Legal

Privacy
Policy

Last updated: March 2026

Onda Criative ("we", "our" or "the company"), based in Rome, Italy, with operations in Brazil and internationally, is committed to protecting the privacy and personal data of our clients, visitors and users.

This Privacy Policy describes how we collect, use, store and protect your personal information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website unitedkingdom.ondacreative.com.br and our services, you acknowledge that you have read and agree to the terms of this Privacy Policy.

1. Data We Collect

Data you provide: we collect personal data you voluntarily provide when filling in contact forms (name, email, phone number, message), requesting quotes, contacting us via WhatsApp or email, or engaging our services.

Automatically collected data: when browsing our website, we may collect your IP address, browser and device type, pages visited, time spent on site, and cookies and similar technologies (see section 5).

2. Purpose of Processing

We use your personal data for:

3. Lawful Basis for Processing

Data processing is based on the following lawful bases under UK GDPR:

4. Data Sharing

Your personal data is never sold, rented or disclosed to third parties for commercial purposes. We may share data only with essential service providers (hosting, email, analytics tools) and when required by a competent authority or court order. All providers are bound by confidentiality obligations.

5. Cookies and Tracking Technologies

Our website uses essential cookies (necessary for operation), analytics cookies (to understand how visitors interact with the site) and performance cookies (to improve speed and experience).

When you first visit our site, you will be informed about the use of cookies and may accept or reject non-essential cookies. You can manage your preferences at any time through your browser settings.

6. Data Storage and Security

Your data is stored on secure servers with SSL certification (HTTPS), access restricted to authorised personnel, regular backups and continuous security monitoring. Data is retained only for as long as necessary to fulfil its purposes or as required by law.

7. International Data Transfers

As we operate internationally, your data may be transferred to and processed in countries outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place in compliance with UK GDPR requirements.

8. Your Rights (UK GDPR)

Under the UK GDPR, you have the following rights:

To exercise any of these rights, please contact us using the details below. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Changes

We reserve the right to update this Policy at any time. Significant changes will be communicated through the website. We recommend checking this page periodically.

10. Contact

For questions, requests or to exercise your rights:

Data Controller:
Onda Criative
contato@ondacreative.com.br