SIGN IN
0
$0.00
PrivacyTermsCookiesRefundsShippingDisclaimerAccessibilityAcceptable UseImpressum

Privacy Policy

Effective Date: September 11, 2026

Last Updated: September 11, 2026

1. Overview and Scope

This Privacy Policy explains how Lucas Silva ("we," "us," or "our") collects, uses, protects, and discloses personal information when you visit, interact with, or make a purchase through our website at https://lucassilva.com (the "Site"). Our platform provides written and video content covering lifestyle productivity, personal development, wellness, and local insights, alongside retail merchandise fulfilled in partnership with third-party print-on-demand providers and direct digital offerings.

This Privacy Policy governs your use of the Site and should be read alongside our Terms of Service, Cookie Policy, Shipping Policy, Refund Policy, and Disclaimer Policy. By accessing or using the Site, submitting a form, or purchasing products, you acknowledge the data collection and processing practices described herein.

2. Categories and Sources of Personal Data We Collect

We collect personal information directly from you when you submit details across our forms, automatically through your device and browser interactions, and through our authorized third-party service providers.

A. Information You Provide Directly

  • Account and Contact Information: When you subscribe to our email newsletter, contact us via our online submission forms, or complete a purchase, we collect your first name, last name, and email address. An online customer account is automatically provisioned for you upon newsletter registration or checkout, and login credentials (username and temporary password) are securely transmitted to your provided email address.
  • Order and Delivery Details: When you purchase physical goods or digital products, we collect your first name, last name, email address, phone number (if provided), shipping address, and billing address to fulfill and dispatch your order.
  • Customer Inquiries and Correspondence: When you email us directly at hello@lucassilva.com or contact us through site forms, we retain the contents of your message, attachments, and our replies for customer support and dispute resolution.

B. Information Collected Automatically

  • Device and Technical Information: We automatically log your Internet Protocol (IP) address, operating system, web browser type, referral URLs, language settings, and device identifiers.
  • Site Activity and Telemetry: We collect behavioral metrics regarding the pages you view, links clicked, time spent on specific pages, scroll depth, and interaction with cart and checkout sequences.
  • Cookies and Tracking Technologies: As detailed in our Cookie Policy, we use essential session cookies, cart management cookies, analytics scripts, and advertising tags to ensure secure purchasing, fraud monitoring, traffic analysis, and ad serving.

C. Payment Information

We do not collect, process, or store complete payment card numbers or bank account credentials on our servers. All financial transactions are transmitted directly to certified PCI-DSS compliant third-party payment gateways, including Stripe, PayPal, and Apple Pay. We receive only transaction identifiers, masked card digits (e.g., last four digits), card brand, and payment status indicators necessary for accounting, fraud prevention, and order validation.

3. Third-Party Disclosures and Service Providers

We do not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial marketing purposes. We share personal data strictly with trusted service providers who assist us in operating the Site, conducting our business, and fulfilling your orders:

  • Print-on-Demand Order Fulfillment: We partner with Printful to fulfill and manufacture our physical retail merchandise. When you place an order, your first name, last name, shipping address, and product details are securely transmitted to Printful to enable manufacturing, packaging, and parcel carrier delivery.
  • Payment Processing: We partner with Stripe, PayPal, and Apple Pay to verify and process payments. These gateways process your financial data under their respective independent privacy notices and banking compliance mandates.
  • Visitor Analytics: We use Google Analytics to examine aggregated visitor traffic, site performance, and engagement trends. Google Analytics collects truncated IP addresses and cookie identifiers to produce statistical reporting.
  • Advertising Networks: We integrate Google AdSense to serve contextual and interest-based display advertising. Google AdSense may deploy cookies or web beacons to serve advertisements based on your prior visits to this and other websites across the Internet.
  • Infrastructure and Automation Providers: We use technical service providers for website hosting, digital content delivery, transactional email routing, security firewalls, and checkout funnel optimization. These processors are contractually bound to process data only on our documented instructions.
  • Legal and Statutory Obligations: We may disclose personal data if required to do so by applicable law, court order, subpoena, or governmental regulation, or if we believe in good faith that such disclosure is necessary to protect our legal rights, investigate fraud, or prevent imminent harm.

4. Sensitive Data and Automated Profiling

We do not collect, solicit, or process sensitive personal information, including government-issued identifiers, biometric identifiers, health or medical data, genetic information, philosophical or religious beliefs, union membership, racial or ethnic origin, or precise geolocation coordinates. Furthermore, we do not engage in automated individual decision-making, profiling, or automated processing that produces legal or similarly significant effects concerning consumers.

