Privacy Policy

Who is responsible

This site is operated by Brianna Pelegrini, Miami, Florida, United States. For any question about your personal data, write via the contact page.

What is collected

Only what you type into the enquiry form or the press form:

• Your name
• Your email address
• Your city, if you choose to give it
• The area of interest you select
• The message you write
• The language version of the site you used
• Your consent to be contacted, recorded together with the message
• And, if you choose to give them: your telephone, your country, an Instagram or LinkedIn profile, your age group, whether you are a woman or a man, whether you have had image consulting before, and how you heard about Brianna Pelegrini, and the day, time and time zone you propose for a consultation; and, in the press form, your outlet, your role, the subject and your deadline

This site sets no cookies of its own and runs no analytics, advertising or tracking script. The typefaces are served from this domain, not from a third-party font host, so loading a page reports your visit to nobody. The one exception is the contact and press pages, which load Google reCAPTCHA to stop automated senders; while you are on those pages, Google may set its own cookies and collect usage data under Google’s own privacy policy.

Why, and on what legal basis

Your data is used for one purpose: to answer your enquiry and, if a working relationship begins, to conduct it. Under the LGPD the basis is your request as a data subject prior to a contract (art. 7, V) and legitimate interest (art. 7, IX). Under the GDPR the equivalent bases are art. 6(1)(b) and 6(1)(f).

Your data is never sold, rented or traded, and it is never used to build advertising profiles.

Who processes it

Form submissions are received and stored by Netlify, our hosting provider, on servers in the United States, and are forwarded to Brianna by email. Netlify acts as a processor on our instructions. Google, through reCAPTCHA, receives only the technical signals that the submission came from a person, never the content of the form. No other third party receives your data.

If you write from the European Economic Area or the United Kingdom, be aware that this transfer is international. It is made on the basis of the standard contractual clauses adopted by our provider.

How long it is kept

Enquiries that do not become a working relationship are deleted within 24 months. Records connected to a client relationship are kept for as long as the relationship lasts and for the period afterwards required by tax and commercial law.

Your rights

Under the LGPD (art. 18), the GDPR and the CCPA you may ask us to:

• Confirm whether we hold data about you, and give you a copy
• Correct anything that is incomplete or wrong
• Delete your data, where we are not required to keep it
• Withdraw a consent you previously gave
• Object to a processing based on legitimate interest
• Receive your data in a portable format

Write via the contact page and we will answer within 30 days. Under the CCPA, we do not sell or share personal information, so there is nothing to opt out of. You may also complain to the ANPD in Brazil or to your local supervisory authority in Europe.

Security

The site is served over HTTPS only, with HSTS and a strict content security policy. It has no login, no database of visitors and no user accounts, which means there is very little to lose in the first place.

Children

This site is not directed to children and does not knowingly collect data from anyone under 18.

Changes

If this policy changes, the date below changes with it. Material changes will be signalled on this page.

Last updated — 2026-09-13