your data, plainly

1. Who we are

341 Creative Hub (“341”, “we”, “us”) is an independent brand building and trend intelligence studio with teams in São Paulo, New York, Madrid and Bologna. We are the controller of the personal data collected through 341creativehub.com and through our lead forms, including forms we run on LinkedIn.

For anything related to your data, write to hello@341creativehub.com.

2. What we collect

We only collect what you choose to give us, plus the minimum technical data needed to keep our forms working and secure.

• Report requests. Name, email address, phone, company and role, and the report you asked for.
• Newsletter and waitlists. Name and email address, and the list you joined.
• Contact and proposal forms. Name and email address, and any details you add, such as phone, country, company, role, industry and your message.
• LinkedIn Lead Gen Forms. The details you submit through a 341 form on LinkedIn, typically name, email address, company, job title and country. LinkedIn may pre-fill these from your profile, and you can edit them before sending.
• Technical data. A one-way, shortened hash of your IP address stored with report requests to prevent abuse, and the standard server logs kept by our hosting provider.

We do not ask for, and ask you not to send us, sensitive data such as health information.

3. How we use it, and why we are allowed to

• To deliver the report you requested, by sending a personal access link to your email. Legal basis: your consent and your request.
• To send our newsletter and occasional emails about new reports, workshops and events. Legal basis: your consent, which you can withdraw at any time.
• To reply to your message or prepare a proposal. Legal basis: steps taken at your request before a possible contract, and our legitimate interest in answering people who contact us.
• To keep our forms secure and prevent spam and misuse. Legal basis: our legitimate interest.

These bases apply under the EU General Data Protection Regulation (GDPR), the UK GDPR and the Brazilian General Data Protection Law (LGPD, Law 13.709/2018). We do not use your data for automated decisions that have legal or similarly significant effects on you.

4. We do not sell your data

We never sell, rent or trade your personal data, and we do not share it with third parties for their own advertising or marketing.

5. Who helps us

A small number of service providers process data on our behalf, only to run the services described here and under data processing terms:

• Hostinger, which hosts our website, our forms and our email.
• LinkedIn, when you submit one of our Lead Gen Forms. LinkedIn also processes that data under its own privacy policy.
• Google Fonts, which serves the typefaces on our pages and receives your IP address to do so.
• An email delivery provider, if we use one to send our newsletter.

We may also disclose data where the law requires it.

6. International transfers

Our team works across Brazil, the United States, Spain and Italy, and our providers may process data in other countries. When your data moves outside the European Economic Area, the United Kingdom or Brazil, we rely on recognised safeguards, such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum and the transfer mechanisms set out in the LGPD.

7. How long we keep it

• Report requests, newsletter and waitlists: until you unsubscribe or ask us to delete your data. We also remove contacts who have not engaged with our emails for 24 months.
• Messages and proposal requests: up to 24 months after our last exchange, unless we start working together.
• Report access cookie: up to 180 days in your browser.

8. Your rights

Wherever you are, you can ask us to:

• confirm whether we hold data about you, and give you a copy;
• correct data that is incomplete, inaccurate or out of date;
• delete your data, or anonymise or block it;
• send your data to you or to another provider in a portable format;
• tell you who we have shared it with;
• stop or restrict processing, or object to processing based on our legitimate interest;
• withdraw your consent at any time, without affecting processing already carried out.

These rights come from the GDPR, the UK GDPR and Article 18 of the LGPD. To unsubscribe from our emails, simply reply to any of them or write to us.

If you are not satisfied with our answer, you can complain to a data protection authority: the Information Commissioner’s Office (ICO) in the United Kingdom, the Garante per la protezione dei dati personali in Italy, the Autoridade Nacional de Proteção de Dados (ANPD) in Brazil, or the authority where you live or work in the EU.

9. Deletion and other requests

Email hello@341creativehub.com with the subject “Privacy request” and tell us what you would like us to do. We may ask you to confirm your identity from the email address we hold. We answer within 15 days, and always within the deadline set by the law that applies to you. When we delete your data, we remove it from our website records and our email lists and confirm by email.

10. Cookies

On the Sensory Identity course page we use the Meta pixel to measure our ads, only if you accept it in the cookie notice. It tells Meta that you visited the page or sent a form, so we can see which ads work. If you choose "No thanks", it is never loaded. Our ticketing provider, Ticket Tailor, may use the same pixel on its checkout pages. Apart from this, we do not use advertising or analytics cookies. When you open your personal report link, we set one essential cookie so the report stays unlocked in that browser. It contains your email address in encoded form and a signed access token, is used for nothing else and expires after 180 days. You can delete it at any time in your browser settings.

11. Security

Our site runs over HTTPS, our form endpoints are protected against automated abuse, and access to stored data is limited to the people who need it to answer you. No system is completely secure, but we work to protect your data and will act promptly, and notify you and the authorities where required, if a breach ever affects it.

12. Children

Our site and reports are made for professionals. We do not knowingly collect data from anyone under 16.

13. Changes to this policy

We will update this page if the way we handle data changes, and change the effective date at the top. If a change is significant, we will tell the people on our lists by email.

Questions about this policy: hello@341creativehub.com