5. Data Retention Schedule and 30-Day Erasure Standard

We retain your personal data only for as long as necessary to fulfill the specific purposes outlined in this Privacy Policy, satisfy our statutory reporting mandates, and enforce our legal agreements:

  • User Account Records: Retained for the lifetime of your active customer account or until you submit a verified account deletion request.
  • Financial, Order, and Billing Invoices: Retained for a mandatory statutory period of seven (7) years following the transaction date to comply with corporate tax laws, financial auditing standards, and sales recordkeeping obligations.
  • Marketing Subscriptions and Newsletter Profiles: Retained until you opt out or unsubscribe via the automated link embedded in every email dispatch, or until you submit a verified deletion request.
  • Analytics Logs and Security Records: Retained for a rolling window of 14 to 26 months, after which aggregated visitor logs and server access traces are automatically purged or permanently anonymized.

Strict 30-Day Erasure Standard: Upon receiving and verifying a consumer's data deletion request (Right to Erasure / Right to be Forgotten), all corresponding personal data across our primary databases and active processing systems will be permanently and completely erased within thirty (30) calendar days, except for transaction records that we are legally mandated to retain under federal, state, or international tax and corporate accounting laws.

6. Children's Privacy

Our website, products, and services are designed for a general audience and are not directed to children under the age of 13. We do not knowingly collect, solicit, or maintain personal data from children under 13 without verifiable parental or guardian consent. Individuals between the ages of 13 and 17 may access the Site only under the supervision of a parent or legal guardian who agrees to be bound by our Terms of Service. If we learn that we have unintentionally collected personal information from a child under 13, we will immediately delete that information from our servers. Parents or guardians who believe their child has provided us with personal information may contact us directly at hello@lucassilva.com.

7. Data Security Measures

We implement technical and organizational security controls designed to safeguard your personal data against accidental loss, unauthorized access, disclosure, alteration, and destruction. All web traffic between your browser and our servers is encrypted using Secure Sockets Layer / Transport Layer Security (SSL/TLS) technology. Payment transactions are handled entirely through encrypted, tokenized interfaces via Level 1 PCI-DSS compliant processors. Despite these safeguards, no transmission over the Internet or electronic storage system is completely impenetrable, and we cannot guarantee absolute security.

European Union, United Kingdom, and Swiss Data Protection Rights

If you reside within the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, your personal data is processed in accordance with Regulation (EU) 2016/679 (EU GDPR), the Data Protection Act 2018, the UK GDPR, and the UK Data (Use and Access) Act 2025.

Lawful Bases for Processing

We process your personal information under the following lawful bases established under Article 6 of the GDPR:

  • Performance of a Contract (Art. 6(1)(b)): Processing order information, shipping coordinates, and account provisioning necessary to deliver purchased merchandise or digital assets.
  • Legitimate Interests (Art. 6(1)(f)): Analyzing site performance, preventing fraudulent transactions, optimizing our digital presence, and maintaining platform security.
  • Consent (Art. 6(1)(a)): Delivering promotional newsletters and deploying non-essential cookies or advertising tracking mechanisms, which you may revoke at any time.
  • Legal Obligation (Art. 6(1)(c)): Retaining fiscal transaction invoices for statutory corporate reporting and tax audits.

Your Statutory Rights

Subject to statutory conditions, you hold the following rights regarding your personal data:

  • Right of Access: Obtain confirmation as to whether your data is being processed and receive a copy of your personal data.
  • Right to Rectification: Request correction of inaccurate, incomplete, or outdated personal data.
  • Right to Erasure ("Right to be Forgotten"): Request total deletion of your personal data within thirty (30) days, subject to legal recordkeeping exemptions.
  • Right to Restriction of Processing: Request temporary suspension of data processing in specified circumstances.
  • Right to Data Portability: Receive your provided data in a structured, commonly used, and machine-readable format.
  • Right to Object: Object to processing carried out under legitimate interest grounds or direct marketing.
  • Right to Withdraw Consent: Withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

International Data Transfers

Our operations and primary servers are situated in the United States. Where personal data originates in the EEA, UK, or Switzerland and is transferred internationally, we ensure appropriate safeguards are implemented pursuant to Chapter V of the GDPR, including the execution of standard contractual clauses (SCCs) approved by the European Commission or the UK International Data Transfer Addendum.

