Privacy Policy

This policy explains how Soleluna Casa Pousada handles the personal data you send us through this website, in line with Brazil's General Data Protection Law (Law No. 13,709/2018, the LGPD).

1. Who controls your data

The controller is Soleluna Casa Pousada, CNPJ 13.085.045/0001-58, based at Rua Jovelino Rodrigues Vieira, 167, Trancoso, Porto Seguro, Bahia, postal code 45818-000.

To talk about privacy, write to reservas@solelunacasapousada.com.

2. What data we collect

We only collect the data you provide when using the website forms:

• Contact form: name, phone or WhatsApp, email and the message you write.
• Newsletter: your email.

Along with the form, we automatically record the date and time of submission, the language and the page you sent it from, the origin of the visit (for example, campaign parameters such as utm_source), the browser type and an encrypted code derived from your IP address, used only to prevent spam. We do not store your IP address in plain text.

If you write to us by WhatsApp, email or phone, or use the booking engine, those channels have their own data handling rules (see section 7).

3. What we use the data for

• To reply to your message and follow up on information or booking requests.
• To send the “Letters from Soleluna” newsletter, if you subscribed.
• To understand where contacts come from and improve the website.
• To protect the website against spam and misuse.

We do not sell your data and do not use it for automated decisions.

4. Legal basis

We process data based on your consent, which you give by ticking the consent box on the contact form or by subscribing to the newsletter, and, when you ask for information or a booking, on carrying out preliminary steps related to a contract to which you are a party. You can withdraw your consent at any time.

5. Who we share data with

Data is stored on a hosting server contracted by Soleluna and is accessed only by our team. Each new contact is also sent by email to our reservations inbox. We may share data with providers that help us run the website and customer service (for example, hosting and email), always for that purpose, or when required by law.

6. Cookies and third-party services

On the pages of this website we do not use our own cookies or advertising cookies. We only store in your browser, temporarily, the origin of your visit (campaign parameters), to associate it with a contact sent in the same session. Some older pages of the website (such as Promotions) may use technical cookies from the system that hosts them.

Some pages load third-party resources: Google Fonts and, on the Location page, the Google Maps map, which may set Google cookies. When loading them, Google may receive information such as your IP address and browser type, according to Google's privacy policy. If we start using audience measurement or advertising tools, we will update this policy and ask for your consent where required.

7. Links to other websites

The website has links to third-party services, such as the booking engine, WhatsApp, Instagram and Tripadvisor. By using them, you become subject to those services' privacy policies, over which Soleluna has no control.

8. How long we keep data

We keep data for as long as needed to handle your request and meet legal obligations. If you subscribed to the newsletter, we keep your email until you ask to unsubscribe. You can ask for your data to be deleted at any time.

9. Your rights

The LGPD guarantees you, among others, the right to:

• confirm that we process your data and access it;
• correct incomplete, inaccurate or outdated data;
• request anonymization, blocking or deletion of unnecessary data or data processed unlawfully;
• request data portability;
• request deletion of data processed on the basis of consent;
• know who we share data with;
• withdraw consent and be informed of the consequences of not consenting;
• lodge a complaint with the Brazilian National Data Protection Authority (ANPD).

To exercise these rights, write to reservas@solelunacasapousada.com. We may need to confirm your identity before handling the request.

10. Security

We take technical measures to protect data, such as storage in an area not accessible from the internet, a secure connection (HTTPS) and restricted access. No system is completely immune to failures; in case of an incident that may pose a significant risk to you, we will notify you and the ANPD as required by law.

11. Changes to this policy

We may update this policy. The date of the last update appears at the top of this page.