1. Who we are
This Privacy Policy is issued by Malharia Adriana Ltda, a Brazilian limited liability company registered under CNPJ 53.989.982/0001-52, headquartered at R. Desembargador Carlos Pinheiro Guimarães, 870, Sítio Cercado, Curitiba/PR, CEP 81.920-480. In this document, expressions such as "we", "our" or "the atelier" refer to Malharia Adriana Ltda as the controller of the personal data described below.
2. Scope of this Policy
This Policy applies to personal data we collect through this website, through direct written or spoken communication with clients and prospective clients, and during in-person appointments at our atelier. It does not extend to third-party websites that may be linked from our pages.
3. What we collect
We only collect information that is necessary to answer inquiries, schedule fittings, complete a purchase, or comply with a legal obligation. The categories of personal data we may handle include:
- Contact details — name, e-mail address, phone number, and any information you voluntarily share in a message to us.
- Appointment and service data — measurements, garment preferences, dates of visits, and notes taken during fittings.
- Transactional data — invoicing information such as full name, CPF or CNPJ, and billing address, when a purchase is made.
- Technical data — non-identifying information collected by our hosting provider for security and performance purposes.
4. Why we use this information
We use personal data strictly for the following purposes:
- Responding to inquiries received through the contact form, e-mail, or phone.
- Scheduling and preparing fittings and follow-up appointments.
- Executing service contracts, including production, alterations, and delivery of ordered items.
- Issuing invoices and fulfilling tax obligations required by Brazilian law.
- Improving the atelier experience based on client feedback.
5. Legal basis (LGPD)
The processing of personal data by Malharia Adriana Ltda is grounded in the legal bases foreseen by the Brazilian General Data Protection Law (Law No. 13.709/2018 — "LGPD"), namely: performance of a contract or of preliminary procedures related to a contract; compliance with a legal or regulatory obligation; the legitimate interest of the controller in operating the atelier; and, where applicable, the free and informed consent of the data subject.
6. Sharing of personal data
We do not sell personal data, and we do not share it with unrelated third parties for advertising or commercial purposes. Personal data may be shared only with:
- Providers strictly necessary to our operation, such as our accountant, our hosting provider, and payment processors, each of them bound by confidentiality obligations.
- Public authorities, when disclosure is required by law, judicial decision, or regulatory order.
7. Data retention
Personal data is retained only for as long as needed to fulfil the purpose for which it was collected, plus any additional period required by law — for instance, five years for tax records under Brazilian legislation. After that, records are deleted or anonymised.
8. Security
We adopt reasonable technical and administrative measures to protect personal data against unauthorised access, loss, alteration, or disclosure. Access to client information inside the atelier is restricted to the members of our team who need it to perform their work.
9. Your rights as a data subject
Under the LGPD, you have the right to confirm whether we process your personal data; access that data; correct incomplete, inaccurate or outdated data; request anonymisation, blocking, or deletion of unnecessary or excessive data; request portability; and revoke consent, where consent is the legal basis. To exercise any of these rights, please contact us at the address in section 11.
10. Cookies and site analytics
This website may use strictly necessary cookies to keep the site functional and, where applicable, aggregated analytics cookies that do not identify individual visitors. You can configure your browser to block or delete cookies at any time; some site features may not work as expected in that case.
11. How to contact us
Requests, questions, and concerns about this Policy or about our handling of personal data can be sent to:
- E-mail: reyson@reyson.com.br
- Phone: (41) 3349-3162
- Postal address: R. Desembargador Carlos Pinheiro Guimarães, 870, Sítio Cercado, Curitiba/PR, CEP 81.920-480
12. Updates
This Policy may be updated from time to time to reflect changes in our practices or in applicable law. When a material change occurs, we will indicate the new revision date at the top of this page. We encourage you to review it periodically.