UK Information Commissioner's Office (ICO) Escalation

If you reside in the United Kingdom and believe that our data processing infringes your statutory rights under the UK GDPR or the UK Data (Use and Access) Act 2025, you have the right to lodge an unresolved complaint directly with the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom
Helpline: +44 303 123 1113 | Website: https://ico.org.uk

EEA residents may submit complaints to their local national Data Protection Authority (DPA).

United States Multi-State Privacy Disclosures

This section supplements our Privacy Policy for residents of United States jurisdictions with comprehensive state privacy statutes, including California (California Consumer Privacy Act, as amended by the California Privacy Rights Act, "CCPA/CPRA"), Virginia (Consumer Data Protection Act, "CDPA"), Colorado (Colorado Privacy Act, "CPA"), Texas (Texas Data Privacy and Security Act, "TDPSA"), Utah (Utah Consumer Privacy Act, "UCPA"), and Oregon (Oregon Consumer Privacy Act, "OCPA"). This section also reflects our proactive compliance and readiness for upcoming statutes, including the Louisiana Data Privacy Act (effective January 1, 2027) and the Vermont Data Privacy and Online Surveillance Act (effective January 1, 2028).

Notice at Collection: Categories Collected and Disclosed

In the preceding twelve (12) months, we have collected the following statutory categories of personal information:

  • Identifiers: Legal name, mailing address, billing address, email address, IP address, and unique online identifiers. (Disclosed to print-on-demand fulfillment partners, payment processors, and analytics providers).
  • Commercial Information: Records of products viewed, ordered, or considered, and purchasing histories. (Disclosed to fulfillment and payment processors).
  • Internet or Other Electronic Network Activity: Browsing history, search queries on our Site, and interaction telemetry. (Disclosed to Google Analytics and Google AdSense).
  • Geolocation Data: Coarse geolocation derived from IP addresses (city/country level).

Sales, Sharing, and Targeted Advertising Disclosures

We do not sell personal data for monetary compensation. However, our deployment of third-party advertising tags (such as Google AdSense) may constitute "sharing" or "processing for targeted advertising" under certain state laws. We do not sell or share the personal data of consumers under 16 years of age without affirmative opt-in consent.

Your Consumer Privacy Rights

Depending on your state of residence, you may exercise the following rights regarding your personal information:

  • Right to Know and Access: Request disclosure of the specific pieces and categories of personal information collected, sources, purposes, and categories of third parties to whom data was disclosed.
  • Right to Delete: Request deletion of personal data collected directly from you, subject to legal record retention exemptions, executed within thirty (30) days.
  • Right to Correct: Request correction of inaccurate personal information maintained in our systems.
  • Right to Opt Out of Sale, Sharing, and Targeted Advertising: Direct us to stop sharing your personal data for cross-context behavioral advertising or targeted marketing.
  • Right to Non-Discrimination: We will not deny goods, charge differential prices, or provide a degraded level of service because you exercised any statutory privacy right.

Exercising Your Rights and Appeals

To exercise your rights, email us at hello@lucassilva.com with the subject line "U.S. State Privacy Request." If we deny your privacy request under state law (such as in Virginia, Colorado, or Texas), you may appeal our decision by replying directly to our determination email with the subject line "Privacy Appeal." We will respond to your appeal within forty-five (45) days explaining our written determinations.

Canadian Privacy Notice (PIPEDA & Quebec Law 25)

This section governs the collection, use, and disclosure of personal data belonging to residents of Canada pursuant to the Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial legislation, including Quebec's Act Respecting the Protection of Personal Information in the Private Sector ("Law 25").

Consent and Accountability

We collect and process your personal data based on your meaningful, express, or implied consent obtained at the point of collection, except where statutory exceptions apply. You may withdraw consent at any time, subject to legal or contractual constraints, by contacting our Privacy Contact.

Cross-Border Transfers

Your personal information is stored and processed on servers located in the United States and may be accessible to United States law enforcement or regulatory bodies under lawful local orders.

Quebec Law 25 Routing and Privacy Officer Contact

Pursuant to Quebec Law 25, Lucas Silva assumes the functions of Privacy Officer. You may submit requests to access, rectify, or withdraw consent regarding your personal data, or report privacy governance inquiries, directly to our Privacy Officer via email at hello@lucassilva.com with the subject line "Attention: Privacy Officer / Quebec Law 25 Inquiry." Canadian residents may also contact the Office of the Privacy Commissioner of Canada (OPC) at https://www.priv.gc.ca.

