This Privacy Policy explains, in plain language, how Búzios360 handles personal data from visitors, newsletter subscribers, and people who submit forms on the site — in line with Brazil’s General Data Protection Law (LGPD — Law No. 13,709/2018) and ANPD guidance on transparency, specific purposes, data minimisation, and data-subject rights.
Búzios360 is a local editorial guide to Armação dos Búzios. We collect only what we need to respond to requests, measure site use, forward qualified interest to partners when you authorise it, and meet legal obligations.
1. Who controls your data
The data controller for personal data processed on this site is:
- Legal name: [CONTROLLER LEGAL NAME]
- CNPJ (Brazilian company ID): [CONTROLLER CNPJ]
- Address: [CONTROLLER FULL ADDRESS]
- Data Protection Officer (DPO): [DPO NAME AND EMAIL]
Until the details above are published, use the Contact page with subject Privacy / LGPD for data-protection requests.
2. Data we collect
2.1 Data you send us
- Contact and lead forms — name, email, phone/WhatsApp, message, contact preferences, and when relevant interest in a property, tour, hotel, or service.
- Business or partnership registration — company details, representative, website, social profiles, and information for editorial review.
- Newsletter — email and preferred language.
- Consents — records that you accepted this policy, authorised contact, and/or partner forwarding (see section 11).
2.2 Data collected automatically
- Browsing — pages visited, language, device type, browser, approximate time zone, and referral source.
- Campaigns — UTM parameters and traffic source when present in the URL.
- Cookies and similar technologies — session identifiers, preferences, and when you consent, analytics cookies (see section 7 and our Cookie Policy).
- WhatsApp and external link clicks — record that you clicked to open WhatsApp, a partner site, OTA, agency, or affiliate link, with page and language context.
2.3 Data we do not ask for
We do not request sensitive data (racial origin, health, biometrics, sex life, union membership, etc.) or official ID documents in public forms.
3. Why we use data
- Respond and follow up on your message or request.
- Forward qualified leads — when you give specific consent, share your interest with hotels and guesthouses, tour operators, real-estate agencies and agents, service providers, and other relevant local partners.
- Operate the site — correct language, security, abuse prevention.
- Measure audience — improve guides, map, and forms.
- Newsletter — send content you requested; unsubscribe anytime.
- Marketing with consent — only if you explicitly opt in; we never use pre-checked marketing boxes.
- Legal obligations.
4. Legal bases (LGPD)
- Consent — newsletter, non-essential cookies, partner lead forwarding, marketing.
- Pre-contract steps — when you request information about a property, tour, stay, or service.
- Legitimate interest — security, fraud prevention, aggregated metrics, service improvement. [DETAIL LEGITIMATE INTEREST ASSESSMENT IF APPLICABLE]
- Legal or regulatory obligation.
5. Sharing with partners
We may share personal data with local commercial partners only when you authorise forwarding in the relevant form. Technology providers (hosting, email, CRM, analytics) process data under contracts requiring protection. Authorities when required by law.
Separate consent: forwarding your lead requires specific acceptance beyond the general policy — typically a dedicated checkbox. Without it, we only respond through our own channel.
6. Affiliate links and WhatsApp
Some booking or service links may earn Búzios360 a commission. WhatsApp clicks open Meta’s app; Meta’s policy applies. We may log the click and source page for metrics.
7. Cookies and analytics
See our Cookie Policy. Essential cookies run the site; analytics cookies run with consent when required. Each category has a defined purpose.
8. Newsletter and email
Newsletter signup requires affirmative action — no pre-checked marketing opt-ins on other forms. Every email includes unsubscribe.
9. How long we keep data
- Leads and forms: [LEAD RETENTION PERIOD — TBD]
- Newsletter: [NEWSLETTER RETENTION PERIOD — TBD]
- Logs and analytics: [LOG RETENTION PERIOD — TBD]
- Consent records: [CONSENT RETENTION PERIOD — TBD], or as long as needed to demonstrate compliance.
10. Your rights
Under LGPD you may request confirmation, access, correction, anonymisation, blocking, deletion, portability, information on sharing, consent withdrawal, opposition to legitimate-interest processing, and review of relevant automated decisions.
11. How to exercise rights — export and deletion
Contact us via Contact (subject: Privacy / LGPD) or [DPO / PRIVACY EMAIL] with your name, email used on the site, and your request.
Consent records: we store timestamp, page, language, form version, UTM/source, and checkboxes selected when technically possible.
Forms: every submit button is shown alongside a link to this policy.
12. Security
We use reasonable technical and organisational measures (HTTPS, access control, backups, monitoring). No system is 100% secure; relevant incidents are handled per LGPD.
13. International transfers
Some providers (hosting, email, analytics, WhatsApp/Meta, cloud tools) may process data outside Brazil. We seek contractual clauses and safeguards under LGPD. [LIST KEY INTERNATIONAL VENDORS IF DESIRED]
14. Children
Búzios360 is not aimed at under-18s. Contact us to delete any minor’s data.
15. Changes
The current version is always on this page with the date below.
16. Privacy contact
- Form: Contact (subject: Privacy / LGPD)
- DPO email: [DPO / PRIVACY EMAIL]
- Address: [CONTROLLER FULL ADDRESS]
You may also contact Brazil’s ANPD: gov.br/anpd.
Last updated: 26 June 2026.