Privacy Policy

Last updated: 26 October 2026.

1. Who is responsible for your data

The controller of personal data processed by Voyage Voyage (voyagevoyage.com.br) is Marcelo Oliveira, an individual, who makes decisions about its use. This is an independent travel content website, not a travel agency, tour operator or official representative of the destinations or services mentioned.

Marcelo also handles data subject requests. Send privacy questions, complaints and requests to contato@voyagevoyage.com.br. This is the controller’s privacy and data subject contact.

2. What data we collect

Reading the articles is free and does not require a user account or login. An optional mailing list provides updates about New Year 2027. We process:

• Access and security: IP address and technical server access records, such as time, browser and requested page. Our own audience measurement has the limits explained in section 15.
• Messages: your name, email address or phone number and the content you send by email or WhatsApp. Please avoid sending unnecessary sensitive information.
• New Year 2027 updates: email address, selected city, source article, signup date, active/inactive status and technical control and cancellation identifiers. For new signups, abuse prevention temporarily uses an IP hash for up to one hour without storing it in the subscriber table. Earlier records may retain that hash until consent is withdrawn or updated. New signups and renewed subscriptions also record the date and context of consent and the policy version shown; we do not create retrospective evidence for earlier signups. The newsletter signup does not store the User-Agent.
• Consent and optional services: banner preferences and, only after you allow the relevant category, technical data used by the Google tag, advertising or external videos, as explained in the Cookie Policy.

We do not request sensitive personal data or use these signups for automated decisions that have legal effects on you.

3. How we use this data

• Keep the website available and secure and prevent abuse.
• Produce aggregate statistics and improve articles and navigation.
• Answer messages and data subject requests.
• With your consent, email New Year 2027 updates for the selected city and manage subscriptions, cancellations and preferences.
• Measure audience and interaction events through the Google tag only after statistics consent; load external videos and advertising only after marketing consent. Our own cookie-free measurement in section 15 is separate.
• Attribute referrals from affiliate links, without giving the subscriber list to travel partners.
• Meet legal obligations, respond to competent authorities and exercise rights in the cases provided by law.

Signing up is optional and is not a condition of reading. A New Year 2027 subscription will not be used for unrelated campaigns without fresh consent. Unsubscribing makes the subscription inactive; it does not erase the entire record. To request deletion or exercise other rights, contact contato@voyagevoyage.com.br.

4. Our legal bases for processing

• Consent (LGPD article 7 I): New Year 2027 signup and optional services controlled by the banner, according to the category selected. You may withdraw consent.
• Legitimate interests (article 7 IX): security, abuse prevention, answering messages and limited first-party audience measurement, subject to necessity, transparency and data subject rights. You can object or request an explanation through the privacy contact.
• Legal obligations (article 7 II): handling data subject rights and retaining records where required by law or a valid order.
• Exercise of rights (article 7 VI): where necessary in judicial, administrative or arbitration proceedings.

Visiting the website or sending a question does not authorize marketing emails.

5. Cookies

Complianz records your preferences and lets you accept, reject or select categories. The external Google measurement tag requires statistics consent. AdSense advertising and embedded YouTube videos require marketing consent. The first-party measurement in section 15 uses neither cookies nor a persistent identifier and is processed separately under legitimate interests.

Change or withdraw your choices through the website’s consent control or the Cookie Policy. Rejecting optional services does not prevent reading articles; an external video may remain blocked until you allow it.

6. Who we share data with

We do not sell the subscriber database. We use service providers to operate the website and mailings:

• Website hosting: stores WordPress, technical records and the local newsletter database, with access needed to provide the service.
• Brevo: receives the email address and city-list membership to organize and send requested updates. It also processes delivery, unsubscribe and sending-event records within its service. The newsletter connector does not send Brevo the WordPress IP hash or cancellation identifier.
• Google: the measurement tag receives technical data and events only after statistics consent; YouTube receives data when external content is allowed under marketing; AdSense may receive advertising data after approval and the relevant consent. Search Console supplies search performance reports and does not itself place a measurement cookie in visitors’ browsers.
• Email and WhatsApp: contacting us through these channels also uses their providers’ infrastructure and privacy policies.
• Affiliates: our Affiliate Policy explains the programs. Links may identify the website, article or campaign. Following a link sends connection data to the partner or its network; reservations are governed by its privacy policy. A link’s presence alone does not mean that your newsletter signup is shared with that partner.
• Authorities: where there is a legal obligation, court order or another valid request.

The current newsletter flow uses WordPress and Brevo; it does not send the form to Google Apps Script or Google Sheets.

7. International data transfers

International service providers may process data outside Brazil. Brevo reports main infrastructure in the European Union, including France and Germany, to host its database and send messages. Google says it may process data on servers in different countries. The data and purposes are those in section 6; duration follows the service purpose and section 8.

See Brevo’s privacy policy, its terms and processing documents and Google’s privacy information. These documents describe the services and their safeguards; they do not, by themselves, authorize every transfer.

Transfers subject to the LGPD require a legal basis and a valid mechanism under article 33 and ANPD regulations. Contact Marcelo Oliveira at contato@voyagevoyage.com.br for information about this website’s flows, destinations and applicable safeguards, and to request the clauses used where relevant.

