Privacy policy

Last updated: 12 September 2026

Hourwise is the controller of personal data processed through this site. It operates from Brazil and applies the Lei Geral de Proteção de Dados (Law 13.709/2018) to all processing, together with the General Data Protection Regulation (EU 2016/679) and the United Kingdom GDPR where a visitor is located in those jurisdictions. All privacy correspondence goes to support@hourwise.online.

Data collected

• Technical access data. IP address, approximate region derived from it, browser and device type, referring address, pages requested and timestamps, recorded by the hosting infrastructure.
• Correspondence data. Email address, message content and any details supplied voluntarily in a message.
• Transaction data. For a paid publication: name, email address, purchase reference, amount, currency, date and country of purchase. Card numbers and banking credentials are never received or stored by Hourwise; payment is handled entirely by the payment provider.
• Measurement data. Aggregate counts of page requests, and where advertising technology is present, event identifiers associated with a browser.

No special categories of data are sought. Health data, biometric data, political opinions, religious belief, union membership, racial or ethnic origin and sexual orientation are not collected, and no processing of that kind is carried out.

Purposes and legal bases

• Delivering the site and keeping it available. LGPD Article 7, X (legitimate interest); GDPR Article 6(1)(f).
• Answering correspondence. LGPD Article 7, IX or V; GDPR Article 6(1)(f) or 6(1)(b) where a message concerns a purchase.
• Completing a sale and delivering a publication. LGPD Article 7, V (performance of a contract); GDPR Article 6(1)(b).
• Meeting accounting, tax and consumer-law obligations. LGPD Article 7, II; GDPR Article 6(1)(c).
• Detecting fraud and preserving the integrity of the service. LGPD Articles 7, IX and 11, II, g; GDPR Article 6(1)(f).
• Audience measurement and advertising. Consent where consent is required by the applicable law: LGPD Article 7, I; GDPR Article 6(1)(a) together with the applicable e-privacy rules.

Cookies and similar technologies

Strictly necessary cookies keep the site functioning and are set without consent, as permitted by law. Measurement and advertising technologies, where present, are loaded on the basis of consent in jurisdictions that require it, and consent may be withdrawn at any time through browser settings or by writing to the support address.

Browser controls allow cookies to be blocked or deleted. Blocking strictly necessary cookies may prevent parts of the site from working. This site does not respond to a Do Not Track browser signal, as there is no common standard for interpreting it.

Sharing

Personal data is disclosed only to processors acting under instruction, and only to the extent needed for the purpose: hosting and content delivery, email delivery, the payment provider and, where present, audience-measurement and advertising providers. Data may also be disclosed to a public authority where disclosure is required by law, or to a professional adviser where necessary to establish or defend a legal claim. Personal data is not sold.

International transfers

Infrastructure providers operate globally, so processing may take place outside Brazil, the European Economic Area or the United Kingdom. Transfers rely on the mechanisms available under the applicable law: for the LGPD, the instruments recognised in Articles 33 to 36, including standard contractual clauses approved by the Autoridade Nacional de Proteção de Dados; for the GDPR, an adequacy decision or the standard contractual clauses adopted by the European Commission, with the additional measures required by law where relevant.

Retention

• Technical access logs: retained for up to 12 months, in line with the retention duty for application access records under the Marco Civil da Internet (Law 12.965/2014).
• Correspondence: retained for up to 24 months after a matter is closed, and longer where a dispute is open.
• Transaction records: retained for the periods required by Brazilian tax, accounting and consumer-protection law, which may extend beyond five years from the transaction.
• Consent records: retained for as long as the related processing continues, plus the period needed to evidence the consent.

Data no longer needed for any of the purposes above is deleted or anonymised.

Rights

Data subjects may request confirmation of processing, access, correction of incomplete or outdated data, anonymisation, blocking or deletion of unnecessary or excessively processed data, portability, information about entities with which data has been shared, information about the consequences of refusing consent, withdrawal of consent, and review of decisions taken solely on automated processing. Under the GDPR and the UK GDPR, the rights of access, rectification, erasure, restriction, portability and objection apply, together with the right not to be subject to a decision based solely on automated processing.

Requests go to support@hourwise.online. Identity is verified before a request is actioned, using the minimum information needed. Requests are answered within the statutory period — immediately in simplified form, or within 15 days in full, under LGPD Article 19, and within one month under the GDPR, extendable where the law allows.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Complaints

A complaint may be lodged with the Autoridade Nacional de Proteção de Dados in Brazil, with a supervisory authority in the European Economic Area member state of residence, or with the Information Commissioner's Office in the United Kingdom. Raising the matter with Hourwise first is welcome but is not a precondition.

Protection measures

Transport encryption is applied across the site, administrative access is restricted to the smallest number of people able to operate it, and processors are selected on the basis of their published technical and organisational measures. No method of transmission or storage is entirely free of risk, and no absolute assurance of safety is offered.

Children

This site is directed at an adult audience and is not intended for anyone under 18 years of age. Personal data is not knowingly collected from children or adolescents. Where it comes to light that such data has been collected, it is deleted; notice may be sent to the support address.

Changes

This policy may be revised. The date above records the current version, and material changes are reflected on this page. Continued use of the site after a revision is published indicates acceptance of the revised policy, except where the applicable law requires fresh consent.