Privacy Policy
Last updated: October 2026
Coolin values the privacy and security of the personal data of its clients, partners, and visitors.
This Privacy Policy describes in a clear and transparent manner how we collect, use, store, and protect your information, in compliance with the General Data Protection Regulation (GDPR — Regulation EU 2016/679) and Brazil's General Data Protection Law (LGPD — Federal Law No. 13,709/2018).
Data Controller
The entity responsible for the collection and processing of personal data through this website is Coolin (https://coolin.works).
For any inquiries concerning data privacy and protection, please contact us directly at info@coolin.works.
Data Collected and Collection Methods
We collect only the data strictly necessary to respond to your inquiries and provide our services.
Data provided directly by the user
- Contact form and chat: name, email address, phone number or WhatsApp (when provided voluntarily), company name, and project or inquiry details.
Technical and browsing data
- IP address, technical access logs, browser type, screen resolution, and pages visited. These logs are processed in an aggregated or anonymized manner for system security, malicious traffic mitigation, and platform stability.
Purposes and Legal Basis for Processing
Personal data is processed based on lawful, fair, and transparent grounds, specifically:
Legal grounds
- Pre-contractual measures at the request of the data subject: responding to contact requests, preliminary feasibility assessments, and quotes.
- Contract execution: development, delivery, maintenance, and technical management of agreed services.
- Legal and fiscal obligations: invoice generation and compliance with accounting laws.
- Legitimate interest: protection against spam, unauthorized abuse, and platform security assurance.
Data Sharing with Third-Party Providers
Coolin does not sell, rent, or trade personal data to third parties for marketing or promotional purposes.
Data is shared strictly with essential technical infrastructure providers needed to operate our digital platform:
Infrastructure providers
- Cloud hosting and content delivery: Vercel Inc. (server infrastructure and edge routing).
- Transactional email delivery: Resend Inc. (secure transmission of contact form notifications).
- AI processing: Google Gemini API (interactions with the virtual assistant are not used for public model training).
Data Storage and Retention
Personal data is retained only for as long as necessary to fulfill the intended purposes:
Inquiries and proposals that do not result in a contract are deleted or anonymized within a maximum of 12 months.
Data of active clients is retained throughout the service period and subsequently preserved only for the duration required by applicable statutory and tax laws.
Your Privacy Rights (GDPR & LGPD)
Under applicable data protection legislation, you are entitled to exercise the following rights at any time:
Your rights
- Access and confirmation of processing: verify whether we process your data and receive a copy.
- Rectification: update incomplete, inaccurate, or outdated data.
- Erasure (Right to be forgotten): request deletion of data that is no longer required or lacks valid legal basis.
- Portability: receive your personal data in a structured, commonly used machine-readable format.
- Objection and restriction: object to processing based on legitimate interest.
- Withdrawal of consent: withdraw consent at any time without affecting the lawfulness of prior processing.
Information Security
We implement rigorous technical and organizational safeguards to protect data from unauthorized access, accidental destruction, alteration, or unlawful disclosure.
All communication with our website is encrypted via SSL/TLS (HTTPS). Access to contact details is restricted solely to authorized operational staff.
Updates to This Policy
Coolin may update this Privacy Policy from time to time to reflect operational or regulatory changes. The date of the most recent version is always displayed at the top of this document.
Exercise your privacy rights
To request access, correction, deletion, or to ask any questions about your data, please contact our privacy channel directly.