8. How long we retain data

• Access logs: our retention policy is six months, subject to applicable legal requirements and preservation under a valid order.
• Messages: up to 12 months after the matter is closed, unless legal retention is justified.
• New Year 2027 newsletter: while the subscription is active and serves that campaign’s purpose. Once the purpose ends, data must be deleted or anonymized unless the law permits retention; there is no authorization for automatic reuse in later campaigns. Unsubscribing deactivates the local signup, records the withdrawal and removes the IP hash. Removal from the relevant Brevo list is reconciled before new dispatches and does not necessarily erase the entire contact there. Messages already accepted or sent by the provider before withdrawal cannot be recalled. Unsubscribing is not a process that physically deletes all records.
• Preferences and rights: minimal consent, withdrawal or suppression records may be kept only where necessary and justified to respect the decision not to receive messages, meet obligations or exercise rights. Retention is assessed when deletion requests are handled; data must not be kept indefinitely merely for convenience.
• First-party measurement: pseudonymous single-page-view records for up to 48 hours and aggregate daily totals for up to 13 months.
• Cookies: periods and purposes are explained in the Cookie Policy.

Send deletion requests to contato@voyagevoyage.com.br. Clicking unsubscribe is not a promise to erase copies held by every provider immediately. Retention exceptions are limited to legal grounds, including LGPD article 16.

9. Security

We adopt reasonable technical and organisational measures to protect the personal data we process, including encrypted connections (HTTPS), access control for the administrative panel, and regular system updates. No system is completely immune to incidents. If a security incident poses a relevant risk to data subjects, we will notify those affected and Brazil’s National Data Protection Authority as required by Article 48 of the LGPD.

10. Your rights as a data subject

Article 18 of the LGPD gives you the right to request, at any time and free of charge:

• confirmation that your data is being processed;
• access to the data we hold about you;
• correction of incomplete, inaccurate, or outdated data;
• anonymisation, blocking, or deletion of unnecessary or excessive data, or data processed unlawfully;
• data portability to another service provider;
• deletion of data processed on the basis of your consent;
• information about the entities with which we share your data;
• information about the possibility of withholding consent and the consequences of doing so;
• withdrawal of consent at any time.

To exercise rights, withdraw consent or object, write to contato@voyagevoyage.com.br. Confirmation and access are handled under LGPD article 19, including a full response within 15 days where applicable; other requests follow their legal deadlines and requirements. We may ask for proportionate identity confirmation.

11. Children and adolescents

The website is not specifically directed at children or teenagers and does not request their newsletter signups. They may nevertheless visit public pages. If their data is processed, their best interests must prevail, with an appropriate legal basis and safeguards under LGPD article 14. Parents and guardians may report a signup or request action at contato@voyagevoyage.com.br.

12. Complaints to the ANPD

If you believe your rights have not been properly addressed, you may submit a complaint to Brazil’s National Data Protection Authority (ANPD) through gov.br/anpd.

13. Visitors from outside Brazil

The LGPD is the reference for this policy. Where other rules, such as the GDPR, apply to your situation, use the same contact to request access, rectification, deletion, restriction, objection or portability, subject to each rule’s requirements. Google requires a certified CMP integrated with the TCF for personalized advertising to users in the EEA, UK and Switzerland. Activation depends on AdSense approval and the required configuration; personalized advertising in these regions will be activated only after Google’s requirements are met.

14. Links to third-party websites

voyagevoyage.com.br contains links to websites that we do not operate, including travel partners, hotels, attractions, and information sources. We do not control their content or privacy practices and are not responsible for them. We recommend reading the privacy policy of each website you visit.

15. Aggregate audience measurement

Voyage Voyage uses its own tool to measure page visits, active reading time, scrolling, article completion, link and button clicks, approximate referral source, device type, browser, operating system, language and approximate location by country, state and city.

This tool does not create analytics cookies, use browser local storage or keep a persistent identifier across pages. Names, emails, form contents, IP addresses, full user agents, coordinates and precise locations are not stored in the analytics tables. The IP address is used only in memory against a local geographical database to estimate location and is discarded without being recorded by the tool.

Temporary pseudonymous records used to prevent duplication are limited to a single page view and deleted within 48 hours. Aggregate daily totals are retained for up to 13 months. Location estimates can be inaccurate, and applications may hide the referral source.

16. Changes to this policy

We may update this Privacy Policy when the tools we use or the applicable law changes. The current version will always be available on this page with the latest update date shown at the top.

17. Governing law

This policy is governed by the laws of the Federative Republic of Brazil, particularly the General Data Protection Law (Law No. 13,709/2018) and the Civil Rights Framework for the Internet (Law No. 12,965/2014).

18. Contact

Controller and contact for data subject requests: Marcelo Oliveira, contato@voyagevoyage.com.br. Describe your request and provide only the details needed to locate it. We may request proportionate identity confirmation to prevent unauthorized access.

Google advertising and data use

AdSense advertising requires program approval and marketing consent. The external measurement tag uses statistics consent; YouTube videos use marketing. You can review categories through the website control. Google and its partners may process technical data, cookies, pixels and identifiers when these services load. See how Google uses information from partner sites and ad preferences.

If activated and allowed, third-party vendors, including Google and its partners, may use advertising cookies to show ads based on your previous visits to Voyage Voyage and/or other websites. You can turn off personalized advertising in My Ad Center and review marketing consent through this website’s control.