Privacy Policy

Who is responsible for your data

The controller of your personal data ("we", "us") is Tzanolo. For the LGPD, the controller also acts as the person in charge of data processing (encarregado). You can reach us at any time through our contact page or by email at contact@after1971.com.

What we collect

When you visit the site

Our server and our content delivery provider automatically record technical information in access logs: your IP address, browser and device type, the page requested, the referring page and the date and time. We use this only to deliver the site, keep it secure and fix errors.

When you contact us

If you write to us, we receive what you choose to send, such as your name, email address and message. We use it only to reply to you.

Advertising and cookies

We show ads through Google AdSense. Google and its partners may use cookies, device identifiers and your IP address to show ads, limit how often you see them, measure their performance and prevent fraud. Depending on your location and choices, ads may be personalized based on your activity on this and other websites, or non-personalized.

Statistics

We use privacy-friendly statistics (Cloudflare Web Analytics) that count visits without cookies and without tracking you across websites.

We do not knowingly collect sensitive data (such as health, religion, ethnicity or political opinions).

Why we use it and our legal bases

• To deliver and protect the site (access logs): our legitimate interest in running a secure website (GDPR and UK GDPR Art. 6(1)(f); LGPD Art. 7, IX).
• To answer your messages: your request and our legitimate interest in replying (GDPR and UK GDPR Art. 6(1)(b) and (f); LGPD Art. 7, V and IX).
• Advertising cookies and personalized ads: your consent where the law requires it, including in the European Economic Area, the United Kingdom and Switzerland (GDPR and UK GDPR Art. 6(1)(a); ePrivacy rules; LGPD Art. 7, I). You can withdraw consent at any time.
• To meet legal obligations, such as answering requests from authorities (GDPR and UK GDPR Art. 6(1)(c); LGPD Art. 7, II).

Cookies and your choices

Visitors from the European Economic Area, the United Kingdom and Switzerland see a consent message before any advertising cookies are used. It is provided by a Google-certified consent management platform that follows the IAB Transparency and Consent Framework. You can accept, reject or customize your choices, and change them later using the privacy settings link at the bottom of the page.

Visitors in US states with privacy laws can opt out of the sale or sharing of personal information and of targeted advertising using the same link. We also treat a Global Privacy Control (GPC) signal sent by your browser as a valid opt-out request.

You can also manage Google ads at Google My Ad Center, learn how Google uses data at How Google uses information from sites that use its services, and block or delete cookies in your browser settings.

Who we share data with

We do not sell your personal information for money. We share data only with service providers that help us run the site:

• Our hosting provider, which stores the site and its server logs.
• Cloudflare, which delivers the site quickly and protects it from attacks.
• Google, for advertising (AdSense) and the consent message.
• Our email provider (Amazon Web Services), which delivers messages sent through the contact form.

Under California law, letting advertising partners use cookies to show you personalized ads may count as "sharing" or a "sale" of personal information, even though no money changes hands. You can opt out at any time as described above.

We may also disclose information if required by law or to protect our rights, our users or the public.

International transfers

Our providers may process data in countries other than yours, including the United States. When personal data from the European Economic Area, the United Kingdom or Brazil is transferred, we rely on adequacy decisions, the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or the safeguards allowed by Article 33 of the LGPD, as offered by our providers.

How long we keep data

• Server access logs: up to 90 days, unless needed longer to investigate a security incident.
• Contact messages: up to 24 months after our last exchange, then deleted.
• Advertising cookies: as set by Google and its partners; you can delete them in your browser at any time.

Your rights

Wherever you live, you can ask us what personal data we have about you, and ask us to correct or delete it. Depending on your location, you also have the rights below.

Brazil (LGPD)

• Confirmation that we process your data, and access to it.
• Correction of incomplete, inaccurate or outdated data.
• Anonymization, blocking or deletion of unnecessary or excessive data, or data processed unlawfully.
• Portability of your data to another provider.
• Deletion of data processed with your consent, and information about the possibility of refusing consent and its consequences.
• Information about the entities we share data with.
• Withdrawal of consent at any time.
• To file a complaint with the National Data Protection Authority (ANPD).

European Economic Area and United Kingdom (GDPR and UK GDPR)

• Access, rectification and erasure of your data.
• Restriction of processing and data portability.
• To object to processing based on our legitimate interests.
• To withdraw consent at any time, without affecting earlier processing.
• To complain to your local data protection authority, or in the UK to the Information Commissioner's Office (ICO).

United States (California and other states with privacy laws)

• To know which categories of personal information we collect, the sources, the purposes and the categories of recipients. In the last 12 months we collected: identifiers (such as IP address), internet activity (such as pages viewed and interactions with ads) and, through our advertising partners, inferences used for advertising.
• To access, correct and delete your personal information.
• To opt out of the sale or sharing of personal information and of targeted advertising.
• To not be discriminated against for using any of these rights.
• To use an authorized agent to make a request on your behalf, and, in some states, to appeal our decision.

How to make a request

Send your request through our contact page or by email at contact@after1971.com. We may need to confirm your identity before acting on it. We will answer within the time required by law: 15 days under the LGPD, one month under the GDPR and UK GDPR, and 45 days under US state laws, which may be extended where the law allows.

Children

This site is not directed at children. We do not knowingly collect personal information from children under 13 (as defined by the US Children's Online Privacy Protection Act) or under 16 in the European Economic Area and the United Kingdom, and in Brazil we follow the LGPD's protections for children and teenagers. If you believe a child has sent us personal information, please contact us and we will delete it.

Security

The site is served only over encrypted connections (HTTPS), and we limit access to logs and messages to what is needed to run the site. No method of transmission or storage is completely secure, but we work to protect your information.

Changes to this policy

We may update this policy when the site or the law changes. The date at the top shows the latest version. If a change is significant, we will highlight it on the site.

Contact

For any question about this policy or your personal data, please use our contact page or write to contact@after1971.com.