// Legal
Privacy policy
Last updated: July 30, 2026
Who we are
Saffier (saffier.cc) is operated by Hugo Saffier, based in Rio de Janeiro, Brazil. For the purposes of the General Data Protection Regulation (GDPR, European Union) and the LGPD (General Data Protection Law, Brazil), Hugo Saffier is the data controller for information processed through this site.
Since the site has a Spanish (Spain) version and may receive visitors from anywhere in the European Union, this policy was written to comply with both the GDPR and the LGPD. Where the two laws require different things, we apply whichever standard is more protective of the visitor.
What data we collect
We collect two types of data:
- Data you give us directly: when you click a WhatsApp button on the site, the conversation that starts there (your contact name, phone number, and whatever you write) is recorded in WhatsApp, like any conversation. If you share your Google Ads account ID with us for a diagnostic, that data is also only used for that purpose.
- Data collected automatically: when you visit the site, analytics and advertising tools (detailed in the cookies section below) may collect your IP address, device type, browser, pages visited, and browsing time, but only if you accept this in the cookie banner.
We don't have a signup form on the site. We don't ask for email, ID number, address, or any other sensitive data for you to browse or reach out.
Cookies and similar technologies
We use three categories of cookies. Essential ones always run; the other two only after you click "Accept" in the banner that appears on your first visit.
| Category | Service | Purpose | Requires consent? |
|---|---|---|---|
| Essential | Cookie preference (browser local storage) | Remember your choice on the banner, so we don't ask again | No |
| Analytics | Google Analytics 4 (GA4) | Understand how many people visit the site and which pages work best | Yes |
| Advertising | Google Ads | Measure whether someone who clicked an ad later got in touch | Yes |
| Advertising | Meta Pixel (Facebook/Instagram Ads) | Measure the results of Instagram and Facebook campaigns | Yes |
You can change your choice at any time by clearing the site's cookies in your browser settings; the banner will show up again on your next visit.
Why we use your data
- Responding to your contact: when you message us on WhatsApp, we use the data from that conversation only to reply to you. Legal basis: performance of pre-contractual steps (GDPR Art. 6(1)(b)) / legitimate interest (GDPR Art. 6(1)(f)).
- Measuring the site (GA4): understanding whether the site works, which pages people read, where they come from. Legal basis: consent (GDPR Art. 6(1)(a)).
- Measuring ad campaigns (Google Ads, Meta Pixel): knowing whether ad spend is generating real contact. Legal basis: consent.
We never sell your data. There is no, and will never be, a Saffier email or phone list shared with third parties for another company's marketing purposes.
Who we share it with
Data collected via analytics and advertising cookies is processed by:
- Google LLC (Google Analytics 4, Google Ads) — Google's privacy policy
- Meta Platforms, Inc. (Meta Pixel, used in Instagram/Facebook ads) — Meta's privacy policy
- Hostinger, the company that hosts this site, processes technical server access data (IP, logs) as a normal part of running any site on the internet.
We don't share data with any other third party beyond those listed above.
International data transfer
Google and Meta are U.S. companies and may process data outside the European Union, including in the United States. Both participate in compliance mechanisms recognized by the European Union (such as the EU-U.S. Data Privacy Framework) and apply standard contractual clauses for international data transfer, the mechanisms required by the GDPR for this type of transfer.
How long we keep your data
- WhatsApp conversations: kept for as long as it makes sense to maintain the business relationship, or until you request deletion.
- GA4 data: by default, Google Analytics 4 retains event data for 14 months, then automatically deletes it.
- Google Ads and Meta Pixel data: follows each platform's own retention policy, generally between 90 days and 3 years, depending on the type of data.
Your rights
The GDPR guarantees you the right to:
- Confirm whether we process any data about you, and access it
- Rectify incomplete, inaccurate, or outdated data
- Erase data you gave us (except what the law requires us to keep)
- Withdraw your consent at any time, without affecting what was already done before
- Object to a data processing activity, or request portability to another service
- Lodge a complaint with a data protection authority — in Spain, the AEPD (Spanish Data Protection Agency)
To exercise any of these rights, message me on WhatsApp; I answer personally, because I am Saffier.
Minors
This site is not directed at anyone under 18, and we don't intentionally collect data from children or teenagers.
Changes to this policy
If I change how the site handles your data, I'll update this page and the date at the top. Relevant changes (for example, a new advertising service) will also trigger a new consent request in the cookie banner.
Contact
Questions, or a request to access, correct, or delete your data: message me on WhatsApp.