Legal · Last updated 21 August 2026

Privacy policy

This policy describes how Longhand Press handles personal data. It is written to meet the requirements of the Brazilian General Data Protection Law (Lei nº 13.709/2018, LGPD) and the European General Data Protection Regulation (Regulation (EU) 2016/679, GDPR).

Controller

Longhand Press is the controller of the personal data described here and determines the purposes and means of its processing. Correspondence on any matter in this policy, including the exercise of rights, goes to support@longhandpress.online. Longhand Press operates from Brazil and corresponds by email only. No separate data protection officer has been appointed; the same address serves that function.

What is collected

Reading this site. No account is required and no registration is offered. The hosting provider records standard server information for each request — IP address, request time, page requested, referring page, user agent — for security, abuse prevention, and aggregate traffic measurement.

Correspondence. Email sent to the support address contains, at minimum, the sender's address and message content, together with anything the sender chooses to include.

Purchases. Where written material is sold, the transaction is processed by a third-party payment provider. That provider collects payment details directly. Longhand Press receives the buyer's email address, the item purchased, the amount, the date, and a transaction reference. Longhand Press does not receive, store, or have access to complete card numbers or bank credentials.

Advertising measurement. Where advertising is run, measurement technologies supplied by the advertising platform may record that a visit followed an advertisement, and whether a purchase followed. This is described in the cookies section below.

No special category data is sought. Longhand Press does not ask for, and asks that senders do not volunteer, information about health, sexual life, religion, political opinion, trade union membership, or biometric or genetic characteristics. Any such data arriving unsolicited is deleted once the correspondence is resolved.

Why it is processed, and on what legal basis

• Answering correspondence — legitimate interests (GDPR Art. 6(1)(f)) and, where a purchase is involved, performance of a contract (Art. 6(1)(b)). Under the LGPD, execution of a contract (Art. 7, V) and legitimate interests (Art. 7, IX).
• Delivering purchased material and processing refunds — performance of a contract, GDPR Art. 6(1)(b) and LGPD Art. 7, V.
• Keeping records of transactions — compliance with a legal obligation, GDPR Art. 6(1)(c) and LGPD Art. 7, II, including tax and commercial record-keeping requirements.
• Site security, abuse prevention, and aggregate traffic measurement — legitimate interests, GDPR Art. 6(1)(f) and LGPD Art. 7, IX.
• Advertising measurement using non-essential cookies — consent, GDPR Art. 6(1)(a) and LGPD Art. 7, I, where consent is required in the visitor's jurisdiction.

Personal data is not used for automated decision-making producing legal or similarly significant effects, and is not used to build profiles of individual readers for editorial purposes.

Cookies and similar technologies

This site sets no cookie of its own for reading the articles. Fonts are requested from Google Fonts, which means the visitor's browser connects to Google's servers and Google receives the IP address associated with that request.

Where advertising is run, the advertising platform's measurement technology may set cookies or use similar identifiers to attribute a visit or a purchase to an advertisement. Where consent is required in the visitor's jurisdiction, it is requested before those technologies operate, and may be withdrawn at any time through browser settings. Refusing them does not restrict access to any article.

Browsers can block or delete cookies. Blocking them does not affect the readability of this site.

Sharing

Personal data is shared only with processors acting on documented instructions, and only to the extent needed for the purposes above: the hosting and content delivery provider, the payment provider, the email delivery provider, and — where advertising is run — the advertising platform for measurement. Data is not sold, rented, or traded, and is not shared for any third party's own marketing.

Disclosure may also occur where required by applicable law or by a competent authority.

International transfer

Longhand Press operates from Brazil, and the providers above may process data in the United States, the European Union, or elsewhere. Where personal data of individuals in the European Economic Area or the United Kingdom is transferred outside those territories, transfers rely on the European Commission's Standard Contractual Clauses or an applicable adequacy decision. Under the LGPD, transfers rely on the mechanisms in Articles 33 to 36, including standard contractual clauses and the contractual necessity provisions.

Retention

• Support correspondence: up to 24 months after the matter is closed, then deleted.
• Transaction records: retained for the period required by Brazilian tax and commercial law, ordinarily five years.
• Server logs: up to 12 months, as configured by the hosting provider.
• Advertising measurement data: retained by the advertising platform under its own retention schedule.

Where a longer period is required to establish, exercise, or defend a legal claim, data is retained for that purpose and no other.

Rights

Under the LGPD (Art. 18), individuals may confirm whether processing occurs, access their data, correct incomplete or inaccurate data, request anonymisation, blocking, or deletion of unnecessary or excessive data, request portability, request deletion of data processed on the basis of consent, obtain information about sharing, be informed about the consequences of refusing consent, and withdraw consent.

Under the GDPR (Arts. 15–22), individuals have rights of access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, and withdrawal of consent without affecting the lawfulness of processing carried out before withdrawal.

Requests go to support@longhandpress.online and are answered within 15 days under the LGPD and within one month under the GDPR, extendable where the law permits and the requester is told why. Identity may need to be verified before a request is actioned, which will not involve requesting identity documents unless no other means is available.

Complaints

Complaints may be made to the Brazilian data protection authority, the Autoridade Nacional de Proteção de Dados (ANPD), at gov.br/anpd. Individuals in the European Economic Area or the United Kingdom may complain to their national supervisory authority. Raising the matter with Longhand Press first is welcome but is not a precondition.

Security

The site is served over HTTPS. Access to correspondence and transaction records is limited to those who need it to operate the publication. No transmission over the internet is entirely secure, and no method of storage is absolute; where a breach is likely to result in a risk to rights and freedoms, affected individuals and the relevant authority are notified as required by the LGPD and the GDPR.

Children

This site and any material sold through it are directed at adults. Longhand Press does not knowingly collect personal data from anyone under 18. Where such data is identified, it is deleted.

Changes

This policy may be revised. The date at the top of the page records the most recent revision. Where a change materially affects how personal data is handled, notice is given on this page before it takes effect.