LGPD · Law 13.709/2018
Privacy Policy
Last updated: [CONFIRM date]
[CONFIRM — this document is a structural template within the mockup. It must be reviewed by a lawyer and completed with the company's real details before launch. No company name, CNPJ, address, email or period below is real.]
1. Data controller
The controller of personal data processed through this site is [CONFIRM registered company name], CNPJ [CONFIRM], registered office at [CONFIRM full address], Florianópolis — Santa Catarina, Brazil.
Privacy contact: [CONFIRM DPO email]. Data Protection Officer: [CONFIRM name or “not applicable”].
2. What we collect and why
| Data | When | Purpose | Legal basis (LGPD art. 7) |
|---|---|---|---|
| Name | Booking form | Identify the booking | Pre-contractual steps (item V) |
| Phone / WhatsApp and email | Booking form | Confirm the booking | Pre-contractual steps (item V) |
| Date and number of participants | Booking form | Check availability | Pre-contractual steps (item V) |
| Prior experience / certification | Booking form | Match the activity to the level | Pre-contractual steps (item V) |
| Health declaration | Before the activity, where required | Activity safety — sensitive health data | Consent (item I) |
| Emergency contact | Before the activity | Activity safety | Consent (item I) |
| Analytics cookies | Browsing, if permitted | Measure site usage | Consent (item I) |
| Marketing cookies | Browsing, if permitted | Measure campaigns | Consent (item I) |
3. Cookies
Essential cookies keep the site working and remember your consent choice; they cannot be switched off. Analytics and marketing cookies are off by default and are only enabled if you tick the matching option in the banner. You can revisit your choice at any time by clearing site data in your browser.
| Category | Default | Examples | Retention |
|---|---|---|---|
| Essential | Always on | Consent record (stored in your browser) | [CONFIRM] |
| Analytics | Off | [CONFIRM tool — e.g. Google Analytics 4] | [CONFIRM] |
| Marketing | Off | [CONFIRM tool — e.g. Meta Pixel] | [CONFIRM] |
4. WhatsApp
The buttons on this site open a WhatsApp conversation with a pre-filled message. From the moment you send that message, the processing of your data in that app is also governed by Meta Platforms' privacy policy, over which we have no control.
5. Sharing
We do not sell personal data. We share it only with processors necessary to deliver the service:
- Website hosting — [CONFIRM]
- Analytics tool, if permitted — [CONFIRM]
- WhatsApp / Meta Platforms, when you start the conversation
- Public authorities, where legally required
International transfers: [CONFIRM — likely, if hosting or analytics sit outside Brazil. State the countries and safeguards.]
6. How long we keep it
Contact data and enquiries: [CONFIRM period]. Consent records: [CONFIRM period]. After that, data is deleted or anonymised, unless a legal retention duty applies.
7. Your rights (LGPD art. 18)
At any time, free of charge, you may request:
- confirmation that processing exists;
- access to your data;
- correction of incomplete, inaccurate or out-of-date data;
- anonymisation, blocking or deletion of unnecessary or non-compliant data;
- portability to another provider;
- deletion of data processed on the basis of consent;
- information about who we share your data with;
- information about your right to refuse consent and the consequences;
- withdrawal of consent.
To exercise any of these, write to [CONFIRM email]. We will reply within the statutory period. You may also petition the ANPD, Brazil's data protection authority.
8. Security
We apply technical and administrative measures to protect personal data. [CONFIRM measures — e.g. HTTPS, access control, backups]. In the event of a significant security incident we will notify you and the ANPD under art. 48.
9. Minors
This site is not directed at people under 18 and does not knowingly collect children's data. No image on this site depicts children or minors.
10. Changes
We may update this policy. The date at the top shows the last revision. Material changes will be flagged on the site.
Their legal pages are preserved, not replaced
Local Tour already publishes a Política de Privacidade, a Política de Cookies and Termos e Condições de Uso. This document is a review draft against the LGPD, not a replacement. The URLs of all three existing pages are preserved or 301-redirected. [CONFIRM the three current pages and review them rather than swapping in boilerplate].
Who the controller is
Controller: Local Tour, CNPJ 27.622.633/0001-98, Travessa Ressacada, 123 — Carianos — Florianópolis/SC — 88047-604, Brazil. CADASTUR 24.087453.10.0001-1. [CONFIRM that the CNPJ and CADASTUR are current]. Contact: WhatsApp +55 48 98487-5199. The e-mail published on their site is obfuscated by a spam filter and could not be read; no address has been guessed here. [CONFIRM the e-mail and the data protection officer — LGPD art. 41].
The flight number
The transfer booking asks for a flight number because their own page requires it. It is used to track the real flight and adjust the pickup to a delay — for nothing else, and it is not shared beyond whoever performs the transfer.
Ilha do Campeche
The Ilha do Campeche tour is sold with a maritime leg. The island is a protected archaeological and environmental site with a daily visitor quota fixed in law, and access also depends on sea conditions. No page in this build promises guaranteed same-day access. [CONFIRM the current quota rules] · [CONFIRM who operates the maritime leg, the vessel registration and the capacity — Marinha do Brasil rules. No capacity is published without verification].
Paragliding, rafting and the trail
These products are in all likelihood operated by third parties. [CONFIRM the operator of each, their own registration and their insurance]. Nothing in this build implies Local Tour is the operator if it is not.
Payments
No payment is processed on this site and no card details are collected here. [CONFIRM the payment method — Pix expected — and the cancellation terms].
What this site does not claim
No price, duration, departure time, group size beyond the "up to 15 passengers" they publish themselves, rating, review count or founding year appears in this build without being marked [CONFIRM]. No review has been written or invented, and no stock photograph is used to stand in for a real Local Tour guide, vehicle or customer.