PRIVACY POLICY

PeptoSfera

Last updated: 2026-07-01

PeptoSfera is operated from Brazil. This policy is governed by Brazilian law — the General Data Protection Law (LGPD, Law No. 13,709/2018). The Portuguese version at peptosfera.com.br/privacidade is the governing document; this English translation is provided for convenience.

1. Who we are

PeptoSfera is an editorial email newsletter available at https://peptosfera.com.br, published by José Carlos Wender de Brito, an individual (natural person) based in São Paulo, Brazil, who is the data controller for the personal data processed here.

This Privacy Policy explains how we collect, use, store, share and protect your personal data, in compliance with the LGPD, the Brazilian Civil Rights Framework for the Internet (Law No. 12,965/2014) and the resolutions of the National Data Protection Authority (ANPD).

By subscribing to PeptoSfera, you confirm that you have read and understood this Policy.

2. Privacy contact

PeptoSfera is operated by a small-scale processing agent under ANPD Resolution No. 2/2022. Our official channel for all privacy matters is:

• Email: editor@peptosfera.com.br

Use this channel for questions, to exercise your rights, and for any privacy-related communication. The controller's full identification and address can be provided upon formal request through this channel or to the ANPD.

3. Data we collect

PeptoSfera is an email newsletter. We collect the minimum necessary to subscribe you and send the editions:

3.1 Registration data

• Your email address (provided by you in the subscription form)

3.2 Origin and engagement data

• Email engagement metrics (opens and clicks), generated automatically by our sending platform
• Occasionally, campaign parameters (UTM) present in the access URL, used only to understand which channel you came from

We do not collect your name, phone number, tax ID, date of birth, location, payment data or health data in this version of the service. PeptoSfera discusses peptides, GLP-1s and biohacking as editorial content, but we collect no health data about you — subscription requires only your email.

On payments: in this version, PeptoSfera is free and processes no payments. When paid plans launch, payment will be processed by the Kiwify platform (payment intermediary and seller of the digital products), which collects and handles payment data (CPF, card or Pix details) as an independent processing agent — we never store your card number. At that point we will collect only what is needed to link your access to the purchase (email and order ID). Cancellation and refund terms are in our Refund Policy.

4. How we collect data

• Directly from you: when you enter your email in the subscription form on the site or on a form hosted by our sending platform
• Automatically: UTM parameters in the access URL and open/click metrics generated by the email platform

5. Purposes and legal basis

We process your data solely for the purposes below. As the LGPD requires, each purpose is tied to a specific legal basis:

We send the newsletter based on your free, informed and specific consent (active opt-in, via an unchecked checkbox), recorded by our sending platform. You may revoke it at any time (see Sections 8 and 11).

6. Data sharing

6.1 Processors and service providers — we share your data with third parties that provide essential services, acting as processors under our instructions:

All processors are bound by confidentiality and data-protection obligations compatible with the LGPD.

6.2 Authorities and legal obligations — we may disclose data to public authorities, courts or regulators when required by law or court order.

6.3 Corporate transactions — in a merger, acquisition or asset sale, your data may be transferred to the new controller, who will be bound by this Policy or an equivalent one.

We do not sell, rent or trade your personal data to third parties for their own purposes.

7. International data transfer

PeptoSfera uses Resend (United States) to store subscriber emails and send the newsletter; hosting (Vercel) and DNS (Cloudflare) also run on infrastructure outside Brazil.

This constitutes an international transfer of personal data, governed by Art. 33 of the LGPD and ANPD Resolution No. 19/2024 (International Data Transfer Regulation). As the United States has no general ANPD adequacy decision to date, we rely on the safeguards set out in the regulation — including ANPD standard contractual clauses or equivalent contractual clauses — to ensure a level of protection equivalent to the LGPD.

By subscribing, you are aware that your email will be processed and stored in the United States by the sending platform.

8. Unsubscribing and withdrawing consent

You may unsubscribe at any time, free of charge and without justification:

• Unsubscribe link: every email from PeptoSfera contains an "Unsubscribe" link in the footer. One click ends delivery.
• By email: send a request to editor@peptosfera.com.br.

Unsubscribing is equivalent to withdrawing consent for the newsletter. Withdrawal does not affect the lawfulness of processing carried out beforehand.

9. Data retention

• Active subscriber email: kept while you remain subscribed
• After unsubscribing: the email is removed from the active list. We keep a minimal unsubscribe record (email and date) as needed to prove your request was honored and to prevent unwanted re-subscription, unless a longer legal retention applies
• UTM metadata and engagement metrics: kept for up to 24 months, then aggregated or deleted

After the retention period, data is securely deleted or anonymized.

10. Cookies and tracking

peptosfera.com.br is an email-capture page. We use a minimal set of cookies and URL parameters — full detail in our Cookie Policy. We use no third-party advertising pixels in this version. You can manage cookies in your browser settings.

11. Your rights (Art. 18 LGPD)

You have the rights of confirmation and access, correction, anonymization/blocking/deletion, data portability, deletion of data processed on the basis of consent, information about sharing, and withdrawal of consent.

How to exercise them: email editor@peptosfera.com.br with the subject "Data Subject Rights — LGPD". We respond within 15 days.

12. Information security

We apply appropriate technical and administrative measures, including encryption in transit (TLS/HTTPS), restricted access to the subscriber list, and processors (Resend, Vercel, Cloudflare) that maintain recognized security standards. No system is 100% secure; in the event of a material incident we will notify the ANPD and affected data subjects as required by the LGPD.

13. Intended audience and minors

PeptoSfera is intended exclusively for adults (18+). The content covers pharmacological substances, many prescription-only, and is not directed at children or adolescents. We do not knowingly collect data from minors; if we learn a minor has subscribed, we will delete the data (Art. 14 LGPD; Digital ECA, Law No. 15,211/2025).

14. ANPD channel

If you believe your rights were not met, you may file a complaint with the National Data Protection Authority (ANPD): https://www.gov.br/anpd

15. Changes

We may update this Policy to reflect changes to our services or legal requirements. When changes are material, we will notify subscribers by email. The current version is always available at https://peptosfera.com.br/en/privacy (Portuguese governing version at /privacidade).

16. Governing law

This Policy is governed by Brazilian law, in particular the LGPD (Law No. 13,709/2018).

Controller: José Carlos Wender de Brito (individual) — São Paulo, Brazil Privacy contact: editor@peptosfera.com.br Effective date: 2026-07-01

Verification: Perplexity (current norms) ✓ · ChatGPT GPT-4o review ✓ · Generated 2026-07-01 by Gabriel