Who We Are

Zeyra Journeys develops personalized travel itineraries through research and curation, considering each traveler’s interests, priorities, travel style, and needs.

Zeyra Journeys is responsible for the processing of the personal data described in this Policy.

If you have any questions about this Policy or about your personal data, please contact us at denise.pinto@zeyrajourneys.com.br.

What Data We Collect

This website does not contain contact forms, user registration, or e-commerce features. We primarily receive the information you choose to provide when contacting us or during the development of a project.

Contact data — name, telephone number, email address, and any other information you include when contacting us by WhatsApp or email.
Travel project data — preferences, dates, destinations, travel style, practical needs, and other details shared during the discovery, briefing, and itinerary development stages.
Billing data — information required for issuing invoices and recording payments related to contracted projects.
Technical data — certain technical information, such as IP address, date and time of access, browser type, and similar information, may be recorded automatically by the systems responsible for hosting and operating the website, primarily for security, operational, and technical diagnostic purposes.

As a general rule, Zeyra Journeys does not request sensitive personal data. If information of this nature is necessary for the development of an itinerary, such as certain needs related to health, dietary requirements, or accessibility, it will be processed only to the extent necessary for the stated purpose and in accordance with applicable law.

This website is not directed at children or adolescents. Information concerning minors may be received from their parents or legal guardians when necessary for the development of an itinerary for a trip and will be processed solely for that purpose, in accordance with applicable law.

Cookies and Similar Technologies

This website does not use cookies or similar technologies to store or access information on a visitor’s device.

It also does not use analytics or audience measurement tools, advertising or profiling cookies, or third-party integrations loaded on its pages for tracking purposes.

If these practices change in the future, this Policy will be updated in advance and, where required, the appropriate information, consent, and preference management mechanisms will be implemented.

How We Use Your Data

We use personal data only when necessary to:

respond to your contact and conduct the initial conversation about your travel plans;
understand your needs and prepare a project proposal;
after the project is contracted, research, select, structure, and deliver the personalized itinerary;
maintain records necessary for the administration and billing of contracted services;
comply with tax, accounting, legal, or regulatory obligations;
protect our rights and the security of our systems.

Under Brazil’s General Data Protection Law — LGPD (Law No. 13,709/2018), personal data is processed, depending on the circumstances, for preliminary procedures requested by you, for the performance of a contract, for compliance with legal or regulatory obligations, on the basis of legitimate interests where applicable, and, when required by law, based on your consent.

Where other data protection laws apply to the processing carried out, including the European Union General Data Protection Regulation (GDPR), their applicable requirements will also be observed.

Who We Share Data With

Zeyra Journeys does not sell or commercially trade personal data.

Personal data may be shared, when necessary, with service providers that support our activities, such as messaging and email services, website hosting and technology infrastructure providers, and accounting services.

Data is shared only to the extent necessary for the provision of the respective services or for compliance with legal obligations.

Hotels, guides, transportation companies, and other travel-related suppliers are contracted directly by you. Zeyra Journeys does not share your personal data with these suppliers unless requested by you or previously agreed to for a specific purpose.

International Data Transfers

Zeyra Journeys is based in Brazil.

Some technology providers used in our activities may process or store personal data outside Brazil. Where an international transfer of personal data occurs, the requirements and mechanisms established by applicable law for the protection of such information will be observed.

How Long We Keep Your Data

Data relating to contacts that do not result in a contracted project may be retained for up to two years, unless a legitimate reason or legal obligation justifies a different retention period.

Data related to contracted projects will be retained for the period necessary to provide the service and, thereafter, for the periods applicable to compliance with tax, accounting, legal, or regulatory obligations and for the establishment, exercise, or defense of legal rights.

After these periods, the data may be deleted or anonymized, where applicable.

Your Rights

You may exercise the rights provided under applicable law, including where applicable:

confirmation of whether your personal data is being processed;
access to your personal data;
correction of incomplete, inaccurate, or outdated data;
anonymization, blocking, or deletion of data in the circumstances provided by law;
data portability, subject to applicable legal and regulatory requirements;
information about data sharing;
objection to processing in the circumstances provided by law;
deletion of data processed on the basis of consent, where applicable;
information about the possibility of refusing consent and the consequences of doing so;
withdrawal of consent, where consent is the legal basis used for processing.

To exercise your rights or request information about the processing of your personal data, please contact denise.pinto@zeyrajourneys.com.br.

Requests will be reviewed and answered in accordance with the deadlines and conditions established by applicable law.

You may also lodge a complaint with Brazil’s National Data Protection Authority (ANPD) and, where applicable, with the competent data protection authority in your jurisdiction.

Security

We adopt reasonable technical and organizational measures appropriate to the nature of our activities to protect personal data against unauthorized access and accidental or unlawful situations involving loss, alteration, disclosure, or misuse.

Despite these measures, no system for transmitting or storing information is completely immune to risk.

Changes to This Policy

This Privacy Policy may be updated to reflect changes in our practices, the services we use, or applicable law.

The date shown at the beginning of this page identifies the most recent version.