Privacy Policy

Median Studio Digital Marketing Privacy Policy

Last updated: May 2026.

1. Identification and purpose of this Policy

The Median Studio Digital Marketing, also identified as Median Studio, respects the privacy and protection of personal data processed in its digital, commercial and institutional activities.

This Policy aims to inform, with transparency, which categories of personal data may be processed, for which purposes, with whom they may be shared, how long they may be stored and which rights are guaranteed to data subjects by Brazilian Law No. 13,709/2018, the General Personal Data Protection Law, LGPD.

2. Essential concepts

To make this Policy easier to understand, please consider that personal data is any information related to an identified or identifiable natural person; data subject is the person to whom the data refers; processing is any operation carried out with personal data; controller is the party that makes decisions about processing; processor is the party that processes data on behalf of the controller; and data protection officer is the channel indicated to receive communications about privacy and data protection.

In the context of this website and Median Studio institutional channels, Median Studio generally acts as controller of personal data. In projects carried out for clients, it may act as processor, according to the contract and applicable instructions.

3. Personal data we may process

Median Studio processes only data that is compatible with its activities, with the purpose of the interaction and with the applicable legal basis. Such data may include identification and contact information, professional or business data, messages sent through forms, emails, WhatsApp, telephone, social networks or other channels, information necessary for service, proposals, contracts, support, business relationship and service execution.

During website browsing, technical data may also be processed, such as IP address, cookies, pages accessed, date and time of access, visit source and general information about device, browser and use of the website.

Median Studio does not intentionally request sensitive personal data through its institutional website. If the data subject voluntarily sends this type of information, it will be processed only when necessary to evaluate, respond to or handle the request, subject to security measures and applicable legal bases.

4. Purposes of processing

Personal data may be processed to respond to contacts, questions and requests; analyze business demands; prepare proposals; execute contracts; provide support; maintain relationships with clients, partners and interested parties; send institutional or commercial communications when applicable; improve the website, its content and security; measure audience and campaign performance; comply with legal or regulatory obligations; and exercise rights in administrative, judicial or extrajudicial proceedings.

5. Legal bases used

The processing of personal data by Median Studio may be based, as applicable, on the data subject's consent, performance of a contract or preliminary procedures related to a contract, compliance with a legal or regulatory obligation, legitimate interest, regular exercise of rights or another legal basis provided by the LGPD.

When processing depends on consent, the data subject may revoke it at any time, subject to the practical consequences of revocation and the validity of processing carried out previously.

6. Cookies, tags and similar technologies

Median Studio website may use first-party and third-party cookies, tags, pixels and similar technologies for technical operation, security, navigation improvement, audience analysis, campaign measurement and integration with digital tools.

Necessary cookies may be used to allow the website to function properly. Analytical, functional or marketing cookies may depend on consent or another applicable legal basis, according to their purpose and the configuration adopted on the website.

The website may use tools such as Google Tag Manager and other analytics, measurement or digital marketing solutions. These tools may involve third parties, according to their technical configuration and the user's consent preferences.

The user may configure the browser to block or delete cookies, aware that some features may be affected. For more information, please also see the Cookie Policy.

7. Sharing of personal data

Median Studio does not sell personal data. Sharing may occur only when necessary, proportional and compatible with the purposes of this Policy.

Data may be shared with hosting, infrastructure, security, email, storage, technical support, communication tools, service, analytics, tag management, CRM, digital media, automation, marketing, technical partners involved in projects and public authorities, regulatory bodies, the Judiciary, accounting, auditing or legal advisory services, when there is a legal obligation, valid order or need to defend rights.

When third parties process personal data on behalf of Median Studio, they must do so according to instructions, legitimate purposes, security measures and applicable contractual or legal obligations.

8. International data transfer

Some technology, hosting, cloud, analytics, email, communication, digital media or service providers may store or process personal data outside Brazil. When this occurs, Median Studio will seek to use providers that adopt security measures and mechanisms compatible with the LGPD for international data transfers.

9. Storage and retention

Personal data will be kept for the time necessary to fulfill the purposes informed in this Policy, handle requests, provide services, comply with legal or regulatory obligations, preserve rights, maintain security records, prevent fraud and demonstrate compliance.

When data is no longer necessary, it may be deleted, anonymized or kept in a restricted manner when there is a legal, regulatory, contractual or legitimate basis for its retention.

10. Information security and incidents

Median Studio adopts reasonable technical, administrative and organizational measures to protect personal data against unauthorized access, loss, alteration, improper disclosure, destruction or inadequate processing.

No digital environment is completely risk-free. In the event of a security incident involving personal data, Median Studio will assess the nature of the event, the data involved, the risks to data subjects and the appropriate measures, including possible communication to data subjects and to the Brazilian National Data Protection Authority, when required by applicable law or regulation.

11. Data subject rights

Under the LGPD, the data subject may request, as applicable, confirmation of the existence of processing, access to data, correction of incomplete or outdated data, anonymization, blocking or deletion of unnecessary data or data processed in violation of the law, portability, information about sharing, revocation of consent, opposition to certain processing activities and review of decisions made solely based on automated processing, when applicable.

To exercise their rights, the data subject may contact brasil@medianstudio.com, preferably with the subject LGPD - Data Subject Request. Median Studio may request additional information to confirm the identity of the requester and protect the security of personal data.

12. Data of minors

Median Studio services and content are aimed at institutional, professional and business audiences. Median Studio does not direct its website to the intentional collection of personal data from children or adolescents. If unintentional processing is identified, the legal guardian may request evaluation, correction or deletion of the data through the channel indicated in this Policy.

13. Commercial communications and opt-out

Median Studio may send institutional, informational or commercial communications related to its services, content and relationships with clients or interested parties, always based on the applicable legal basis.

The data subject may request unsubscribe or object to receiving new communications, except for messages necessary for contract execution, legal compliance, security, requested service or administrative management.

14. Third-party links and platforms

Median Studio website may contain links to websites, social networks, maps, messaging platforms, third-party tools and external content. These environments have their own privacy policies and terms of use. Users are advised to read the respective policies before interacting with external platforms.

15. Updates to this Policy

This Privacy Policy may be updated periodically to reflect legal, regulatory, technical, operational or commercial changes. The current version will always be the one published on this page, indicating the date of the last update.

16. Privacy contact channel

In case of questions, requests, complaints or demands related to personal data, privacy and data protection, please contact us:

• Median Studio Digital Marketing
• Email: brasil@medianstudio.com
• Recommended subject: LGPD - Data Subject Request
• Website: www.medianstudio.com

Thank you for your understanding,
Median Studio Digital Marketing.