Privacy Policy

The controller responsible for processing your personal data is:

• Legal entity: Carla Regiane Dias — Microempreendedora Individual (MEI)
• CNPJ: 67.070.277/0001-61
• Location: São Paulo, Brazil
• Email: carla@happyportuguese.com.br
• Data Protection contact (Encarregado / DPO): Carla Regiane Dias — carla@happyportuguese.com.br

For any privacy question or to exercise your rights, contact us at the email above.

Depending on how you interact with us, we may collect:

• Identification and contact data: name, email address, phone/WhatsApp number, country.
• Booking and scheduling data: class type, your availability, goals and Portuguese level, time zone.
• Payment data: processed by our third-party payment provider (Stripe). We do not store full card numbers on our own servers.
• Communications: messages you send by email, WhatsApp, or our forms, and feedback you provide.
• Quiz and assessment data: answers and results from our level quiz and CELPE-Bras readiness quiz.
• Resource downloads: the email address you provide to download the "500 Expressions" ebook or subscribe to the newsletter.
• Usage and device data: collected automatically through cookies and analytics — pages visited, approximate location, browser, and device type.
• Children's data: where a parent or guardian arranges classes for a minor — limited data about the child (first name, age band, level, learning notes). See Section 7.

• Directly from you (forms, booking, quizzes, ebook signup, messages).
• Automatically when you browse the Site (cookies, analytics).
• From a parent/guardian when classes are arranged for a child.

We only collect what we need for the purposes described below.

Under the LGPD and GDPR, we rely on the following legal bases:

You can withdraw consent at any time where consent is the basis; this does not affect processing already carried out.

We do not sell your personal data. We share it only with trusted service providers who help us run the service, and only as needed:

• Payment processing: Stripe (Stripe, Inc.) — for secure online card payments.
• Messaging: WhatsApp (Meta Platforms) when you choose to contact or be contacted there.
• Video classes: Zoom Video Communications, Inc. — for live online lessons.
• Email communications: Google LLC (Gmail) — for sending lesson materials, updates, and newsletters.
• Website analytics: Google Analytics (Google LLC).

We may also disclose data where required by law, court order, or to protect our legal rights.

Some of our providers (for example, Google and Meta) process data outside Brazil, including in the United States. Where we transfer personal data internationally, we take steps required by the LGPD and GDPR to ensure an adequate level of protection, such as relying on providers that offer appropriate safeguards (e.g. standard contractual clauses).

• We process a child's personal data only with the specific, prominent consent of at least one parent or legal guardian, in line with LGPD Art. 14 and in the best interest of the child.
• We collect the minimum data needed to deliver lessons (e.g. the child's first name, age band, level, and progress notes).
• We do not require a child to provide more personal data than is necessary, and we do not condition participation on disclosing extra information.
• For users under 13 located in the United States, we comply with COPPA: we do not knowingly collect data from a child under 13 without verifiable parental consent.
• Parents/guardians may review, correct, or request deletion of their child's data at any time by contacting us.
• Class recordings involving a child are handled per our Terms of Service and only with parental consent.

If you believe we have collected a child's data without proper parental consent, contact us immediately and we will delete it.

The Site uses cookies and similar technologies, including Google Analytics (GA4), to understand how visitors use the Site and to improve it. These may collect usage and approximate-location data.

You can control or disable cookies through your browser settings. Where required by law, we ask for your consent before setting non-essential cookies. Disabling cookies may affect some Site features.

We keep personal data only as long as needed for the purposes above:

• Student records and class materials: for the duration of our relationship and up to 1 year afterward.
• Payment/tax records: as required by Brazilian law (typically 5 years).
• Marketing data (newsletter/ebook): until you unsubscribe or request deletion.
• Analytics data: per the retention period set in Google Analytics (14 months).

When data is no longer needed, we delete or anonymize it.

Under the LGPD (Art. 18) you have the right to:

• Confirm whether we process your data and access it;
• Correct incomplete, inaccurate, or outdated data;
• Anonymize, block, or delete unnecessary or excessive data;
• Request data portability;
• Request deletion of data processed with consent;
• Be informed about with whom we share your data;
• Be informed about the option to refuse consent and the consequences;
• Withdraw consent.

If you are in the EU/UK (GDPR), you also have the rights to restrict or object to processing and to lodge a complaint with a supervisory authority. In Brazil, you may contact the ANPD (Autoridade Nacional de Proteção de Dados).

If you are in California (CCPA/CPRA), you have the right to know what personal information we collect, to request deletion, to correct it, and to opt out of "sale" or "sharing" — we do not sell your data.

To exercise any right, email carla@happyportuguese.com.br. We will respond within the timeframes required by applicable law.

We use reasonable technical and organizational measures to protect your data against unauthorized access, loss, or misuse, including secure (HTTPS) connections and access controls. No method of transmission over the internet is 100% secure, but we work to protect your information and to notify you and the relevant authority of any significant data breach as required by law.

We may update this Privacy Policy from time to time. We will post the updated version here with a new "Last updated" date. Significant changes will be communicated where appropriate.

Questions about this policy or your data:

carla@happyportuguese.com.br — São Paulo, Brazil.