Privacy Policy
We ask for as little as possible, keep as little as possible and never sell your data. Here is everything, no small print.
Children first
- We don't collect children's data. The site is made for adults. The forms are for adults, and the book-story form asks you to confirm you are 18 or over.
- A child is never the product. No child is the focus, the hook or the selling point of anything paid, boosted, sold or made with brands, and children don't appear on the shop, book, brand or press pages. In a boosted post or an ad, a child may appear only in passing, as part of the family scene.
- The children in the family. Children are part of our family and may appear in some shared moments. We limit that exposure and respect their wish not to take part. They are not asked to perform for the camera or made the focus of the project. We keep school, routine and identifying location details out of our content. On the site, no child has a name, age or birth date: they are part of the count of 9 grandchildren (the only grandchild named on the site is Lira, who is an adult). Children do not appear on the brand, book, shop or press pages.
- Seen something that exposes a child? Write to ciao@agrandefamiglia.com with the link. These requests come before everything else.
In short
- We keep only what you type into the forms (name, e-mail, message) and your e-mail if you join a list and confirm.
- The site sets no cookies on visitors and uses no ad pixels.
- We use data about how the site and our messages are used, in aggregate, to improve what we do.
- We use your data to reply to you and send what you asked for. We never sell data.
- Messages are kept in a database on our own server, which can't be reached from the internet, and reach the family by e-mail.
- Want a copy, a correction or deletion? Write to ciao@agrandefamiglia.com.
The full policy
1. Who looks after your data
The one who decides how your data is handled (the "controller", under the GDPR and Brazil's LGPD) is OG Inc., a company based in the United States, which produces and runs A Grande Famiglia.
For anything about privacy, including requests for a copy, correction or deletion, write to ciao@agrandefamiglia.com with the subject "Privacy". A family member reads it.
As a small-scale processing agent, OG Inc. is not required to appoint a data protection officer (Brazil's "encarregado", ANPD Resolution CD/ANPD No. 2/2022). The channel for anything about your data is the e-mail above.
2. What we keep
| What | Where it comes from |
|---|---|
| Name, e-mail, subject, message and, if you tick it, permission to use your story with your first name | Contact form |
| Name, brand or company, work e-mail and your idea | Brands form |
| Name, publication, e-mail, deadline (optional) and your story idea | Press form |
| Name, where you're writing from (optional), the message, e-mail (optional) and your permissions | Messages for the grandparents (Bodas de Ouro, the golden anniversary) |
| Name, e-mail, the story, confirmation that you are 18 or over and your permission | Stories for the book |
| E-mail, the list you chose, WhatsApp (only if you fill it in), the date you asked and the date you confirmed | Lists (the family letter and other updates) |
| The page you sent it from, the date and time, and a scrambled code of your IP address (not the IP itself) | Every form: to stop spam and to keep proof of the message and of your consent |
| IP address, date, time and page requested | Technical server logs, kept by the hosting company |
We don't ask for sensitive data (health, religion, ethnic origin and so on). Please don't include it in your messages.
3. Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR · LGPD) |
|---|---|
| Replying to messages, press requests and brand proposals | At your request, before a possible contract (GDPR Art. 6(1)(b) · LGPD Art. 7, V) and our legitimate interest in replying (Art. 6(1)(f) · Art. 7, IX) |
| Sending the letters and updates you asked for | Consent, given in the tick box and confirmed by e-mail (Art. 6(1)(a) · Art. 7, I). Leave whenever you like |
| Showing messages on the wall, reading them to the grandparents, using a story with your first name | Consent, only if you tick the permission box |
| Stopping spam and keeping the site secure | Legitimate interest in security and, for server logs, complying with the law where it requires them to be kept |
| Defending our rights in a dispute | Legitimate interest / regular exercise of rights (Art. 6(1)(f) · Art. 7, VI) |
We make no automated decisions about you and build no advertising profiles.
5. Data that travels to other countries
OG Inc. is in the United States, so is the site's server, Metricool is in Spain and the family lives in Brazil, Portugal and Canada, so your data may be processed outside your country. Want to know which safeguards apply to your data in your case? Write to ciao@agrandefamiglia.com and we'll answer.
6. How long we keep it
- Contact and press messages: up to 2 years after our last exchange.
- Brand proposals and contracts: for as long as the conversation or contract lasts and then for as long as the tax and accounting law of the contract's country requires.
- Lists: until you leave. After that we keep only a record that you left (so we don't write again) and proof of your consent. Sign-ups that were never confirmed are deleted automatically after 30 days.
- Messages for the grandparents: until the end of the Bodas de Ouro season plus 1 year, or until you ask us to remove them.
- Stories for the book: until the end of the book's edition plus 1 year, or until you ask us to remove them. If your story goes into the book, it stays in the book.
- Scrambled IP code: kept with the message or sign-up, as proof that it was sent, for as long as that message or sign-up. The copy used only to count sends in the last hour is deleted after 1 day.
- Server logs: kept by the hosting company for as long as it keeps them, usually a few months, and used only for security and to comply with the law.
7. Your rights
To exercise any right, write to ciao@agrandefamiglia.com with the subject "Privacy". We reply within 15 days (Brazil) or one month (European Union), and it's always free. We may ask you to confirm the request is yours. You can also use an authorised agent.
Brazil (LGPD)
Confirmation and access, correction, anonymisation, blocking or deletion of unnecessary data, portability, information about who we share with and withdrawal of consent. You can complain to the ANPD (opens in a new tab).
European Union and Portugal (GDPR)
Access, rectification, erasure, restriction, portability, objection (including to any e-mail, at any time) and withdrawing consent without affecting what was done before. You can complain to the CNPD (opens in a new tab) (Portugal) or the authority in your country.
United States
To know what data we hold, and to get a copy, correct it and delete it. We don't sell or "share" data for advertising, as California and other state laws define it, and we haven't in the last 12 months. If the site ever has ads measured by a pixel, we will treat your browser's Global Privacy Control (GPC) signal as a "no". We won't treat you differently for using your rights.
Canada (PIPEDA)
Access to and correction of your data, and withdrawal of consent. You can complain to the Office of the Privacy Commissioner of Canada (opens in a new tab).
8. E-mails and lists
We only send letters and updates to people who asked and confirmed: after you sign up, you get an e-mail with a confirmation link. If you don't click it, we send nothing. Every letter says who sent it and includes a link to leave. To leave, click the link or reply "unsubscribe".
9. Children
This site is made for adults and is not directed to children. We don't knowingly collect data from children under 13 (or, in Brazil, from children up to 12 without a parent's consent). If you are under 13, please don't fill in our forms; ask an adult. If we learn that we received a child's data without authorisation, we delete it. Parents and guardians can ask for deletion at the e-mail above.
About the children in our family who appear in the show: see Children first, at the top of this page.
11. Security
The site uses a secure connection (HTTPS). Messages are kept in a server database that can't be reached from the internet, your IP is not stored (only a scrambled code of it), the family's accounts use strong passwords and only those who need it have access. No system is 100% secure: if an incident creates a risk to you, we'll tell you and the authorities within the legal deadlines.
If we change something important in this policy, we'll say so here, with a new date, and by e-mail to people on our lists.
Updated 18 October 2026. In force from that date. This is a translation of the Portuguese page; both say the same.
Ask us
Someone in the family reads it. To ask for a copy, a correction or deletion, it's the same e-mail.