Australian Privacy Principles (Privacy Act 1988)

This section applies to individuals located in Australia whose personal information is collected by Lucas Silva in accordance with the Privacy Act 1988 (Cth) and the thirteen Australian Privacy Principles (APPs).

Collection and Cross-Border Disclosures

We collect personal information reasonably necessary to manage our digital platform, process retail orders, provide customer support, and distribute newsletters. By providing your personal information, you acknowledge that your data will be transferred to and stored in overseas facilities, primarily located in the United States. We take reasonable steps to ensure overseas recipients handle your personal information consistently with the APPs.

Access, Correction, and Inquiries

You have the right to request access to personal information we hold about you and to seek correction of inaccurate or incomplete records. Inquiries and access requests may be directed to hello@lucassilva.com.

Lodging Complaints with the OAIC

If you believe our processing of your personal information breaches the Australian Privacy Principles and we have failed to resolve your complaint within thirty (30) days, you may refer your grievance to the Office of the Australian Information Commissioner (OAIC):

Office of the Australian Information Commissioner (OAIC)
GPO Box 5218, Sydney NSW 2001 | Telephone: 1300 363 992 | Website: https://www.oaic.gov.au

New Zealand Privacy Act 2020 Notice

This section outlines our commitments to individuals located in New Zealand pursuant to the New Zealand Privacy Act 2020 and its twelve Information Privacy Principles (IPPs).

We collect personal information directly from you for lawful purposes connected to our publishing and merchandise operations. When transferring personal data outside New Zealand to overseas third-party service providers (such as Printful for fulfillment or Stripe for payment processing), we take reasonable measures to satisfy Information Privacy Principle 8, ensuring overseas entities are subject to privacy safeguards comparable to the Privacy Act 2020.

You are entitled to request access to and correction of any personal data we hold about you. To submit a request, contact hello@lucassilva.com. If you are dissatisfied with our response, you may contact the Office of the New Zealand Privacy Commissioner at https://www.privacy.org.nz.

South Africa Protection of Personal Information Act (POPIA)

This section provides statutory disclosures for data subjects located in the Republic of South Africa pursuant to the Protection of Personal Information Act, 2013 (POPIA).

Lawful Processing and Purpose Specification

We process personal information lawfully, transparently, and only for specific, explicitly defined purposes relating to retail order fulfillment, customer support, and direct communications where consent or legitimate interest exists.

Cross-Border Data Flows

In accordance with Section 72 of POPIA, personal data collected from South African residents is transferred to and processed in the United States. We ensure the recipient third parties are subject to binding agreements or corporate rules that uphold principles for reasonable processing substantially similar to POPIA.

Information Officer and Information Regulator Escalation

You have the right to request access to, correction of, or deletion of your personal information held by us. Contact our designated representative at hello@lucassilva.com. If any complaint regarding our handling of your personal data remains unresolved, you have the statutory right to lodge an official complaint with the South African Information Regulator:

The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Email: enquiries@inforegulator.org.za | Website: https://inforegulator.org.za

8. Exercising Your Data Subject Access Rights (DSAR)

To exercise any statutory data protection rights described in this policy—including requests for access, rectification, portable data copies, or permanent account deletion—please submit a verifiable request through either of our official channels:

  • Email: Send a detailed message to hello@lucassilva.com with the subject line "Data Subject Access Request."
  • Online Contact Form: Submit an inquiry through the contact portal on our Site.

To protect your privacy and ensure data integrity, we must verify your identity before processing any data access or erasure request. We will verify your identity by matching information you provide against the data points currently maintained in our systems (such as confirming your registered email address or recent order transaction number). You may also designate an authorized agent to make requests on your behalf, provided you provide written authorization and verify your identity directly with us.

We respond to all verified requests within thirty (30) calendar days. If your request is exceptionally complex, we may extend our response period as authorized by applicable law, providing you with written notification and explanation of the extension within the initial 30-day window.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect enhancements to our digital platform, operational adjustments, or updates in statutory compliance laws. When changes occur, we will revise the "Last Updated" date at the top of this document. Material changes will be accompanied by prominent notice on our Site or direct email notification to registered account holders prior to the changes taking effect. Your continued use of https://lucassilva.com following any update signifies your acknowledgement of the revised policy.

10. Contact Information

If you have questions, comments, or concerns regarding this Privacy Policy or our personal data management practices, please contact us:

Lucas Silva
San Francisco, California, United States
Website: https://lucassilva.com
Email: hello@lucassilva.com

close icon
Login
0
$0.00