Privacy Policy
Last updated: October 21, 2026
This policy explains how Hima Web Design handles personal data when you visit hima.pro and hima.com.br or contact us, in line with Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018).
On this page
Who controls your data
The data controller is Hima Web Design (H G N JUNIOR), CNPJ 27.141.946/0001-24, based in Teresina, Piauí, Brazil.
Hima is part of HM Hub, together with Heme and Himy. This policy covers Hima's websites. Products and services from other brands in the group have their own notices.
Data we collect
Data you give us: name, email, phone or WhatsApp, company and job title, company tax ID (when applicable), project details (goals, timeline and budget), and the messages you send through a form, email or WhatsApp.
Data collected automatically: IP address, device type, operating system, browser, language, pages visited, date and time of access.
Preferences stored in your browser: theme (light or dark), language, and your choice in the cookie notice. They are stored in your browser (cookies or local storage).
We do not ask for sensitive personal data (such as health, religion or political views). Please do not send it to us.
Why we use your data
| Purpose | Legal basis (LGPD) |
|---|---|
| Answer inquiries and quote requests | Preliminary procedures related to a contract (Art. 7, V) and legitimate interest (Art. 7, IX) |
| Prepare proposals and contracts and deliver contracted services | Contract performance (Art. 7, V) |
| Keep the site secure and prevent abuse | Legitimate interest (Art. 7, IX) |
| Meet legal, tax and regulatory obligations | Legal obligation (Art. 7, II) |
| Exercise rights in judicial, administrative or arbitration proceedings | Regular exercise of rights (Art. 7, VI) |
Cookies and similar technologies
Today we use only necessary cookies. If we start using measurement or marketing cookies, we will ask for your consent and update this policy.
| Category | Purpose | Needs your consent |
|---|---|---|
| Necessary | Remember theme, language and your choice in the notice, stored in your browser (cookies or local storage), and keep the site secure | No |
You can block or delete cookies in your browser settings. This may affect how parts of the site work.
Who we share data with
We do not sell personal data. We share only what is needed with:
- hosting and infrastructure providers (Vercel Inc.) and DNS and security providers (Cloudflare, Inc.);
- email and communication providers, such as WhatsApp (Meta);
- professionals and partners involved in your project, under confidentiality;
- public authorities, when required by law.
International data transfers
Some providers operate outside Brazil, especially in the United States. In these cases we rely on the mechanisms provided in Article 33 of the LGPD, such as contractual clauses and the providers' own data protection terms.
How long we keep data
- Contacts and proposals that did not become a contract: up to 2 years after the last contact.
- Clients: during the contract and for 5 years after it ends, to meet tax obligations and legal deadlines.
- Access logs (such as IP address, pages visited, date and time): for the period needed for the site's security and operation, within applicable legal deadlines.
After these periods we delete or anonymize the data, unless the law requires us to keep it longer.
Security
We use encrypted connections (HTTPS), DNS protections, restricted internal access and backups. No system is completely immune to failure, but we handle incidents quickly and notify data subjects and the ANPD when the law requires it.
Your rights
At any time, you may request:
- confirmation that we process your data, and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary data or data processed unlawfully;
- data portability;
- information about who we share data with;
- information about the option not to consent and its consequences;
- withdrawal of consent;
- objection to processing carried out without consent, where the law is not being followed.
To exercise these rights, write to contato@hima.com.br with the subject "LGPD Request". We reply within 15 days. We may ask for information to confirm your identity. If you are not satisfied, you can file a complaint with Brazil's National Data Protection Authority (ANPD).
Children and teenagers
Our services are aimed at companies and professionals. We do not knowingly collect data from anyone under 18. If we identify such a case, we delete the data.
Links and third-party sites
Our projects and links lead to client and third-party websites, which have their own policies. We recommend reading each one before you share data.
Changes to this policy
When we change this policy, we publish the new version on this page with an updated date. Relevant changes are highlighted on the site and, where there is an existing relationship, sent by email.
Contact and data protection officer
Privacy contact: contato@hima.com.br or WhatsApp +55 (54) 99102-4468.
Data protection officer (DPO): Hilfran Jr., hilfranjr@hima.com.br.