Privacy policy

Last updated: September 2026.

Who controls the data

Riso Folio is the controller of personal data collected through risofolio.online. Requests relating to personal data are handled by email at [email protected].

What is collected

Correspondence

The email address a message is sent from, together with the content of that message and any information included in it voluntarily.

Purchase records

Where material is bought, the payment is processed by a third-party payment provider. Riso Folio receives the transaction record, the billing email address and the status of the payment. Full card numbers are never received or stored by Riso Folio.

Technical data

Standard information generated by a web request, including IP address, approximate location derived from it, browser and device type, pages requested, and the referring address.

Analytics and advertising technologies

This site uses analytics tools and advertising measurement technologies, including tags supplied by advertising platforms, to understand how pages are reached and how advertising performs.

Legal bases

Under the Brazilian General Data Protection Law (Law 13,709/2018), processing relies on consent, on the performance of a contract, on compliance with a legal obligation, and on legitimate interests, according to the purpose in question. Under the EU GDPR, the corresponding bases are Article 6(1)(a), 6(1)(b), 6(1)(c) and 6(1)(f).

Purposes

• Answering correspondence and providing access to material that has been bought.
• Processing payments, refunds and payment disputes.
• Keeping the records required by tax and commercial law.
• Measuring how the site is used and how advertising performs.
• Protecting the site against abuse and fraudulent access.

Retention

Correspondence is kept for up to two years from the last message unless a longer period is required. Transaction records are kept for the period required by Brazilian tax and commercial legislation, which is generally five years. Technical and analytics data is kept in identifiable form for up to fourteen months.

Sharing

Personal data is shared only with the service providers required to run the site: hosting and content delivery, email delivery, payment processing, and analytics and advertising platforms. Data is not sold.

International transfer

Servers and service providers used by this site are located outside Brazil and may be located outside the European Economic Area. Transfers are made on the bases permitted by applicable law.

Rights

Depending on applicable law, a person may request access, correction, deletion, restriction, portability or objection, and may withdraw consent where processing relies on consent. Requests are sent to [email protected]. A complaint may also be lodged with the Brazilian ANPD or with a supervisory authority in the EU.