Privacy Policy

1. Introduction

Draw Design Studio ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, products, and services (collectively, the "Services").

Draw Design Studio is registered as a Sole Trader in Portugal and operates in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) in the European Union, the Lei Geral de Proteção de Dados (LGPD) in Brazil, the California Consumer Privacy Act (CCPA) in the United States, and other applicable privacy laws worldwide.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access our Services.

2. Information We Collect

We may collect several types of information from and about users of our Services, including:

2.1 Personal Information

• Contact information (such as name, email address, mailing address, and phone number)
• Billing information (such as payment card details and billing address)
• Account credentials (such as username and password)
• Profile information (such as profile pictures and preferences)
• Communication information (such as inquiries and feedback)

2.2 Technical Information

• Device information (such as device type, operating system, and browser type)
• Usage data (such as IP address, access times, and pages viewed)
• Location data (such as general location inferred from IP address)
• Cookies and similar technologies (as described in our Cookies section)

2.3 How We Collect Information

We collect this information:

• Directly from you when you provide it to us (such as when filling out forms or contacting us)
• Automatically as you navigate through our Services (using cookies, web beacons, and other tracking technologies)
• From third parties, such as business partners and service providers

3. How We Use Your Information

We may use the information we collect about you for various purposes, including to:

• Provide, maintain, and improve our Services
• Process and complete transactions
• Send you technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and requests
• Communicate with you about products, services, offers, and events
• Monitor and analyze trends, usage, and activities in connection with our Services
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Personalize your experience on our Services
• Comply with legal obligations

4. Legal Basis for Processing

For users in the European Economic Area (EEA), United Kingdom, and Brazil, we process your personal data based on one or more of the following legal grounds:

• Performance of a Contract: Processing necessary to fulfill our contractual obligations to you, such as providing our Services.
• Legitimate Interests: Processing necessary for our legitimate interests, provided that your fundamental rights do not override these interests. Our legitimate interests include operating our business, providing the Services, internal record keeping, and addressing security or fraud concerns.
• Consent: Processing based on your consent, such as for marketing communications. You can withdraw your consent at any time.
• Legal Obligation: Processing necessary to comply with applicable laws, regulations, or legal requests.

5. Information Sharing and Disclosure

We may share your personal information in the following circumstances:

• Service Providers: With contractors, service providers, and other third parties we use to support our business.
• Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
• Legal Requirements: If required to do so by law or in response to valid requests by public authorities.
• Protection of Rights: If we believe disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of others.

We do not sell your personal information to third parties as defined under applicable privacy laws, including the CCPA in California and the LGPD in Brazil.

6. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have different data protection laws than your country of residence.

When we transfer personal data from the European Economic Area, United Kingdom, or Brazil to countries that have not received an adequacy decision, we implement appropriate safeguards, such as standard contractual clauses approved by the European Commission, to protect your personal data.

7. Data Retention

We will retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including to satisfy any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the information, and applicable legal requirements.

When we no longer need your personal information, we will securely delete or anonymize it.

8. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

8.1 European Economic Area, United Kingdom, and Brazil

Under the GDPR and LGPD, you have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Delete your personal data
• Restrict or object to processing
• Data portability
• Withdraw consent
• Lodge a complaint with a supervisory authority

8.2 California

Under the CCPA/CPRA, California residents have the right to:

• Know what personal information we collect, use, disclose, and sell
• Delete personal information
• Opt-out of the sale of personal information
• Non-discrimination for exercising these rights
• Correct inaccurate personal information
• Limit the use and disclosure of sensitive personal information

8.3 Brazil

Under the LGPD, you have specific rights similar to those provided by the GDPR, including the right to:

• Confirmation of the existence of processing
• Access to your data
• Correction of incomplete, inaccurate, or outdated data
• Anonymization, blocking, or deletion of unnecessary or excessive data
• Portability of data
• Deletion of data processed with consent
• Information about public and private entities with which we share your data
• Information about the possibility of not providing consent
• Revocation of consent

8.4 Exercising Your Rights

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request.

9. Cookies and Similar Technologies

We use cookies and similar technologies to enhance your browsing experience, analyze website traffic, and personalize content. Cookies are small text files that are stored on your device when you visit our website.

9.1 Types of Cookies We Use

• Essential Cookies: Necessary for the functioning of our website.
• Analytical/Performance Cookies: Allow us to recognize and count the number of visitors and see how visitors move around our website.
• Functionality Cookies: Enable the website to provide enhanced functionality and personalization.
• Targeting Cookies: Record your visit to our website, the pages you have visited, and the links you have followed.

9.2 Managing Cookies

Most web browsers allow you to manage your cookie preferences. You can set your browser to refuse cookies or delete certain cookies. However, if you disable cookies, some features of our Services may not function properly.

10. Children's Privacy

Our Services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete that information as soon as possible. If you believe that we might have any information from a child under 16, please contact us.

11. Data Security

We have implemented appropriate technical and organizational measures to protect the security of your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify the relevant supervisory authority and affected individuals in accordance with applicable law.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Draw Design Studio
Email: [email protected]
Address: Lisbon, Portugal

For users in the European Economic Area, you have the right to lodge a complaint with your local data protection authority if you believe that we have violated applicable data protection laws.

For users in Brazil, you may contact the Brazilian National Data Protection Authority (ANPD).