Privacy policy

This policy explains what personal data www.skillfunnelbootcamp.com collects, why, who else sees it, and what you can do about it. It is written to meet the Brazilian General Data Protection Law (LGPD, Lei 13.709/2018), the EU and UK GDPR, and the California Consumer Privacy Act.

1. Who is the controller

Isabela Oliveira Pinho (sole trader (individual)), trading as Skillfunnel Bootcamp
Avenida José Nogueira Neves, 92, FD
Vila Melhado
14807-034 Araraquara - SP
Brazil
CPF: 437.943.048-02
Phone: +55 16 3322-1680
Email: support@skillfunnelbootcamp.com

We decide why and how your data is processed. There is no separately appointed data protection officer; data requests go to the email address above.

2. What we collect

When you register for the free training

Your name, your email address and, if you choose to give it, your phone number.

When you buy the course

Your name, email address, billing address, country and the payment confirmation Stripe returns to us. We never receive your full card number. Card data goes directly from your browser to Stripe.

When you contact us

Whatever you put in your message, plus your email address or phone number.

When you browse

IP address, browser and device type, pages viewed, referring page and timestamps, kept in server logs. Analytics data is only collected if you accept analytics cookies. See the cookie policy.

3. Why we process it, and on what basis

• To deliver the course you paid for — performance of a contract (LGPD art. 7, V; GDPR art. 6(1)(b)).
• To answer your messages — contract or legitimate interest (LGPD art. 7, IX; GDPR art. 6(1)(f)).
• To send marketing emails and to run analytics — your consent (LGPD art. 7, I; GDPR art. 6(1)(a)). You may withdraw it at any time.
• To keep the site secure and prevent fraud — legitimate interest.
• To keep accounting and tax records — legal obligation (LGPD art. 7, II; GDPR art. 6(1)(c)).

We do not use your data for automated decision-making or profiling that produces legal effects for you. We do not knowingly process sensitive personal data.

4. Who else processes it

• Stripe — payment processing and fraud prevention. Privacy policy.
• Resend — sending transactional and course emails. Privacy policy.
• Vercel — hosting the site and its server logs. Privacy policy.
• Google Fonts — serving the typeface. The request exposes your IP address to Google. No cookie is set.

Each of these acts on our instructions under a data processing agreement. We do not sell your personal data and we never share it for anyone else's advertising. We may disclose data if a court or a competent authority requires it.

5. International transfers

Our providers may process data in the United States and the European Union. Where data leaves Brazil, the EEA or the UK, the transfer relies on the European Commission standard contractual clauses, the UK addendum, or an adequacy decision, as applicable, together with the safeguards required by LGPD art. 33.

6. How long we keep it

• Purchase, invoice and tax records: as long as tax and commercial law require, normally up to 5 years in Brazil, longer where another law applies.
• Course access records: while your access exists, plus 12 months.
• Marketing list: until you unsubscribe, then a suppression record so we do not email you again.
• Support emails: 24 months.
• Server and analytics logs: up to 24 months.

7. Your rights

Depending on where you live, you can ask us to confirm what we hold, give you a copy, correct it, delete it, anonymise it, restrict or object to its use, port it to another provider, tell you who we shared it with, and withdraw your consent. Withdrawing consent does not undo processing that already happened.

Write to support@skillfunnelbootcamp.com with "Data request" in the subject. We answer within 15 days under the LGPD and within 30 days under the GDPR. We may ask you to confirm your identity first.

You can complain to the Brazilian ANPD (gov.br/anpd), to your national supervisory authority in the EEA, or to the ICO in the UK.

California residents: you have the right to know, delete, correct and opt out of the sale or sharing of personal information, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA.

8. Email

Every marketing email carries a one-click unsubscribe link. Transactional emails, such as your receipt and your access link, are part of the service you bought and are not marketing, so they cannot be unsubscribed from while you hold access.

9. Security

The site runs over HTTPS. Payments are handled entirely by Stripe, which is PCI DSS Level 1 certified. Access to our systems is limited to the people who need it. No system is perfectly secure; if a breach affects your rights we notify you and the competent authority as the law requires.

10. Children

This site is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has given us data, write to us and we delete it.

11. Changes

We update this policy when what we do changes. The date at the top always reflects the current version. Material changes are announced by email to buyers.