Privacy Policy

1. Who the controller is

MGX Produções is the controller of the data handled on this site, meaning we decide why and how it is used.

Address: Alameda Xingu, 350, 17th floor, Alphaville Industrial, Barueri/SP, 06455-911, Brazil. Privacy contact: mgoesxproducoes@gmail.com.

2. What data we collect

We only collect what you hand over or what the site needs to work:

• Contact form and WhatsApp: name, email, phone and the project description you write. Sending it opens a WhatsApp conversation carrying that data in the message.
• Shop and payment: cart items stay in your own browser. At checkout you are taken to Mercado Pago, which collects and processes the payment data directly. MGX never receives or stores your card number.
• Cookies and local storage: a record of your cookie choice and, if you allow it, audience and campaign data.
• Technical server data: IP address and access time sit in temporary logs used for security and to rate limit checkout attempts.

3. What we use it for, and the legal basis

Each use has a legal basis under article 7 of the LGPD:

• Replying to you and preparing a quote: pre contractual steps taken at your request (art. 7, V).
• Delivering a contracted project and processing a shop purchase: performance of a contract (art. 7, V).
• Analytics and marketing cookies: consent, which you give in the banner and can withdraw whenever you want (art. 7, I).
• Site security, fraud prevention and rate limiting: legitimate interest (art. 7, IX).
• Keeping tax records for a sale: compliance with a legal obligation (art. 7, II).

4. Who we share it with

We do not sell your data. We share it only with the parties the service cannot exist without:

• Mercado Pago: processes shop payments and handles financial data as its own controller.
• WhatsApp (Meta): our support channel; the conversation happens on their platform.
• Vercel: hosts the site and keeps technical access logs.
• Analytics and advertising tools: they receive data only if you accept the matching category in the cookie banner.

5. How long we keep it

• Contact and quote messages: up to 2 years after the last contact, so we can pick up the conversation and keep commercial history.
• Contracted project data and tax documents: 5 years, the statutory retention period.
• Record of your cookie consent: 6 months, after which the banner asks again.
• Technical access logs: 6 months, in line with Brazil's Internet Civil Framework.

6. Cookies and local storage

Necessary cookies keep the cart working and remember your privacy choice. They cannot be switched off because the site does not work without them.

Analytics and marketing cookies are blocked until you accept. While there is no consent, no third party script is loaded at all. You can change your mind any time under Cookie preferences in the footer, and consent expires on its own after 6 months.

If your browser sends the Do Not Track signal, we treat it as a refusal of the non essential categories.

7. Your rights (article 18 of the LGPD)

At any time you can ask for:

• Confirmation that we process your data, and access to it.
• Correction of incomplete, inaccurate or outdated data.
• Anonymisation, blocking or deletion of unnecessary data or data handled outside the law.
• Portability of your data to another provider.
• Deletion of data processed on the basis of your consent.
• Information about who we share your data with.
• Information about your option to refuse consent and what happens if you do.
• Withdrawal of consent, at any time.

Write to mgoesxproducoes@gmail.com. We reply within 15 days. We may ask you to confirm your identity before releasing data, so we never hand your information to someone else.

8. Security

The site runs over an encrypted connection (HTTPS), access to the content panel is restricted and authenticated, and the price of any purchase is always revalidated on the server. No system is perfect: if an incident happens that poses a real risk to you, we notify you and Brazil's data protection authority (ANPD).

9. Children and teenagers

This site is aimed at businesses and adults. We do not knowingly collect data from anyone under 18. If we spot such a record, we delete it.

10. Changes to this policy

If the policy changes in a meaningful way, we update the date at the top and ask for your cookie consent again. The version published on this page is always the one that applies.