Children and adolescents
This site is aimed at publishers, authors and publishing professionals. We do not knowingly collect data from anyone under 18. If we learn that this has happened, we will delete the data.
10. Links to other sites
This site links to third-party sites such as social networks, bookstores and standards bodies. This policy does not apply to them. Please check the privacy policy of each one.
11. Visitors outside Brazil
If you access the site from another country, we handle your data with the same safeguards described here. Residents of the European Union and the European Economic Area can exercise the rights provided by the General Data Protection Regulation (GDPR) through the same contact channel.
12. Changes to this policy
We may update this policy to reflect changes to the site or to the law. The version in force is always the one published on this page, with the update date at the top.