Policies
Privacy Policy
Last updated:
1. Who is responsible
GV Digital (“GV”, “we”, “us” or “our”) is a brand operated by GIOVANNA MOREIRA DIGITAL LTDA, a company registered in Brazil under CNPJ 68.153.647/0001-97, with its registered address at Rua Baturite, 1801, Sala 04, Mangueiral, Horizonte - CE, 62880-602, Brazil. GIOVANNA MOREIRA DIGITAL LTDA is the controller (“controlador” under Brazilian law, “responsable” under Mexican, Colombian and Argentine law) of the personal data described in this policy. Every reference to GV in this policy means that company.
Contact for any privacy matter: admin@giovannamoreiradigital.com.
2. What this policy covers
This policy covers personal data processed:
- when you visit this website, giovannamoreiradigital.com;
- when you write to us by email;
- when you view an offer, talk to us or buy a product through GV's own offer pages and sales funnels, including messaging channels such as WhatsApp; and
- when we deliver products, provide support, process refunds and send marketing.
Payment processors and banks that handle your payment also process your data for their own purposes (for example, fraud prevention and their legal obligations) under their own privacy policies. The same applies to WhatsApp and other messaging apps you choose to use to talk to us.
3. Personal data we process
On this website
- Technical server logs. When any page is requested, our hosting provider (Vercel Inc.) automatically records technical data such as IP address, date and time, requested page, browser type (user agent) and referring page. This is needed to deliver the website and keep it secure.
- This website has no forms, no user accounts, no analytics and no advertising tools, and it does not set cookies (see the Cookie Policy).
When you write to us
- Your email address, name, the content of your message and any attachments you send.
When you buy a product or talk to us on an offer page
- Identification data: your name and, where the payment method, an invoice or the law requires it, an identity or tax number.
- Contact data: email address and, if you use a messaging channel or give it to us, your phone number and messaging profile name.
- Order data: product bought, price, currency, date, payment method, payment status and transaction reference.
- Delivery data: the email address or channel used for delivery and records showing that the access or download link was sent.
- Messages: the content of your conversations with us by email or messaging app.
- Payment data: card data and other payment credentials are collected and processed by the payment processors or banks indicated on the offer page. We do not receive or store full card details. We receive the confirmation of payment and the information needed to identify it. If you pay by bank transfer, we receive the transfer details or receipt needed to match your payment.
- Refund data: if a refund cannot be made to the original payment method, the bank account details needed to send it.
We do not ask for sensitive personal data (such as health data). Please do not send it to us.
4. Purposes and legal bases
The legal bases below are stated under the Brazilian General Data Protection Law (Law No. 13,709/2018, “LGPD”), which applies to GV as a company established in Brazil. The equivalent bases under the laws of the countries we serve are described after the table.
| Purpose | Data | Legal basis (LGPD) |
|---|---|---|
| Delivering and securing this website | Server logs | Legitimate interest (art. 7, IX) |
| Answering your emails and messages | Contact data, messages | Steps before or for a contract (art. 7, V), or legitimate interest (art. 7, IX) for general questions |
| Selling, processing payment and delivering the product | Identification, contact, order, payment confirmation, delivery data | Performance of a contract (art. 7, V) |
| Support, withdrawal and refund requests | Identification, contact, order, refund data, messages | Performance of a contract (art. 7, V) and compliance with legal obligations (art. 7, II) |
| Tax, accounting and other legal obligations | Identification, order and payment data | Compliance with legal obligations (art. 7, II) |
| Preventing fraud and defending legal claims | Order, payment and delivery data, messages | Exercise of rights in judicial, administrative or arbitration proceedings (art. 7, VI) and legitimate interest (art. 7, IX) |
| Direct marketing of GV’s own products | Name, email, phone or messaging contact | Consent (art. 7, I) where required, otherwise legitimate interest (art. 7, IX), always with a free opt-out (see section 5) |
Other countries
- Mexico (Federal Law on the Protection of Personal Data Held by Private Parties, 2025): data needed for the purchase and the relationship with you is processed without separate consent (art. 9, IV). Direct marketing is not necessary for the purchase and relies on your consent, which you can refuse or revoke at any time (arts. 7 and 11).
- Colombia (Law 1581 of 2012): processing relies on your prior, express and informed authorization, which is requested when your data is collected on the offer page, except in the cases where the law does not require it (art. 10).
- Argentina (Law 25,326): data arising from the contract with you is processed without separate consent (art. 5, 2, d). For marketing, you may at any time ask for your data to be withdrawn or blocked (art. 27, 3).
We do not make decisions about you based solely on automated processing.
5. Direct marketing
As part of our direct-marketing activity, we may send you information about GV’s own products by email or messaging app. We do this only as permitted by the law that applies to you, which in some cases requires your prior consent. We do not sell or rent contact lists.
You can stop marketing messages at any time, free of charge: use the unsubscribe or opt-out option in the message, reply asking us to stop, or write to admin@giovannamoreiradigital.com. We will stop marketing contact while keeping the messages needed for any purchase you have made.
6. Who we share data with
We do not sell personal data. We share it only with the following recipients, and only to the extent needed:
- Vercel Inc. (United States): website hosting and delivery, which includes generating server logs. It acts on our behalf.
