Introduction
NOONO STUDIO (“NOONO,” “we,” “us,” or “our”) is committed to respecting privacy and protecting the personal information of our clients, prospects, partners, contractors, and website visitors.
This Privacy Policy (“Policy”) explains how and for what purposes we collect, use, disclose, retain, and protect personal information. Where applicable, our processing is intended to comply with applicable privacy and data protection laws, including the Brazilian General Data Protection Law (LGPD – Law No. 13,709/18).
This Policy applies to all Data Subjects whose data is processed by NOONO STUDIO.
Definitions
For the purposes of this Policy, the following definitions apply:
- Data Subject:
- A natural person to whom the personal data being processed relates.
- Personal Data:
- Any information that identifies or may identify a natural person.
- Processing:
- Any operation performed on Personal Data, including collection, use, access, storage, sharing, and deletion.
- Purpose:
- The objective for which Personal Data is processed.
- LGPD:
- Brazilian General Data Protection Law (Law No. 13,709/18).
- ANPD:
- Brazilian National Data Protection Authority.
- DPO (Data Protection Officer):
- The person appointed by the Studio to act as a communication channel between Data Subjects, the Studio, and the ANPD.
Collection and Purposes of Data Processing
NOONO STUDIO processes only the Personal Data strictly necessary for the performance of its activities. Processing will always be based on a legitimate purpose, duly communicated to the Data Subject, and supported by the appropriate legal basis.
The main purposes for which we process data include:
Business Development and Marketing
Collecting data such as name, email address, company, job title, and, where provided, phone number through forms on our website, events, or third-party platforms to provide requested assessments, such as a “Digital Presence Analysis,” send proposals, or communicate information about our services. Collection of a phone number by itself does not constitute consent to receive SMS messages.
Legal Basis: Legitimate Interest (Article 7, IX) or Procedures Preliminary to Entering into a Contract (Article 7, V).
Provision of Services
Collecting and using contact details and client information, whether relating to individuals or company representatives, for the management and performance of design, branding, and related service agreements.
Legal Basis: Performance of a Contract (Article 7, V).
Website Operations
Collecting browsing data through cookies to optimize the user experience, analyze website performance, and, where authorized, for advertising purposes.
Legal Basis: Legitimate Interest (Article 7, IX) or Consent (Article 7, I) for non-essential cookies.
Legal Obligations
Complying with legal, tax, regulatory, or judicial requirements.
Legal Basis: Compliance with a Legal or Regulatory Obligation (Article 7, II).
SMS Messaging and Mobile Information
If you separately and affirmatively opt in to receive SMS/text messages from NOONO STUDIO, we may collect and process your mobile phone number, the source and status of your consent, timestamps associated with consent or opt-out requests, message content, and delivery or interaction data necessary to operate the messaging program.
We use this information to provide communications you requested or agreed to receive, which may include follow-up regarding a requested Med Spa Review or consultation, scheduling assistance, appointment confirmations and reminders, and related customer care communications.
SMS Consent and Choice
Providing a mobile phone number alone does not enroll you in SMS messaging. Where SMS consent is requested, it is collected through a separate affirmative opt-in mechanism and is not pre-selected. Consent to receive SMS messages is not a condition of purchase or of receiving a requested review or consultation.
Legal Basis: Consent, where required by applicable law and messaging industry rules.
Message Frequency, Rates, and Opt-Out
Message frequency varies based on your interactions. You may receive up to 4 messages per month for follow-up and scheduling, with additional messages possible when you actively reply or have an ongoing appointment or support conversation. Message and data rates may apply.
You may opt out at any time by replying STOP. For assistance, reply HELP or contact contact@noonostudio.com.
No Sharing of Mobile Opt-In Data for Marketing
NOONO STUDIO does not share, sell, rent, or provide your mobile phone number, SMS opt-in data, or messaging consent to third parties or affiliates for their marketing or promotional purposes.
We may allow service providers acting on our behalf, such as messaging, CRM, hosting, or communications infrastructure providers, to process mobile information solely as necessary to deliver, secure, document, or support the messaging service. These providers are not authorized to use your mobile information or SMS consent for their own marketing or promotional purposes.
Data Sharing and Disclosure
NOONO STUDIO does not sell or otherwise commercialize Personal Data. Personal Data will only be shared with third parties in the limited circumstances described below. For the avoidance of doubt, mobile phone numbers, SMS opt-in data, and messaging consent are not shared, sold, rented, or provided to third parties or affiliates for their marketing or promotional purposes.
(i) Service Providers (Processors): With companies that assist us in our operations, such as CRM, messaging, email, hosting, analytics, or cloud infrastructure providers, under contractual or operational restrictions and solely to perform services on our behalf. Such providers are not authorized to use mobile phone numbers or SMS consent data for their own marketing or promotional purposes.
(ii) Legal Obligations: When necessary to comply with a legal or regulatory obligation, a request or order from a competent authority, or a court decision.
Data Retention Period
Personal Data will be retained only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal or regulatory obligations. Once the processing activities have ended, the data will be deleted, except where retention is permitted under the LGPD.
Data Security
We adopt appropriate technical and administrative measures to protect your Personal Data against unauthorized access and accidental or unlawful destruction, loss, alteration, disclosure, or misuse.
Access to Personal Data is restricted to employees and contractors who require such information to perform their duties.
Data Subject Rights
NOONO STUDIO ensures that Data Subjects may exercise their rights under the LGPD, including:
- Confirmation of the existence of processing;
- Access to their Personal Data;
- Correction of incomplete, inaccurate, or outdated data;
- Anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data;
- Data portability, upon express request and subject to applicable regulations;
- Deletion of Personal Data processed on the basis of consent;
- Information about public and private entities with which Personal Data has been shared;
- Information about the possibility of refusing consent and the consequences of such refusal;
- Withdrawal of consent.
Security Incident Management
If the Studio identifies the occurrence of a Security Incident, such as a data breach or unauthorized access, an immediate investigation will be conducted.
If it is determined that the Security Incident may result in a relevant risk or harm to Data Subjects, we will notify the ANPD and the affected Data Subjects in accordance with applicable law, providing information regarding the nature of the affected data, the measures taken, and the risks involved.
Contact — Data Protection Officer
Any questions, communications, or requests related to the processing of Personal Data should be directed to our Data Protection Officer through the following channel:
Email: contact@noonostudio.com
Legal entity: NOONO STUDIO · CNPJ 11.442.215/0001-89 · Avenida Paulista, 1636, São Paulo, SP, Brazil