Privacy and data handling

Who is responsible

Statriva Data Analytics, a company registered in Brazil under CNPJ 68.425.798/0001-57, based in Fortaleza, Ceará, Brazil, is the controller of the personal data described here. All analysis work is performed personally by Arlene Santisteban Campos, founder and lead analyst.

Data protection contact: statriva@gmail.com.

What data we handle

Two very different categories:

• Client contact data: name, email address, phone number and the content of the messages you send us. Used only to quote, deliver and support your project, and to issue invoices.
• Research data you upload: your dataset, questionnaires, codebooks, drafts and any related files. We process this material strictly as your processor, following your instructions and only for the agreed analysis.

This website is static. It uses no advertising cookies, no tracking pixels, no analytics profiling and no third-party marketing scripts. The only value stored in your browser is your light or dark theme preference, kept locally on your device.

Legal basis

Under the Brazilian General Data Protection Law (LGPD, Law 13.709/2018) and the EU General Data Protection Regulation (GDPR), we process data on the basis of performance of a contract with you (article 7, V of the LGPD; article 6(1)(b) of the GDPR) and, for record keeping and invoicing, compliance with a legal obligation.

If your dataset contains sensitive or health-related personal data, you remain the controller of that data and confirm, when sending it, that you hold the necessary consent or ethics committee approval for the analysis to be carried out.

Minimisation: what not to send

We ask you to remove or replace direct identifiers before sending a dataset: names, national ID or medical record numbers, addresses, phone numbers, emails and exact dates of birth. A coded identifier (ID 001, ID 002) is almost always enough for the analysis.

If your design genuinely requires identifiers to stay in the file, tell us beforehand and we will agree the handling in writing, with an NDA in place.

Storage and security

• Files are stored on access-controlled, password-protected and encrypted devices and accounts, protected by two-factor authentication where the provider supports it.
• Only Arlene Santisteban Campos accesses client files. Work is never subcontracted, outsourced or passed to a third-party team.
• Datasets are never uploaded to public tools, public repositories or generative AI services, and are never used to train AI models.
• Transfers happen through the Fiverr platform, through email, or through a link you provide. If you prefer an encrypted archive with a password sent by a separate channel, we will use it.

Retention and deletion

Project files are kept only while the project and its support window are open. By default everything is permanently deleted 12 months after final delivery, so that we can answer later questions from your advisor or from reviewers.

You can ask for immediate deletion at any moment, before or after that period, by writing to statriva@gmail.com. Deletion is carried out within 5 business days and confirmed to you in writing. Invoices and tax records are kept for the period Brazilian law requires, and contain no research data.

Sharing

We do not sell, rent or share your data. The only third parties involved are the infrastructure providers strictly needed to communicate and receive payment, such as the Fiverr marketplace when the project is contracted there, the email provider, and the payment processors. None of them receives your research data for any purpose of their own.

Your rights

You may at any time request confirmation of processing, access, correction, anonymisation, portability, restriction or deletion of your data, and withdraw consent, by writing to statriva@gmail.com. We answer within 15 days.

Changes

If this policy changes, the new version is published on this page with an updated date. Material changes affecting an ongoing project are communicated to the client directly.