Privacy Policy
Plain answers about what data we handle, why, who we share it with, and your rights.
Last updated: 04/07/2026 · The Portuguese version is the legally binding one.
Pousada Costa Verde (CNPJ 36.257.470/0001-82, Rua Amâncio Felício de Souza, 239A, Vila do Abraão, Angra dos Reis – RJ, Brazil) is the controller of the personal data processed on this site, under Brazil’s data protection law (LGPD, Law 13,709/2018).
1. What we collect and why
- Booking: your name, email and phone (optional) — to process your reservation, send the confirmation/voucher and stay in touch about your stay. Legal basis: performance of a contract.
- Payment: the deposit is processed by Stripe in its own PCI-DSS certified environment. Your card details never touch our servers — we neither see nor store them.
- Check-in (FNRH): at check-in we collect the data required by Brazil’s National Guest Registry (name, ID, nationality, origin/destination), which is mandatory by law for lodging providers. Legal basis: legal obligation (Ministry of Tourism).
- Contact: if you use the contact form or WhatsApp, we process the data you send us in order to reply.
- Technical logs: our infrastructure (Cloudflare) processes IP addresses and technical logs for security and abuse prevention. We keep internal booking-transaction records for up to 90 days for operational control, and tax/accounting records for as long as Brazilian law requires.
2. What we do NOT do
- No tracking cookies, no advertising, no third-party analytics on this site.
- We never sell, rent or share your data for marketing purposes.
- No newsletters or promotional emails — only transactional messages about your reservation.
3. Who we share data with
Only with the processors needed to serve you, each limited to its role:
- Stripe (payment processing);
- Artaxnet (reservation management system — PMS);
- Cloudflare (hosting, security and transactional email) and Resend (transactional email);
- Public authorities, where the law requires it (e.g. FNRH to the Ministry of Tourism, tax obligations).
4. Security and retention
All site traffic is encrypted with TLS (HTTPS). Booking data is kept only as long as needed to provide the service and to meet Brazilian legal and tax obligations; after that it is deleted or anonymised.
5. Your rights (LGPD)
You may request at any time: confirmation of processing, access, correction, anonymisation or deletion of your data, portability, and information about sharing. Contact: [email protected] or WhatsApp +55 24 98188-4367. We reply within 15 days.