- Google LLC (Google Workspace) (United States): email mailbox used for contact, support, refund and privacy requests. It acts on our behalf.
- WhatsApp (a Meta service): messaging channel used in some sales funnels and for customer conversations, when you choose to talk to us through it.
- Providers that host our offer pages and sales funnels and send delivery emails, acting on our behalf.
- The payment processors or banks indicated on the offer page, to process your payment and any refund.
- Professional advisers (such as accountants and lawyers), bound by confidentiality, when needed to meet legal obligations or defend claims.
- Public authorities and courts, when the law or a valid order requires it.
7. International transfers
GV is established in Brazil. If you live in another country, your personal data is transferred to Brazil to perform your purchase. Some of our service providers, including Vercel Inc. and Google LLC (Google Workspace), process data in the United States and other countries.
We make these transfers on the following grounds, as applicable:
- Brazil (LGPD, art. 33): the transfer is necessary to perform the contract with you (art. 33, IX, together with art. 7, V), or it relies on contractual safeguards offered by the provider (art. 33, II).
- Mexico (art. 36): the transfer is necessary to perform a contract entered into in your interest or to maintain the legal relationship with you. Providers acting on our behalf process data only on our instructions.
- Colombia (Law 1581, art. 26): the transfer is necessary to perform the contract between you and GV, or relies on your express authorization.
- Argentina (Law 25,326, art. 12): where the destination country is not recognized as providing adequate protection, the transfer relies on your consent, requested on the offer page, or on contractual safeguards.
8. How long we keep data
- Server logs: kept by our hosting provider for a limited period under its standard service and then deleted.
- Emails and messages: for as long as needed to handle your request, and afterwards for as long as needed to prove how it was handled while a legal claim is possible.
- Purchase, payment and refund records: for the periods required by tax, accounting and consumer law, and while a legal claim related to the purchase is possible.
- Marketing contact data: until you opt out or withdraw consent. After that, we keep only what is needed to respect your choice (for example, a record that you asked not to be contacted).
When data is no longer needed, we delete or anonymize it. Where the law requires a blocking period before deletion (as in Mexico), the data is blocked and not used during that period.
9. Your rights
Depending on the law that applies to you, you have the following rights. Exercising them is free of charge.
Brazil (LGPD, art. 18)
Confirmation that we process your data; access; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary or excessive data or data processed unlawfully; portability; deletion of data processed with your consent; information about the entities we share data with; information about the possibility of not giving consent and its consequences; withdrawal of consent; and opposition to processing that does not comply with the law. A complete access statement is provided within 15 days of your request (art. 19, II). You may also complain to the Agência Nacional de Proteção de Dados (ANPD).
Mexico (ARCO rights)
Access, rectification, cancellation and opposition, and revocation of consent. We tell you our decision within 20 days of receiving your request and, if it is granted, make it effective within the following 15 days (art. 31). The supervisory authority is the Secretaría Anticorrupción y Buen Gobierno.
Colombia (Law 1581 of 2012, art. 8)
To know, update and correct your data; to request proof of your authorization; to be informed of how your data is used; to revoke the authorization or request deletion; to access your data free of charge; and to complain to the Superintendencia de Industria y Comercio. Queries are answered within 10 business days and claims within 15 business days, extendable as provided by law (arts. 14 and 15).
Argentina (Law 25,326)
Access to your data, answered within 10 calendar days (art. 14), and rectification, updating or deletion, carried out within 5 business days (art. 16). The supervisory authority is the Agencia de Acceso a la Información Pública (AAIP).
Other countries
If you live in another country, you have the rights given by its data protection law, and we will handle your request under that law.
10. How to exercise your rights
Send your request to admin@giovannamoreiradigital.com with the subject “Privacy request”. Please include:
- your full name and the email address or phone number linked to your data;
- the right you want to exercise and, if possible, the data concerned;
- for corrections, the corrected data.
If we cannot confirm that the request comes from you, we may ask for additional information, limited to what is needed to verify your identity. Privacy requests are answered within the periods set by the law that applies to you, as listed in section 9. They are not subject to the longer timeline used for support and refund requests.
11. Data protection contact
Our data protection contact point receives requests and complaints from data subjects and communications from data protection authorities, and handles them. It can be reached at admin@giovannamoreiradigital.com. This is the channel for data subjects referred to in Brazilian law (LGPD, art. 41) and the person or department responsible for data protection requests referred to in Mexican law (art. 29).
12. Security
We use technical and organizational measures appropriate to the data we process, including encrypted connections (HTTPS) on this website, access to accounts limited to the people who need it, and providers that maintain their own security programs. No system is completely secure. If a security incident creates a relevant risk to you, we will notify you and the competent authorities as required by law.
13. Children
This website and our offers are not directed to children, and we do not knowingly collect children’s data. If you believe a child has given us personal data, write to admin@giovannamoreiradigital.com and we will delete it.
14. Cookies
This website does not use cookies or similar technologies. Details are in the Cookie Policy. If an offer page uses cookies or similar technologies, they are described in a notice on that page.
15. Changes to this policy
We may update this policy. The current version is always published on this page with its “Last updated” date. If a change requires your consent under applicable law, we will ask for it; for other significant changes, we will inform you by email or on the offer page before the change applies to you.