Privacy Policy

1. Data Controller

This website (ibanlopez.com) is operated by Ibán López Delgado, acting in association with REGISTRA UP LTDA (CNPJ: 60.328.053/0001-68), headquartered in Florianópolis, Santa Catarina, Brazil. For any inquiries regarding personal data processing or to exercise statutory privacy rights, the designated contact channel is iban@registraup.com.

2. Personal Data We Collect

We adhere to strict data minimization principles. We do not engage in behavioral cross-site tracking, sell personal data, or deploy invasive tracking pixels. The personal information processed is limited to:

• Voluntary Correspondence & Inquiries: When you send an email or submit a form via the site, we collect your name, email address, message body, and explicit consent timestamp.
• Publication Waitlists: When you subscribe to updates for The Discipline of Not Building or operational briefings, we collect your email address and recording timestamp based on explicit affirmative consent.
• Technical Telemetry & Performance Metrics: We utilize privacy-preserving edge analytics (Vercel Analytics and Speed Insights) to monitor performance, error rates, and load times. This telemetry does not utilize persistent cookies, build user profiles, or store raw IP addresses.

3. Legal Bases for Processing

Data processing operations are strictly grounded in applicable legal bases under Article 7 of the Brazilian General Data Protection Law (LGPD) and Article 6 of the European General Data Protection Regulation (GDPR):

• Consent (Art. 7, I, LGPD / Art. 6(1)(a), GDPR): For sending publication announcements, book release notifications, and newsletters where affirmative opt-in was provided.
• Legitimate Interests & Contractual Pre-steps (Art. 7, V & IX, LGPD / Art. 6(1)(b) & (f), GDPR): For responding to professional inquiries, executive advisory proposals, and ensuring site security and availability.

4. Your Statutory Rights

Regardless of your jurisdiction, you maintain full control over your personal information. Under LGPD and GDPR, you have the right to:

• Request confirmation of the existence of data processing.
• Access and obtain a copy of the personal data held about you.
• Rectify incomplete, inaccurate, or outdated records.
• Request deletion, anonymization, or blocking of unnecessary or non-compliant data.
• Revoke previously granted consent at any time without retroactive penalty.

To exercise any of these rights, email iban@registraup.com with your request. We respond within the statutory timeframe (typically within 5 business days).

5. Data Storage, Retention, and Security

All data in transit is encrypted using modern TLS (Transport Layer Security) protocols. Stored data is maintained in access-controlled, encrypted serverless environments. Waitlist entries are retained until the subscriber unsubscribes or requests deletion. Advisory correspondence is archived for reference throughout active professional engagements and purged thereafter.