Privacy Policy

‍ ‍1.  Overview

This Privacy Policy explains how personal information is collected, used, and shared when you visit SamiaFirmino.com (the “Website”). The Website is operated by Samia Firmino, an independent researcher and speaker based in Brazil, working at the intersection of artificial intelligence, child safety, and human rights.

Samia Firmino operates this Website as an individual (pessoa física) and is the data controller responsible for the personal information processed through it, as defined under Brazil's Lei Geral de Proteção de Dados (LGPD — Law No. 13,709/2018), which recognises natural persons as controllers. For all data protection enquiries, requests, or concerns, please contact contact@SamiaFirmino.com.

This Website is hosted and powered by Squarespace, Inc. Some of the data described in this Policy is collected or processed by Squarespace as a data processor (operador) acting on behalf of Samia Firmino, and some is collected by Squarespace for its own purposes as an independent data controller. Where relevant, both roles are identified below.

By using this Website, you acknowledge the practices described in this Policy.

2.  Information We Collect

2.1  Website Visitors (Squarespace Hosting)

Because this Website is hosted by Squarespace, Squarespace automatically collects certain technical information when you visit, including:

–        Information about your browser, network, and device

–        Web pages you visited before arriving at this Website

–        Web pages you view while on this Website

–        Your IP address

Squarespace uses this information to operate and maintain the Website and to protect and improve its platform and services. For more detail on how Squarespace handles visitor data, please review the Squarespace Privacy Policy.

2.2  Site Analytics

This Website uses Squarespace's built-in analytics tools to understand how visitors engage with our content. Analytics data may include:

–        Information about your browser, network, and device

–        Web pages you visited prior to coming to this Website

–        Your IP address

–        Clicks, internal links, pages visited, scrolling behaviour, searches, and timestamps

This information is shared with Squarespace as our analytics provider solely to help us understand site traffic and activity. It is not used for advertising or sold to third parties.

‍ ‍

2.3  Cookies and Similar Technologies

This Website uses cookies and similar technologies — small files or pieces of text that download to your device when you access a website. Two categories of cookies are in use:

–        Necessary and required cookies — always active; these allow Squarespace to securely serve this Website.

–        Analytics and performance cookies — activated only after you acknowledge the cookie banner; used to view site traffic and activity as described in Section 2.2.

For a full list of the cookies Squarespace drops, see The cookies Squarespace uses.

‍ ‍

2.4  Contact Form and Webform Submissions

When you submit information through a webform on this Website (for example, through the Contact page), we collect the data you enter — typically your name, email address, and message — in order to track and respond to your submission. This information is shared with Squarespace as our hosting provider so that it can provide website services and help us manage our correspondence with you. We do not use this information for any purpose beyond responding to your enquiry, unless you separately agree to a service relationship as described in Section 2.5.

‍

2.5  Proposals and Service Enquiries

If you contact us about a potential collaboration, speaking engagement, or other professional service, we may collect information necessary to negotiate, draft, or execute a service agreement. This may include:

–        Your name

–        Your email address

–        Your phone number

–        Business or project details (for example, scope, organisation, timeline)

This information is processed and stored securely through the Squarespace platform.

‍

3.  How We Share Information

3.1  Squarespace (Hosting and Analytics Provider)

As described above, personal information is shared with Squarespace, Inc., which acts as our hosting and analytics provider. Squarespace processes this data both as a data processor on our behalf and, in some cases, as an independent data controller for its own business purposes.

3.2  Social-Sharing Buttons

This Website includes share buttons that allow you to share pages or content to the following third-party platforms: Email, LinkedIn, X (formerly Twitter), and Facebook. If you click a share button, the relevant third party may receive:

–        Information about your browser, network, and device

–        Details about the page or content you shared or proposed to share

–        Your IP address

We do not control how these third parties use the information they receive. Please consult their respective privacy policies for further information.

3.3  No Sale of Personal Data

We do not sell, rent, or otherwise transfer your personal information to third parties for their own commercial purposes.

4.  Legal Basis for Processing (EEA / UK Visitors)

4.1 Brazil (LGPD)

Samia Firmino is based in Brazil, and this Website's data practices are governed by Brazil's Lei Geral de Proteção de Dados (LGPD — Law No. 13,709/2018). Under Article 7 of the LGPD, we rely on the following legal bases, as applicable to each processing activity:

–        Legitimate interests — for site analytics and security, assessed to ensure it does not override your fundamental rights and freedoms.

–        Performance of a contract or preliminary procedures — to respond to enquiries and negotiate or fulfil a service agreement you have requested.

–        Consent — for analytics and performance cookies, which are only activated after you acknowledge the cookie banner. You may withdraw consent at any time.

–        Compliance with a legal or regulatory obligation — where applicable law requires processing.

The Brazilian data protection authority, the Autoridade Nacional de Proteção de Dados (ANPD), oversees compliance with the LGPD. You may file a complaint with the ANPD if you believe your rights under the LGPD have not been respected.

As Samia Firmino operates this Website as an individual rather than through a registered business, certain LGPD compliance obligations may be simplified under the ANPD's rules for small-sized processing agents. This does not reduce your rights as a data subject, described in Section 6 below, and we apply the data protection principles in this Policy regardless of any such simplification.

4.2 Visitors From the European Economic Area, UK, and Other Jurisdictions

If you are accessing this Website from the EEA, UK, or another jurisdiction with its own data protection framework, that framework may also apply to the processing of your personal information, alongside the LGPD. As of January 2026, Brazil and the European Union recognise each other as offering an adequate level of data protection, which facilitates the flow of personal data between the two regions without the need for additional transfer safeguards. Where another framework grants you rights beyond those described in Section 6, we will honour those rights to the extent required by applicable law.

5.  Data Retention

Consistent with the necessity principle set out in Article 40 of the LGPD, we retain personal information only for as long as needed to fulfil the purpose for which it was collected, or as required by applicable law. Webform submissions and correspondence are retained for as long as needed to manage our relationship with you and for legitimate record-keeping purposes. Analytics data is retained in accordance with Squarespace's standard data retention practices. Once the purpose of collection has been fulfilled and no legal basis for further retention applies, we take steps to delete or anonymise the information.

6.  Your Rights

Under the LGPD and, where applicable, other data protection laws, you have the following rights with respect to your personal information:

–        Confirmation and access — the right to confirm whether we process your data, and to request a copy of the personal information we hold about you.

–        Correction — the right to have incomplete, inaccurate, or outdated information corrected.

–        Anonymisation, blocking, or deletion — the right to request that unnecessary, excessive, or unlawfully processed data be anonymised, blocked, or deleted.

–        Portability — the right to receive your information in a structured, commonly used, machine-readable format, or to have it transferred to another provider.

–        Deletion of data processed with your consent — the right to request deletion of personal data processed on the basis of your consent, subject to legal retention requirements.

–        Information about sharing — the right to be informed about which public and private entities we have shared your data with.

–        Information about the right to refuse consent — and the consequences of refusal, where consent is the basis for processing.

–        Withdrawal of consent — the right to revoke your consent at any time, free of charge, without affecting the lawfulness of processing carried out before withdrawal.

–        Review of automated decisions — the right to request review of decisions made solely through automated processing that affect your interests. This Website does not currently use automated decision-making in this sense.

To exercise any of these rights, please contact us at contact@SamiaFirmino.com. Under the LGPD, we aim to respond to your request within 15 days. If you are located in the EEA or UK, equivalent rights under the GDPR or UK GDPR apply, and we will respond within the timeframe required by that law.

You also have the right to lodge a complaint with the Brazilian data protection authority, the Autoridade Nacional de Proteção de Dados (ANPD), if you believe your rights under the LGPD have not been respected. Visitors in the EEA may contact their local supervisory authority, and UK residents may contact the Information Commissioner's Office (ICO).

7.  Children's Privacy

This Website is intended for adult professional audiences and is not directed at children or adolescents. Although Samia Firmino's research and advocacy concern child safety, this Website itself does not knowingly collect personal information from children, in line with Brazil's Statute of the Child and Adolescent (ECA) and the LGPD's heightened protections for minors' data (Article 14). If you believe a child has provided us with personal information, please contact us at contact@SamiaFirmino.com and we will take steps to delete it promptly.

8.  Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, or destruction, consistent with the security principle set out in the LGPD. Personal information submitted through this Website is processed and stored on Squarespace's secure platform. In the event of a security incident that creates risk or relevant harm to data subjects, we will notify the ANPD and affected individuals in accordance with the timelines required by Brazilian law. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

9.  International Data Transfers

This Website is operated from Brazil. If you are visiting from another country, your personal information may be transferred to and processed outside Brazil — including in the United States, where Squarespace is based. Under Article 33 of the LGPD, such international transfers are permitted where the destination country offers an adequate level of data protection, where appropriate contractual safeguards are in place, or where another legal basis recognised by the LGPD applies. As of January 2026, Brazil and the European Union have adopted mutual adequacy decisions, allowing personal data to move between the two regions without additional transfer mechanisms. For transfers to other countries, Squarespace relies on standard contractual clauses or other safeguards recognised by the ANPD where required.

10.  Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated policy will be posted on this page with a revised “Last updated” date. We encourage you to review this page periodically.

11.  Contact

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal information, please contact:

Samia Firmino

Email: contact@SamiaFirmino.com

Website: SamiaFirmino.com