Privacy Policy

Last updated: October 2024

1. Introduction

Tucuna Turismo Fishing ("We", "Our", or "Company") respects your privacy and is committed to being transparent about how we collect, use, share, and protect your personal data. This Privacy Policy explains our practices in accordance with the Brazilian General Data Protection Law (LGPD — Law 13,709/2018) and applicable Brazilian regulations.

2. Company Information

3. Personal Data Collected

We collect the following types of personal data:

3.1 Data Provided Directly by You

• Contact Information: Name, email, phone, address
• Travel Data: Desired dates, destinations, number of people, accommodation preferences
• Payment Information: Credit card data, CPF (Brazilian tax ID), bank details (processed securely)
• Messages: Communications via forms, email, or WhatsApp
• Preferences: Interests in destinations, activities, and services

3.2 Data Collected Automatically

• Cookies and Similar Technologies: Unique identifiers, browsing preferences, page visit history
• Technical Information: Browser type, operating system, IP address, connection speed
• Behavior Data: Clicks, time spent on pages, forms started, navigation events
• Approximate Location: Country, state or city (based on IP or explicit consent)
• Device: Model, type (mobile, desktop, tablet), device unique identifier

4. Legal Bases for Data Processing (LGPD — Art. 7)

We process your data under the following legal bases established by LGPD:

4.1 Consent (Art. 7, I)

• Google Analytics 4 and Meta Pixel — tracking behavior for analysis and advertising
• Marketing and analysis cookies
• You can revoke this consent at any time through our cookie preferences

4.2 Contract Execution (Art. 7, II)

• Tourism package reservations and sales
• Payment processing
• Delivery of contracted services (accommodation, transport, activities)
• Communication about your reservation and confirmations

4.3 Legal Obligation Compliance (Art. 7, III)

• Compliance with Brazilian tax and regulatory laws
• Record retention as required by law
• Providing information to authorities when required

4.4 Legitimate Interest (Art. 7, IX)

• Improving the quality of our services and user experience
• Data security and fraud prevention
• Direct marketing about products and services similar to your history
• Analyzing commercial viability of new destinations and packages
• Website optimization and performance

5. Cookies and Tracking Technologies

We use cookies and similar technologies for:

5.1 Essential Cookies

• Keep your authenticated session
• Remember your language preferences
• Ensure security and prevent fraud
• Consent required? No — they are mandatory

5.2 Analytics Cookies

• Google Analytics 4 (ID: G-09MRRWGTZN): Traffic analysis, popular pages, visitor sources
• Meta Pixel (ID: 561973356155937): Conversion tracking and user behavior
• Consent required? Yes — Non-essential cookies

5.3 Marketing Cookies

• Targeted advertising on Facebook, Instagram and other platforms
• Remarketing — showing relevant ads after your visit
• Audience segmentation for personalized campaigns
• Consent required? Yes — Non-essential cookies

6. How We Use Your Data

We use your personal data to:

Service Delivery

• Process reservations and payments
• Confirm and manage your travels
• Send confirmations, itineraries and necessary documents
• Provide customer support

Communication

• Answer your questions and requests
• Send information about your reservation
• Important notifications (cancellations, flight changes, etc.)
• Satisfaction surveys and feedback

Marketing and Advertising

• Send newsletters with new destinations and promotions (with consent)
• Targeted advertising on social networks
• Personalized offers based on your browsing history
• Remarketing campaigns

Analysis and Improvement

• Analyzing user behavior for website optimization
• Identifying popular pages and underperforming content
• Improving performance and accessibility
• Travel market research and trends

Security

• Prevent fraud and illegal activities
• Ensure security of your data and our website
• Comply with legal and regulatory obligations

7. Sharing Data with Third Parties

We share your data with:

7.1 Service Providers (Data Processors)

• Partner Lodges and Hotels: Reservation data (name, dates, contact) for confirmation and accommodation
• Airlines: Data necessary for flight tickets (name, email, phone)
• Insurance Companies: Data for travel insurance
• Payment Processors: Payment data for secure transactions (we never store complete card numbers)
• Email Platforms: For sending confirmations and newsletters
• Google Analytics and Meta Pixel: Behavior data for analysis (anonymized/pseudonymized when possible)

7.2 Legal Obligations

• Public authorities when required by law
• Tax and regulatory authorities
• In case of legal investigation or public security

7.3 What We Don't Do

• We do not sell your personal data to third parties
• We do not transfer data outside Brazil without legal necessity
• We do not share data with unauthorized companies

8. Data Retention

We retain your personal data for the period necessary to:

• Reservation and Payment Data: Minimum 5 years (as required by Brazilian tax law)
• Analytics Cookies: Up to 2 years (as configured in Google Analytics)
• Email Communications: Up to 2 years after last contact
• Marketing Preferences: Until deletion request

After the necessary period, all data will be permanently deleted or anonymized, except where retention is required by law.

9. Your Rights Under LGPD (Art. 18)

You have the right to:

9.1 Access (Art. 18, I)

Confirm if your data is being processed and obtain a copy of it.

9.2 Correction (Art. 18, II)

Correct incomplete, inaccurate or outdated data.

9.3 Deletion (Art. 18, III — "Right to be Forgotten")

Request deletion of your data, except where there is legal obligation to retain it.

9.4 Anonymization (Art. 18, IV)

Request that your data be anonymized instead of deleted.

9.5 Portability (Art. 18, V)

Receive your data in structured format for transfer to another provider.

9.6 Opposition (Art. 18, VI)

Object to processing of your data in certain situations (e.g., direct marketing).

9.7 Information About Sharing (Art. 18, VII)

Know which third parties your data was shared with.

9.8 Consent Revocation (Art. 18, VIII)

Revoke processing consent at any time, without affecting previous processing.

10. How to Exercise Your Rights

To exercise any of the above rights, contact us:

11. Data Security

We implement technical and administrative measures to protect your data against:

• Unauthorized access
• Improper alteration or destruction
• Data leaks and theft

Our measures include:

• Data encryption in transit (HTTPS/SSL)
• Secure storage on protected servers
• Restricted access control to personal data
• Continuous security monitoring
• Security training for employees

12. Cookies and Preferences

You can manage your cookie preferences in two ways:

12.1 On Our Website

• Click "Cookie Preferences" in the website footer
• Customize your consent choices
• Your preferences will be saved for 365 days

12.2 In Your Browser

• Chrome: Settings → Privacy and security → Cookies and other site data
• Firefox: Options → Privacy → Cookies and site data
• Safari: Preferences → Privacy → Manage website data
• Edge: Settings → Privacy, search and services → Cookies

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or a highlighted notice on the website. Your continued use of the website after posting changes means your acceptance.

14. Contact and Complaints

If you have questions or wish to file a complaint about our privacy practices:

Direct Contact

Data Protection Authority (ANPD)

You can also contact the Brazilian National Data Protection Authority (ANPD):

• Website: www.gov.br/cidadania/pt-br/acesso-a-informacao/lgpd
• Email: contato@anpd.gov.br

15. Applicable Law

This Privacy Policy is governed by the Brazilian General Data Protection Law (LGPD — Law 13,709/2018) and other applicable laws in Brazil.

Last updated: October 2024
Version 1.0 — Complete with LGPD and Cookies