01 Who we are
Genial Up is a one-person web studio. We build websites, landing pages and brand material for small and mid-sized businesses, mostly home service companies across the United States and businesses in Brazil. We operate out of Curitiba, Brazil, and you reach us through genialup.com.
For the data described on this page we are the controller, in the sense of Brazil's General Data Protection Law (Lei 13.709/2018, the LGPD), which is the law we operate under. For anything about privacy, the channel is in How to reach us.
02 What we collect
We only collect what we need to answer you and to understand which ads bring people here. We never ask for a government ID, a home address or payment details in any form on this site.
What you give us
When you fill out a form on our site, or a lead form inside Facebook or Instagram, we receive the fields you fill in yourself:
- Your name, so we know how to address you.
- Your phone number, which is how we get back to you.
- Your email, when you give it. It is optional on most of our forms.
- About your business: your trade, your company name or handle, the kind of site you want, and whatever you write in the message.
What is collected automatically
- Where the visit came from: the campaign parameters in the URL, known as UTMs, which tell us which ad or link you arrived through.
- Technical access data: IP address, browser type, language and pages visited, logged automatically by our hosting provider.
- Cookies and identifiers, used by the Meta Pixel, as described in Cookies and the Meta Pixel.
What we do not collect
We do not handle sensitive data such as racial origin, religious belief, political opinion, health data or biometrics. We do not knowingly collect data from children. This service is meant for people over 18.
03 What we use it for
Three purposes, and none of them involves selling a list:
- To answer you. To contact you on the phone number, WhatsApp or email you gave us, understand what you need, send a quote and, if we work together, deliver and follow up on the project.
- To keep the work organized. To log your request in our internal pipeline so nothing is lost and we can track where the proposal stands.
- To measure the ads. To see which campaigns and which pages produce quote requests, so the ad budget goes to the right place and the site gets better.
If we ever want to use your data for something outside this, we will ask you first.
04 Our legal basis
The LGPD requires a legal basis for every use of personal data. Ours are:
- Steps prior to a contract (art. 7, V). When you ask for a quote you are starting a negotiation, and we need your contact details to respond to it.
- Legitimate interest (art. 7, IX). To measure the results of our ads, to prevent fake or automated submissions, and to keep a record of the conversation.
- Consent (art. 7, I). For advertising cookies, which you can refuse as described in Cookies and the Meta Pixel.
- Legal obligation (art. 7, II). To keep tax and contract records once a service is actually hired.
05 Lead forms on Facebook and Instagram
Some of our quote requests arrive through a lead form inside Facebook or Instagram, without leaving the app. When that happens:
- You fill out the form inside Meta's app, and Meta passes us the fields you filled in, usually name, phone and email.
- We receive that and use it for exactly the purposes in What we use it for: to contact you and send your quote.
- What Meta itself does with your data inside its platforms is governed by Meta's own privacy policy, at facebook.com/privacy/policy.
By submitting one of our forms you agree to be contacted by phone call, text message, WhatsApp or email about the quote you asked for. Message frequency varies, and message and data rates may apply. This is about your request, it is not bulk marketing, and you can stop it at any time by replying STOP or simply saying so in the conversation. Once you ask, we stop.
07 Data across borders
We are based in Brazil and many of the people who contact us are in the United States. The services above keep servers in several countries, mainly the United States. That means your data may be stored and processed outside your country, which the LGPD allows under articles 33 and following. We choose providers that offer contractual data protection terms in line with Brazilian and European standards.
08 Cookies and the Meta Pixel
Our site uses the Meta Pixel, a Meta tool that records, through cookies, that someone opened a page or submitted a form. We use it to know which ads work and to avoid showing ads to people who already talked to us. The pixel does not read what you type into our fields.
You can refuse or remove these cookies at any time:
- In your browser settings, by blocking or clearing cookies for this site.
- In Meta's ad preferences, at facebook.com/adpreferences.
- By turning on Do Not Track or using a private window.
Refusing them does not stop you browsing the site or asking for a quote. Cookies strictly necessary for the page to work stay on.
09 How long we keep it
- A quote request that did not become a project: kept for up to 24 months from the last contact, in case you come back, then deleted.
- A client we worked with: kept during the engagement and for up to 5 years afterwards, a period tied to tax obligations and to defending our rights.
- Technical access logs: for as long as our providers hold them, as a rule up to 12 months.
If you ask us to delete earlier, we do, except where the law requires us to keep the record.
10 Your rights
At any time, free of charge, you can ask us to:
- Confirm and show whether we hold data about you, and what it is.
- Correct anything incomplete, outdated or wrong.
- Delete your data.
- Port it to you in a readable format.
- Withdraw consent you gave earlier, without affecting what was already done.
- Object to a use you consider improper.
- Know who we shared your data with.
To exercise any of these, use the channels in How to reach us. We answer within 15 days. We may ask you to confirm your identity first, so we never hand one person's data to somebody else.
If you are in Brazil you can also complain to the national data protection authority, the ANPD, at gov.br/anpd. If you are in a US state with its own privacy law, the rights above are the ones we extend to you as well, through the same channel.
11 Security
Every page is served over an encrypted connection, the panel where requests are logged is behind a password, and our infrastructure providers are established names. No system is immune, so if an incident happens that could put you at real risk, we will tell you and notify the authority, as article 48 of the LGPD requires.
12 Changes to this policy
We may update this text when a tool or a process changes. The update date is always at the top of the page. If a change matters to you, we will say so through the contact details you gave us.
13 How to reach us
Question about privacy, a request to see your data, or a request to delete it? Talk to me directly, no form and no bot: