Privacy Policy

Who is responsible for your data

Your data is handled by Zé Guia, a guided-tour operation in Rocinha (Rio de Janeiro, Brazil). You can reach us through the channels listed at the bottom of this page.

What data we collect

We only collect the data you give us willingly when you contact us and arrange the tour, plus basic technical data generated as you browse the site:

• Contact data: name, phone/WhatsApp number and the content of the messages you send us.
• Tour data: the agreed date, number of people and any preferences you share.
• Browsing data: technical information logged by the hosting service (such as IP address and device type), used only for security and to run the site.
• Images: photos and videos taken during the tour, handled according to our Image Use Authorization.

How we use your data

• To reply to you and answer questions;
• To organize and run the booked tour;
• To send details about time, meeting point and payment;
• To promote our work with photos and videos, when you have authorized it;
• To comply with legal obligations.

Legal basis

We process your data based on your consent, on performing the service you book, and on complying with legal obligations, as provided by the LGPD.

Who we share it with

We do not sell your data. It may be processed by services we use to operate, such as WhatsApp (Meta) for communication and the site’s hosting service (Cloudflare). Those services have their own privacy policies.

Image use (photos and videos)

Photos and videos taken during the tour are only published with your authorization. The rules are detailed in our Image Use Authorization, and you can withdraw that authorization at any time.

Image consent record

When you authorize the use of your image through the site form, we keep a record of that consent so we can prove it. This record includes: the name and WhatsApp number you provide, confirmation that you agreed to the term, the date and time, the version of the term accepted, and technical data (such as IP address and browser).

This record is stored in a database on Cloudflare’s infrastructure and used only as proof of the authorization. You can withdraw it at any time through the contact channels — when you do, the record is marked as revoked and we stop using your image in new posts.

How long we keep it

We keep your data only for as long as needed for the purposes above or to meet legal obligations. After that, it is deleted.

Your rights

The LGPD gives you the right to:

• Confirm that processing exists and access your data;
• Correct incomplete or outdated data;
• Request deletion of your data;
• Withdraw your consent at any time;
• Know who we share your data with.

Cookies

This is a simple site and does not use tracking or third-party advertising cookies. Only essential technical resources needed to display the pages are used.

Changes to this policy

We may update this Privacy Policy. The date of the latest update is shown at the top of the page.