Privacy policy

This policy explains how Sampa Natação (“Sampa Natação”, “we”) handles the personal data of people who visit the sampanatacao.com.br website, contact us or use the training app, in compliance with Brazil’s General Data Protection Law (Law No. 13,709/2018 — LGPD).

1. Who the controller is

Sampa Natação, based in São Paulo/SP, Brazil. For any matter regarding your data, contact our data protection officer at contato@sampanatacao.com.br.

2. What data we collect

• Contact and trial class form: name, email, phone, interest and the message you write.
• Student registration in the app: name, email, mobile number, date of birth, swimming experience, goals and password (stored only in encrypted form).
• Health data (sensitive data): health conditions, injuries or surgeries and regular medications that you choose to provide at registration.
• Training and performance: attendance, workouts, assessments, race results, feedback and imported activities (FIT files or Garmin integration, if you connect it), such as distance, time, pace and heart rate.
• Payments: details of the plan purchased and of the charges. Card details are provided directly to the payment processor and are not stored by us.
• Browsing: IP address, browser and access logs, for security; and, only if you accept, usage data collected by Google Analytics.

3. Why we use it and on what legal basis

• Replying to contacts and scheduling the trial class — pre-contractual steps (art. 7, V).
• Providing lessons, planning and monitoring workouts, managing your account and sending notices — performance of a contract (art. 7, V).
• Using health data to adapt workouts safely — specific and highlighted consent (art. 11, I), given at registration and revocable at any time.
• Billing, issuing documents and tax obligations — compliance with a legal obligation and performance of a contract (art. 7, II and V).
• Security, fraud prevention and access logs — legitimate interest and the Brazilian Internet Civil Framework (art. 7, IX).
• Website and app usage statistics (Google Analytics) — consent (art. 7, I), via the cookie banner.

4. Children and adolescents

Data of students under 18 is provided and managed by their parents or legal guardians, who give consent on their behalf, always in the best interest of the child (art. 14 of the LGPD).

5. Who we share it with

We do not sell your data. We share only what is necessary with:

• Payment processor (Asaas), to create and collect charges;
• Hosting, storage and email providers that run the website and the app;
• Garmin, only if you connect your account to import activities;
• Google (Analytics), only if you accept analytics cookies;
• Public authorities, when required by law or court order.

Some of these providers may store data outside Brazil, with the safeguards set out in the LGPD for international transfers.

6. Cookies

• Essential: keep you signed in to the app and store your cookie choice. They cannot be turned off.
• Analytics (Google Analytics): only enabled if you click “Accept”. You can change your mind at any time under “Cookie preferences” in the website footer.

7. How long we keep it

• Contacts that did not become enrollments: up to 12 months.
• Student data: while the account is active and, afterwards, for the period required by law.
• Tax and payment data: for the legal period (generally 5 years).
• Access logs: 6 months (Brazilian Internet Civil Framework).

8. Your rights

At any time, you can: confirm whether we process your data, access it, correct it, request anonymization, blocking or deletion, request portability, find out who we share it with, withdraw consent and object to processing (art. 18 of the LGPD). Just write to contato@sampanatacao.com.br. We reply within 15 days. You can also file a complaint with the Brazilian National Data Protection Authority (ANPD).

9. Security

We use encrypted connections (HTTPS), hashed passwords, role-based access control and audit logs of the team’s actions. No system is 100% secure; if a relevant incident occurs, we will notify those affected and the ANPD.

10. Changes

We may update this policy. The date at the top indicates the current version; relevant changes will be announced on the website or in the app. See also the Terms of use.